last executing test programs: 2m4.498168505s ago: executing program 2 (id=3): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) listen(r1, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0xfffffffffffffc5f) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x81}}, './bus\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x48110000}, 0xc, &(0x7f0000000500)={&(0x7f0000001280)={0x64c, 0x0, 0x200, 0xc, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40000000}, @ETHTOOL_A_BITSET_VALUE={0xb7, 0x4, "b2995f9099f126b6c4e11f18dcf371270bd6397dc2e722e5aa182d2f657474fd5486a4d81c243b67f1982ffd78fae78129476f1fdc5903c9df70c031f7eb1fe681f8dd76d9918fc6c19868c3f5a991ba8eec30ef5f15446d85124957d222a59091d7c450a1caf22627607e72bfd56ea3f9406b28bf0aa00c31858284a267422581617e91306f46ac31ec8c2cc9043bf2e483f0e4013f52bebe9dc4be374fec783b1692a1e93b8f2ec03de6ac70a61e62c6a63c"}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'minixdf'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x260, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x8d, 0x5, "c5d10f9f6e95eecbf5283883a6ca504991b4041602e0546ce11d0315a40a4f43770ca2eb2edbc4f9b54d392056a0d0fd791b847fd427ac6b0d922e32af0fd0ea38254f25e5ac4f20b692611434fb5467441ffb70017cffc1da1da68fbb67d4471640cdba8d238c081dbec69982403231905a8a47a93e3e1e5480ab696b825e300ada7645e31c7424b3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1bc, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-\'\xfc\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '&\'}:]l}/[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-\'&\'&{\xd3[@\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$&C\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'init_itable'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'grpquota'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^/\\\xd2\xae\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nombcache'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'grpquota'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'grpquota'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'discard'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!,0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000001200)=[{{&(0x7f0000000380)=@file={0x727ac6ab3c94e6b0, './file0\x00'}, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="589870d12559030ded23c4c580632796db1e5f"}, {&(0x7f0000000440)="1f69fa00140b57920bd4ee890041f7b839aeb90b0054cd8e7bdb59aeee182342d92a0f4be657c461986419a769a8609f705c36fdc3500656d93a0e8a17b3"}, {&(0x7f0000000480)="c511b0e4302f276c63872a492fa8cf042b485a8bae308605b34beb4840ee89aab3289e0bb59b325503b716825146695609de"}, {&(0x7f00000004c0)="d575442ceae92b1affebd61a35d0205a098449b9a280058a4071fad2303ab62e298559ff668dcdae84ddfa89a387aa04b655a89c80d1f575a57313c3d589be28c332dea7639bc0261f490b2f30f8e0bcfe022c0efcd8780999361bf86ebc67b39b7032e45ee500b5e2ff375b2f76852bde375f7c073c045227eb9c950208d3dbb814265cbc5c7f7a300699571bafc9076157b1b59d654718e9a0"}], 0x0, &(0x7f0000000cc0), 0x0, 0x20000000}}], 0x3f, 0xc0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(r5, 0x0, 0x0) copy_file_range(r5, &(0x7f0000000380)=0x1, r2, &(0x7f0000000400)=0x9, 0x0, 0x0) r8 = fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) r9 = getuid() quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000002c0)=@md0, r9, &(0x7f0000000300)={0x1, 0x10, 0x1, 0x6}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f00000000c0)='\x00\x00\x00\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) syz_io_uring_setup(0xffd, &(0x7f00000007c0)={0x0, 0x7c67, 0x40, 0x0, 0x1ae}, &(0x7f0000000840), &(0x7f0000000880)) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 1m47.563768826s ago: executing program 32 (id=7): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64], 0xf, 0xb6, &(0x7f0000000700)="$eJzs1zFKA0EABdDviqutjQgW1tt4B48iltqIlSKIFxAv4h08gUfYPkWKbUPIBLIbEkiXYgPhvWLgz2fgt/M/+735aZLymZTm+mVSNl7f3p8envszHKUqyXmSiyS3l32e3vfdydC33cdj253uPq6/R98LAADsr8rdVvpKtSjDxbyUcrYurlInf8M/YaUedycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAoSwDAAD//ypQJeE=") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x480, 0x0) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0xb) mkdir(&(0x7f00000004c0)='./bus\x00', 0x1f0) mount$overlay(0x0, &(0x7f00000005c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}, {@xino_on}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="01ba2b58d39e065db21a8652abc1", 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x2}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000001200)=[{{&(0x7f0000000380)=@file={0x727ac6ab3c94e6b0, './file0\x00'}, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="589870d12559030ded23c4c580632796db1e5f"}, {&(0x7f0000000440)="1f69fa00140b57920bd4ee890041f7b839aeb90b0054cd8e7bdb59aeee182342d92a0f4be657c461986419a769a8609f705c36fdc3500656d93a0e8a17b3"}, {&(0x7f0000000480)="c511b0e4302f276c63872a492fa8cf042b485a8bae308605b34beb4840ee89aab3289e0bb59b325503b716825146695609de"}, {&(0x7f00000004c0)="d575442ceae92b1affebd61a35d0205a098449b9a280058a4071fad2303ab62e298559ff668dcdae84ddfa89a387aa04b655a89c80d1f575a57313c3d589be28c332dea7639bc0261f490b2f30f8e0bcfe022c0efcd8780999361bf86ebc67b39b7032e45ee500b5e2ff375b2f76852bde375f7c073c045227eb9c950208d3dbb814265cbc5c7f7a300699571bafc9076157b1b59d654718e9a0"}], 0x0, &(0x7f0000000cc0), 0x0, 0x20000000}}], 0x3f, 0xc0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(r5, 0x0, 0x0) copy_file_range(r5, &(0x7f0000000380)=0x1, r2, &(0x7f0000000400)=0x9, 0x0, 0x0) r8 = fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) r9 = getuid() quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000002c0)=@md0, r9, &(0x7f0000000300)={0x1, 0x10, 0x1, 0x6}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f00000000c0)='\x00\x00\x00\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) syz_io_uring_setup(0xffd, &(0x7f00000007c0)={0x0, 0x7c67, 0x40, 0x0, 0x1ae}, &(0x7f0000000840), &(0x7f0000000880)) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 21.057828864s ago: executing program 3 (id=236): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x3, 0x0, @dev}}, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xf3]}, &(0x7f0000000000)=0x100) r1 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000340)={r0, 0x6, 0xffff}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000140b9000000000000010000850200000000000000020000000000004300000000da"], 0x0, 0xffffffffffffffa4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000d40)={0x118, 0x1e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x105, 0xe7, 0x0, 0x1, [@typed={0xf, 0x1, 0x0, 0x0, @str='/dev/hwrng\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x118}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}]}, 0x3, 0x4cf, &(0x7f0000000740)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x0) 17.132655057s ago: executing program 3 (id=247): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r3 = dup2(r2, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448dd, 0x0) ioctl$HCIINQUIRY(r6, 0x400448e1, &(0x7f0000000240)={0x0, 0x0, "be5eec", 0x0, 0xff}) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c080) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="38008f0000", @ANYRES16=r5, @ANYBLOB="00012dbd7000fedbdf250000000008000400e0000002080002000000000014000c0000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4000046}, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f0000000040)={0x0, {0x5, 0x4}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x4010, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="8ee0e6493eeefbd9d4d6893cbc0dc41e4731787cae71370dea590589d2d7e3092935fdcb81a0913f77a7f48c6b4fa42158e396eb5c63ad7b7f0d9e7a3619f23cc4c0012ce004c9905eadcba7794838c5c756b4317ef775fe603d687e94ee6c4e3de44b9e04e002ca7648d9d6515df3e30aa8fd9597ec44771539233fe95a0fb71a33e8b6b288cd7a07a31810ed6a2e7aaf891779296841bc717119abbd00447c015e6233e9c287e484afa957", @ANYRES8, @ANYRES64=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRES16=0x0], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") 14.745404789s ago: executing program 4 (id=252): r0 = fanotify_init(0x20, 0x8000) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x1, 0x48001023, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) write$UHID_INPUT(r6, &(0x7f00000029c0)={0x9, {"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", 0xa6}}, 0x1006) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000700)={0x7, 0x0, 0xff}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TCSETS(r7, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r8 = syz_open_pts(r7, 0x101) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0x9631, 0x7b, 0x3aa89644, 0x2, 0x5, "98210febae91632ade8bbbd91a7c8f4c600d3c"}) r9 = dup3(r8, r7, 0x0) write$UHID_INPUT(r9, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_usb_connect$cdc_ecm(0x2, 0x80, &(0x7f0000000040)=ANY=[@ANYRESDEC=r10, @ANYRES8=r0, @ANYRESHEX=r7, @ANYRES64=r0, @ANYRES32=r9, @ANYRESHEX=r7, @ANYRES32=r0], 0x0) r11 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x0) ioctl$VIDIOC_S_SELECTION(r11, 0xc040565f, &(0x7f00000000c0)={0x9, 0x0, 0x0, {0x0, 0x0, 0xffffffff, 0x4080300}}) 14.688818992s ago: executing program 5 (id=253): syz_usb_connect(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb009dbd0109022400011b00000009040000022a3e7400090590ff7f0000100109050b362f4cce6955f2095a83d4d1556a0cb05fd22e8168ccd7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1ad886, 0x0) 11.973468249s ago: executing program 1 (id=256): unshare(0x8040600) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e70"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='&'], 0x10) 11.665373285s ago: executing program 3 (id=257): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x3, 0x0, @dev}}, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xf3]}, &(0x7f0000000000)=0x100) r1 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000340)={r0, 0x6, 0xffff}, 0x8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000d40)={0x118, 0x1e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x105, 0xe7, 0x0, 0x1, [@typed={0xf, 0x1, 0x0, 0x0, @str='/dev/hwrng\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x118}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}]}, 0x3, 0x4cf, &(0x7f0000000740)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x0) 11.609740789s ago: executing program 5 (id=258): ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000080)) 11.170247584s ago: executing program 1 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1000000}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) (fail_nth: 5) 10.376250026s ago: executing program 1 (id=260): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, 0x0) 9.974500289s ago: executing program 5 (id=261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0x90000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x0, 0x6b, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffff8, 0x10, 0xfffffffe, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="220000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x41}, @remote, 0x1}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0xb0000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000000)='omfs\x00', 0x840, &(0x7f00000003c0)=',\x00#\x18\x05}\xaf\x04\xf2\xda\xef\xc4\xed\x8cY\xd5.Q;\x98\x12\xfd\r/\x14 \x18\x84\xb4\xa3X\xf8\x94\xc6\x9eW\xdb\x83;\x96\xe3u\xd8\xa4\xf8\xae\x8e\x18\xaa\xaa\xf8X\x82\xf2\x93\xe8\x90$\x98\xda\xdc\vj\xdc\x9d\x98\x14\xe8\x17\xf6\x9e+\x92lc\xfa\xff\x99\xe7\x8dF|\x8bX\xec=\xed\x87\xebh\x92\xce+\x9c\xa4NY\x9d\'(\xcd\xc7*C=yJ\x04\x8d\x0fV\xcb\xed\x80g\x1f\x91\x8f1\x8d\x81{\xc8#\xb4\x13\xac\x1c\x86\xd7\x13\x10\xc8\xccV\x0f\xf6\xe9*\xa3\xb5\x98\xfa\xbf\x96\xf8p@\xbeG4\x15\xa0t@\x90\xf9\xae{\xe5\xb1c~\xc9\x80O\xc4\xdbA>\xef\xc0\xa3\x10\x9dg\x10w\xa5\xbb9?LD]\xaf\x9f\xc3\xf9D\'\xa1\xc4\xd6\x01\xa6d\xf5\x18\b6C\xb7\xfc') ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, {0x1, @multicast}, 0x1e, {0x2, 0x4e20, @remote}, 'veth1_to_team\x00'}) 9.411569402s ago: executing program 1 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') fchdir(r2) getrlimit(0x5, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0xa020a1, &(0x7f0000000180)={[{@notreelog}]}, 0xfe, 0x559a, &(0x7f0000005680)="$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") chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x2) 9.217516818s ago: executing program 0 (id=263): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4) 8.646371689s ago: executing program 3 (id=264): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYBLOB], 0x18}, 0x1, 0xf000000}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000)=0x9a61, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xa4, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x281ad0b8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x52}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4010}, 0x20040005) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r8, 0x0, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f00000001c0)={0x7, r5, 0x1}) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x107, 0x18, 0x0, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) 8.151779431s ago: executing program 0 (id=265): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5c5d}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(r2, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x9fb) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) close_range(r3, r3, 0x0) write$dsp(r0, &(0x7f0000000180)="f27457a24ccbfc29", 0x8) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffff760]}, 0x8) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x4004af07, &(0x7f0000001280)) 7.489632s ago: executing program 1 (id=266): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@gid}, {@discard}, {@fmask={'fmask', 0x3d, 0x81}}, {@allow_utime={'allow_utime', 0x3d, 0x1ff}}, {@errors_continue}, {@keep_last_dots}]}, 0x1, 0x14e1, &(0x7f0000002a80)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000440)={{0x5, 0x6, 0xe433, 0x9, '\x00', 0xd}, 0x6, 0x2, 0x4, r3, 0x2, 0x1, 'syz1\x00', &(0x7f00000002c0)=['{]-!&%[\\.,@\x00', '\x00'], 0xd}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)={0x3, 'dvmrp0\x00', {0x4}, 0x200}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) chdir(&(0x7f0000000100)='./file0\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000}, 0x40) getdents(0xffffffffffffffff, 0x0, 0x58) 7.452954434s ago: executing program 4 (id=267): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000007c0)=""/13, 0xd}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x0, 0x120, 0x210, 0x210, 0x120, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@hl={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3c}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x18}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff000000, 0xffffffff], [0x0, 0xff0000ff], 'xfrm0\x00', 'pimreg\x00', {}, {}, 0x16, 0x31, 0x3, 0x32}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3d, 0x22, 0xfe5}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x20}, [0xff, 0xffffffff, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff000000, 0xff000000], 'dvmrp0\x00', 'wg1\x00', {}, {}, 0x3a, 0x1, 0x5, 0x23}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) listen(r1, 0x1a103e43) syz_emit_ethernet(0xec, &(0x7f0000000000)={@local, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x3, 0xf3, "023b260dd4256b8eec2732c633f33b23aab4837375ead460a3477c3619ab2d21d17d6b89d4722d756a12b645107d529e73389e78933f4d2ed924864ff2ca9b1c0c34c4ce3fc4aca04cb1d363289b9b36e2d91fe60c1960fc0a4017539e5d583e8e9614d3a13644ccb37af356cece94bf010347ce682eaf14eabd219a30891cae1ca26fcf184554cb0b2779b4762adb1d6bc1ab435e92ac3a2f8072e2b10c0b54b3272094fb05617cc38cd199aa5258ad42a0110b66ab4961e6484c4c106e53d33d6124f79f5ae55d94e535759e47955bd4c6b1"}}}}, 0x0) 7.196027891s ago: executing program 5 (id=268): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010"], 0x54}}, 0x0) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000200)={@local, @loopback}, 0xc) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0x4a1, 0x5, 0xfffffffffffffffe, 0x4000004, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x8a4, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x3000000) 6.398004554s ago: executing program 4 (id=269): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000010"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB='uid=forget,noadinicb,iocharset=koi8-u,gid=ignore,dmode=000000000000000000004,rootdir=00000000000000000005,iocharset=macinuit,nostrict,mode=00000000000000000004622,\x00'], 0x1, 0xc39, &(0x7f0000000240)="$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") mount$nfs(&(0x7f0000000100)='..\xf6', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x20f1, 0x102) 6.281035154s ago: executing program 0 (id=270): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e5, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000000)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r3, r3, 0x0, 0x40008) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$9p_unix(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2006051, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x8, 0xc, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d80, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x20009, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x80, 0x8, 0x1, 0x40, 0xa3, 0x4, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0xffffffff, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x8, 0x7a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x200, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) fstat(r2, &(0x7f0000000240)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000080)='befs\x00', 0x800020, 0x0) 5.958519788s ago: executing program 1 (id=271): ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000080)) 5.954293906s ago: executing program 3 (id=272): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1}, 0x66) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xbc, 0xc, 0x40, 0xe0fd}, 0x0, 0x2, 0x0, 0xc, &(0x7f0000000380), 0x6}}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc9, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setreuid(0x0, 0xee00) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRESOCT=r1, @ANYRESDEC=r2], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001000000000000000000000000000f4ff0000000000000000000000b7c5583b78ea42c850aa322c23b8e0c54455f73ab8c8b2a1db2a7db77deae72f9b71d3f3aa8d97b59755822807fe2115c89a58a34c8563a7cb8c9fc68bc2888ad11ac0beb84b8e5d996cf9afd19d14129e21eeb8d0d4cf018011bae9c2423419946d55b203e82921d9c04881c5ebd7a6f331d38db8f578d2502ce7f6780cce81a9b5c83d392d18af0aa52869f328"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r7, 0x2) ioperm(0xb, 0x9, 0x7) chmod(0x0, 0x100) r8 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r8, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0xa4, 0x101000) ioctl$USBDEVFS_RELEASE_PORT(r9, 0x80045519, &(0x7f00000001c0)=0x2) 5.894890234s ago: executing program 4 (id=273): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010"], 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc801}, 0x80) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x200240, 0x0) io_uring_enter(r2, 0x6f18, 0xc8a5, 0x0, &(0x7f0000000280)={[0x8001]}, 0x8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000200)={@local, @loopback}, 0xc) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = io_uring_setup(0x1951, &(0x7f0000000140)={0x0, 0x1698, 0x4000, 0x1, 0x2b2}) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000001bc0)=""/102370, 0x18fe2, 0x20000004, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x6, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5], 0x0, 0x40000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000004c0)={[0x4a1, 0x5, 0xfffffffffffffffe, 0x4000004, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x8a4, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.861920604s ago: executing program 5 (id=274): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x3, 0x0, @dev}}, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xf3]}, &(0x7f0000000000)=0x100) r1 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000340)={r0, 0x6, 0xffff}, 0x8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000d40)={0x118, 0x1e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x105, 0xe7, 0x0, 0x1, [@typed={0xf, 0x1, 0x0, 0x0, @str='/dev/hwrng\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x118}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}]}, 0x3, 0x4cf, &(0x7f0000000740)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x0) 5.055266472s ago: executing program 0 (id=275): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4) 3.334003644s ago: executing program 3 (id=276): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1e", 0x1, 0x20048044, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000001f00)=""/4062, &(0x7f00000001c0)=0xfde) write$binfmt_script(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010800cea005003a092a26172e0102030109021200010400000000026202009e38b400"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="2000000013000318680907070000000f0000ff3f13000000170a001700000000", 0x20}], 0x1) syz_usb_connect(0x2, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12015002e9963a40132061843057010203010902240001029c10400904830802ff04340209058201100006040609050e"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f310000001725001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x24040041, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, &(0x7f00000002c0)={0x0, 0x23, 0xa2, {0xa2, 0x0, "ab0841d3f53ef195c80f4708364cf2c8866628bfc7790ffb5c446f70dbfe637a40487f52d09ea93e7b1e293378945069b60625c68622d1cd313edf72cc63fc0de676a5dde07a84cf8fcb5837eb772cb5b3d09fe8984df24775cc33fe6407914529aeae25783ac936efed787aea97844bbaf0ac785421573222ff6ff9315b8f9c14d02c4d13ec5b70c50121f676fc329715c22555a7b16d8c24b67bbe415813bf"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f0000000140)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0xb, "59ff4d4e"}, @main=@item_4={0x3, 0x0, 0xa, '$f[Q'}, @local=@item_012={0x0, 0x2, 0x8}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x444}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x20, 0x0, 0x3b, "21ae28f7402e177e232f76f055cec2c0d7c944c6e70a6609853ecc55a453bfac0affb31d78e8d0df6837919f35d216e746263b8c5fe3fef42bcb0f"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000580)={0x20, 0x1, 0x24, "b3fc305d56095a3c730f84151dc210d6b88f48265a911de9210c9c994e84ff6791fac90d"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0xf5}}) 3.245202126s ago: executing program 4 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f00000000c0)={[{@part={'part', 0x3d, 0x477}}, {@uid}, {@umask={'umask', 0x3d, 0x6}}, {@type={'type', 0x3d, "1dc3c051"}}, {@nls={'nls', 0x3d, 'cp775'}}, {@creator={'creator', 0x3d, "8e6c23a1"}}, {@part={'part', 0x3d, 0x1000}}, {@nobarrier}, {@nodecompose}]}, 0x1, 0x6f2, &(0x7f0000000480)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x0) fanotify_init(0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007916910000000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00'}) chdir(&(0x7f0000000080)='./file1\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000d00)={'#! ', './file0', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1a\xf1}M79?L\x98e\f\xb5\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe22\x80[\xc62\'\x8e\xafC!b\x12\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xf9H\xa2\xa8\x83\xcb\x1c\xdd\xdc\xd2}\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca,\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00'/233}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0hJ\xd6\xc4]\xca\xf1\x8f}|\xf5Z\x9c\xc9\x1f\xd9P'}, {0x20, 'ro\x00'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a6\xeb`\xd8\xaa\xbc\xed\xcf\xe8\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2.08262589s ago: executing program 5 (id=279): migrate_pages(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0xb, &(0x7f0000ffc000/0x1000)=nil) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000006800010002800000fcff7f0000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) getsockopt$inet_int(r3, 0x10d, 0xb2, &(0x7f0000000040), &(0x7f00000000c0)=0x3) socket$inet(0x2, 0x3, 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='@\an\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) getdents64(r6, &(0x7f0000000040)=""/41, 0x29) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000380)={0x2d, 0x6, 0x0, {0x4, 0x1, 0x4, 0x0, 'GPL\x00'}}, 0x2d) r10 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r10, &(0x7f0000000240)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) getdents64(r6, 0xfffffffffffffffe, 0x29) unshare(0x400) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x1, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]}, 0x78) 1.366641094s ago: executing program 0 (id=280): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000001"], 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x3, {0x0, 0x1}}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4a}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r8, 0x1, {0x1, 0xff, 0x1}, 0xfd}, 0x18) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000000)={0x1d, r10, 0x1, {0x0, 0x1}}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ip6gre0\x00', 0x6bf1c2d5adba8c32}) r11 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x844035, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x38, 0xd, 0x31, 0x32, 0x38, 0x63, 0x63], 0x2d, [0x57, 0x63, 0x64, 0x33], 0x2d, [0x35, 0x62, 0x61, 0x62], 0x2d, [0x34, 0x66, 0x61, 0x66], 0x2d, [0x39, 0x66, 0x33, 0x39, 0x35, 0x62, 0x35, 0x66]}}}]}}, 0x1, 0x0, &(0x7f0000000340)="28d33af4ee7cc5d03c8c81c46389a4acdd2216315beaa7ec63a3d4fb25403d3965cb55871080316f85de6b93046dd9585afe952106bdd9feb839a1889725e3f5dafdf82bf7051d5a3b1b225d2dd0e60fd291fb8bb29e03c8a76d9076fd522da4948c25bd86d4fcbbcebaf644f710f1ce2598") faccessat(r11, &(0x7f0000000440)='./file0\x00', 0x27) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val, @void, @eth={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="2fb240d90a0f", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast, @local}}}}}, 0x2e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r14 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r14, 0x106, 0x1, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESDEC=r13, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r13, @ANYRES8=r3], 0x4c}}, 0x24008040) 0s ago: executing program 4 (id=281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd2(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x619) (async) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000080)={0x4, 0xffff1000, 0x8, 0x1}) (async, rerun: 32) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0xfffffffffffffffe, 0xeeef0000, 0x4, r2, 0xd}) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6002003800080000fe800000000000000000000000000000fe8000000000000000000000000000aa73000103000008"], 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x100000000a, 0x0, 0x4, r2, 0x5}) kernel console output (not intermixed with test programs): descriptor?? [ 259.615209][ T5795] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.' [ 259.631822][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 259.940074][ T6086] netlink: 'syz.3.39': attribute type 11 has an invalid length. [ 259.999288][ T6086] FAULT_INJECTION: forcing a failure. [ 259.999288][ T6086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.013720][ T6086] CPU: 0 UID: 0 PID: 6086 Comm: syz.3.39 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 260.024552][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 260.034880][ T6086] Call Trace: [ 260.038369][ T6086] [ 260.041500][ T6086] dump_stack_lvl+0x216/0x2d0 [ 260.046522][ T6086] dump_stack+0x1e/0x24 [ 260.051004][ T6086] should_fail_ex+0x748/0x7f0 [ 260.056023][ T6086] should_fail+0x2a/0x40 [ 260.060589][ T6086] should_fail_usercopy+0x2e/0x40 [ 260.065964][ T6086] _copy_from_user+0x35/0x110 [ 260.070972][ T6086] kstrtouint_from_user+0x75/0x140 [ 260.076405][ T6086] ? proc_fail_nth_write+0x43/0x2e0 [ 260.081925][ T6086] ? vfs_write+0x48a/0x1540 [ 260.086758][ T6086] proc_fail_nth_write+0x62/0x2e0 [ 260.092090][ T6086] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 260.098016][ T6086] vfs_write+0x48a/0x1540 [ 260.102670][ T6086] ? stack_depot_save_flags+0x2c/0x750 [ 260.108464][ T6086] ? kmsan_get_metadata+0x13e/0x1c0 [ 260.114012][ T6086] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 260.120717][ T6086] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 260.126861][ T6086] ksys_write+0x240/0x4b0 [ 260.131530][ T6086] ? kmsan_get_metadata+0x13e/0x1c0 [ 260.137039][ T6086] __x64_sys_write+0x93/0xe0 [ 260.141960][ T6086] x64_sys_call+0x3161/0x3c30 [ 260.146969][ T6086] do_syscall_64+0xcd/0x1e0 [ 260.151758][ T6086] ? clear_bhb_loop+0x25/0x80 [ 260.156780][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.163025][ T6086] RIP: 0033:0x7f8bb63847df [ 260.167703][ T6086] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 260.187649][ T6086] RSP: 002b:00007f8bb7281030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 260.196390][ T6086] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8bb63847df [ 260.204632][ T6086] RDX: 0000000000000001 RSI: 00007f8bb72810a0 RDI: 000000000000000d [ 260.212881][ T6086] RBP: 00007f8bb7281090 R08: 0000000000000000 R09: 0000000000000000 [ 260.221091][ T6086] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 260.229283][ T6086] R13: 0000000000000000 R14: 00007f8bb6575fa0 R15: 00007ffd0fca6688 [ 260.237546][ T6086] [ 260.478828][ T8] gspca_sonixj: reg_r err -110 [ 260.484093][ T8] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 260.527017][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 261.113734][ T5797] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.126597][ T5797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.137027][ T5797] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.331034][ T5797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.415450][ T5797] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 261.428336][ T5797] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.727738][ T8] usb 5-1: USB disconnect, device number 2 [ 261.855144][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 262.013612][ T6103] loop4: detected capacity change from 0 to 64 [ 262.151475][ T44] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 262.160068][ T44] usb 2-1: config 0 has no interface number 0 [ 262.313826][ T44] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 262.323447][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.331928][ T44] usb 2-1: Product: syz [ 262.336431][ T44] usb 2-1: Manufacturer: syz [ 262.338989][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.341178][ T44] usb 2-1: SerialNumber: syz [ 262.383837][ T44] usb 2-1: config 0 descriptor?? [ 262.394106][ T1135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.610701][ T1135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.634774][ T44] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 262.643049][ T44] usb 2-1: No valid video chain found. [ 262.726867][ T44] usb 2-1: USB disconnect, device number 3 [ 262.884046][ T1135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.955310][ T5842] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 263.029962][ T1135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.102680][ T6112] FAULT_INJECTION: forcing a failure. [ 263.102680][ T6112] name failslab, interval 1, probability 0, space 0, times 1 [ 263.116222][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: syz.3.47 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 263.127041][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 263.137320][ T6112] Call Trace: [ 263.140769][ T6112] [ 263.143871][ T6112] dump_stack_lvl+0x216/0x2d0 [ 263.148848][ T6112] dump_stack+0x1e/0x24 [ 263.153276][ T6112] should_fail_ex+0x748/0x7f0 [ 263.158252][ T6112] should_failslab+0x17f/0x210 [ 263.163285][ T6112] __kmalloc_noprof+0x176/0x1230 [ 263.168532][ T6112] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 263.175197][ T6112] ? snd_pcm_hw_refine+0x11fa/0x2150 [ 263.180800][ T6112] ? kmsan_get_metadata+0x13e/0x1c0 [ 263.186262][ T6112] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 263.192341][ T6112] snd_pcm_hw_refine+0x11fa/0x2150 [ 263.197777][ T6112] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 263.204155][ T6112] ? _copy_from_user+0xce/0x110 [ 263.209299][ T6112] ? memdup_user+0x16c/0x1b0 [ 263.214161][ T6112] snd_pcm_hw_refine_user+0xd1/0x2d0 [ 263.219741][ T6112] snd_pcm_common_ioctl+0x756/0xb70 [ 263.225221][ T6112] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 263.231297][ T6112] snd_pcm_ioctl+0xae/0x110 [ 263.236051][ T6112] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 263.241419][ T6112] __se_sys_ioctl+0x246/0x440 [ 263.246487][ T6112] __x64_sys_ioctl+0x96/0xe0 [ 263.251414][ T6112] x64_sys_call+0x19f0/0x3c30 [ 263.256405][ T6112] do_syscall_64+0xcd/0x1e0 [ 263.261174][ T6112] ? clear_bhb_loop+0x25/0x80 [ 263.266154][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.272368][ T6112] RIP: 0033:0x7f8bb6385d29 [ 263.277012][ T6112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.296897][ T6112] RSP: 002b:00007f8bb7281038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.305607][ T6112] RAX: ffffffffffffffda RBX: 00007f8bb6575fa0 RCX: 00007f8bb6385d29 [ 263.313818][ T6112] RDX: 0000000020000380 RSI: 00000000c2604110 RDI: 0000000000000003 [ 263.322033][ T6112] RBP: 00007f8bb7281090 R08: 0000000000000000 R09: 0000000000000000 [ 263.330229][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.338419][ T6112] R13: 0000000000000000 R14: 00007f8bb6575fa0 R15: 00007ffd0fca6688 [ 263.346654][ T6112] [ 263.555794][ T5797] Bluetooth: hci5: command tx timeout [ 263.606724][ T5842] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 263.616748][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.668159][ T5842] usb 1-1: config 0 descriptor?? [ 263.684973][ T6092] chnl_net:caif_netlink_parms(): no params data found [ 263.875863][ T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 264.048870][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 264.098977][ T44] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 264.195467][ T1621] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 264.238607][ T5842] ath6kl: Failed to submit usb control message: -71 [ 264.246193][ T5842] ath6kl: unable to send the bmi data to the device: -71 [ 264.253584][ T5842] ath6kl: Unable to send get target info: -71 [ 264.260938][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 264.270807][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.279405][ T44] usb 4-1: Product: syz [ 264.283805][ T44] usb 4-1: Manufacturer: syz [ 264.288764][ T44] usb 4-1: SerialNumber: syz [ 264.307002][ T5842] ath6kl: Failed to init ath6kl core: -71 [ 264.318256][ T5842] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 264.365158][ T1936] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 264.407522][ T44] usb 4-1: config 0 descriptor?? [ 264.432294][ T5842] usb 1-1: USB disconnect, device number 6 [ 264.453337][ T1621] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 264.456083][ T44] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 264.463356][ T1621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.530170][ T1936] usb 2-1: Using ep0 maxpacket: 32 [ 264.550347][ T1936] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 264.559248][ T1936] usb 2-1: config 0 has no interface number 0 [ 264.566116][ T1936] usb 2-1: too many endpoints for config 0 interface 34 altsetting 102: 90, using maximum allowed: 30 [ 264.577829][ T1936] usb 2-1: config 0 interface 34 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 90 [ 264.591702][ T1936] usb 2-1: config 0 interface 34 has no altsetting 0 [ 264.605246][ T1936] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 264.614615][ T1936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.719318][ T1135] bridge_slave_1: left allmulticast mode [ 264.725599][ T1135] bridge_slave_1: left promiscuous mode [ 264.732804][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.761470][ T1936] usb 2-1: config 0 descriptor?? [ 264.814482][ T1621] usb 5-1: config 0 descriptor?? [ 264.824761][ T1135] bridge_slave_0: left allmulticast mode [ 264.831410][ T1135] bridge_slave_0: left promiscuous mode [ 264.838665][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.862802][ T6114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.873064][ T6114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.193454][ T44] gspca_zc3xx: reg_w_i err -110 [ 265.253288][ T6114] loop3: detected capacity change from 0 to 512 [ 265.548231][ T6114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.561878][ T6114] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.696091][ T5797] Bluetooth: hci5: command tx timeout [ 265.759814][ T1621] usb 5-1: string descriptor 0 read error: -71 [ 265.810566][ T1621] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 265.821530][ T1621] asix 5-1:0.0: probe with driver asix failed with error -71 [ 265.839535][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 265.859085][ T6130] binder: BINDER_SET_CONTEXT_MGR already set [ 265.865857][ T44] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 265.865902][ T6130] binder: 6129:6130 ioctl 4018620d 200001c0 returned -16 [ 265.881143][ T44] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 265.915273][ T1621] usb 5-1: USB disconnect, device number 3 [ 265.942977][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.166424][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.211989][ T1135] bond0 (unregistering): Released all slaves [ 266.420050][ T6121] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 266.581497][ T1936] usb 2-1: string descriptor 0 read error: -71 [ 266.601479][ T1936] gspca_main: sunplus-2.14.0 probing 041e:400b [ 266.657340][ T1621] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 266.690492][ T1936] gspca_sunplus: reg_w_riv err -71 [ 266.696372][ T1936] sunplus 2-1:0.34: probe with driver sunplus failed with error -71 [ 266.798247][ T1936] usb 2-1: USB disconnect, device number 4 [ 266.896534][ T1621] usb 5-1: Using ep0 maxpacket: 32 [ 266.936571][ T1621] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 266.945681][ T1621] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 266.955694][ T1621] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 266.965516][ T1621] usb 5-1: config 1 has no interface number 0 [ 266.971906][ T1621] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.983583][ T1621] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 266.997962][ T1621] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 267.007580][ T1621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.132001][ T6141] tipc: Started in network mode [ 267.137404][ T6141] tipc: Node identity 1, cluster identity 4711 [ 267.143884][ T6141] tipc: Node number set to 1 [ 267.213690][ T1621] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 267.370776][ T1135] hsr_slave_0: left promiscuous mode [ 267.394529][ T1621] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 267.405463][ T1135] hsr_slave_1: left promiscuous mode [ 267.446898][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 267.457356][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.472698][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.538226][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.546374][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.677761][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 267.697657][ T1135] veth1_macvtap: left promiscuous mode [ 267.703687][ T1135] veth0_macvtap: left promiscuous mode [ 267.709854][ T1135] veth1_vlan: left promiscuous mode [ 267.715586][ T1135] veth0_vlan: left promiscuous mode [ 267.724188][ T5797] Bluetooth: hci5: command tx timeout [ 267.726854][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 267.741879][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 267.828546][ T1936] usb 5-1: USB disconnect, device number 4 [ 267.836356][ T1936] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 268.068591][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 268.079267][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.089223][ T8] usb 1-1: Product: syz [ 268.093679][ T8] usb 1-1: Manufacturer: syz [ 268.100213][ T8] usb 1-1: SerialNumber: syz [ 268.137988][ T8] usb 1-1: config 0 descriptor?? [ 268.466709][ T8] appledisplay 1-1:0.0: Error while getting initial brightness: -110 [ 268.497943][ T8] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110 [ 268.620549][ T1621] usb 4-1: USB disconnect, device number 5 [ 268.781689][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.267099][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 269.359239][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 269.833984][ T5797] Bluetooth: hci5: command tx timeout [ 269.863572][ T6148] tipc: Started in network mode [ 269.869081][ T6148] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 269.881443][ T6148] tipc: Enabled bearer , priority 10 [ 269.974682][ T6143] loop0: detected capacity change from 0 to 128 [ 270.189358][ T6143] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 270.463393][ T1936] usb 1-1: USB disconnect, device number 7 [ 270.670826][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.678823][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.687361][ T6092] bridge_slave_0: entered allmulticast mode [ 270.696673][ T6092] bridge_slave_0: entered promiscuous mode [ 270.730071][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.738058][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.754250][ T6092] bridge_slave_1: entered allmulticast mode [ 270.763467][ T6092] bridge_slave_1: entered promiscuous mode [ 271.015200][ T1621] tipc: Node number set to 4269801642 [ 271.162055][ T6092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.182347][ T6092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.489344][ T6092] team0: Port device team_slave_0 added [ 271.594556][ T6092] team0: Port device team_slave_1 added [ 271.917979][ T6184] Bluetooth: MGMT ver 1.23 [ 271.958508][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.965984][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.998599][ T6092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.015321][ T5415] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 272.144140][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.151888][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.187438][ T6092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.225290][ T5415] usb 1-1: Using ep0 maxpacket: 32 [ 272.245598][ T5415] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 272.254017][ T5415] usb 1-1: config 0 has no interface number 0 [ 272.260750][ T5415] usb 1-1: too many endpoints for config 0 interface 34 altsetting 102: 90, using maximum allowed: 30 [ 272.272269][ T5415] usb 1-1: config 0 interface 34 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 90 [ 272.291316][ T5415] usb 1-1: config 0 interface 34 has no altsetting 0 [ 272.300177][ T5415] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 272.309783][ T5415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.326703][ T5415] usb 1-1: config 0 descriptor?? [ 272.618113][ T6092] hsr_slave_0: entered promiscuous mode [ 272.697664][ T6092] hsr_slave_1: entered promiscuous mode [ 272.725691][ T6092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.733798][ T6092] Cannot create hsr debugfs directory [ 272.943728][ T6193] loop4: detected capacity change from 0 to 512 [ 273.000794][ T5797] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 273.075780][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 273.102953][ T6183] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 273.225800][ T6193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.240871][ T6193] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.730780][ T6092] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 273.739668][ T5415] usb 1-1: string descriptor 0 read error: -71 [ 273.755300][ T5415] gspca_main: sunplus-2.14.0 probing 041e:400b [ 273.803674][ T6092] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.821261][ T5415] gspca_sunplus: reg_w_riv err -71 [ 273.829671][ T5415] sunplus 1-1:0.34: probe with driver sunplus failed with error -71 [ 273.886359][ T6092] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 274.030821][ T5415] usb 1-1: USB disconnect, device number 8 [ 274.097120][ T6092] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 274.541685][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.902459][ T6092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.946469][ T6092] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.004113][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.011954][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.015996][ T6212] block device autoloading is deprecated and will be removed. [ 275.027618][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.035428][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.312281][ T6092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.581157][ T6225] capability: warning: `syz.0.74' uses deprecated v2 capabilities in a way that may be insecure [ 275.616421][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'. [ 275.664230][ T6222] netlink: 'syz.1.73': attribute type 29 has an invalid length. [ 275.754061][ T6222] netlink: 'syz.1.73': attribute type 29 has an invalid length. [ 275.854806][ T6222] netlink: 'syz.1.73': attribute type 29 has an invalid length. [ 275.933130][ T29] audit: type=1326 audit(1737161010.019:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb6385d29 code=0x7ffc0000 [ 276.078554][ T29] audit: type=1326 audit(1737161010.119:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f8bb6385d29 code=0x7ffc0000 [ 276.101340][ T29] audit: type=1326 audit(1737161010.129:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb6385d29 code=0x7ffc0000 [ 276.125346][ T29] audit: type=1326 audit(1737161010.169:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb6385d29 code=0x7ffc0000 [ 276.407831][ T29] audit: type=1326 audit(1737161010.269:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8bb6385d29 code=0x7ffc0000 [ 276.431182][ T29] audit: type=1326 audit(1737161010.279:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb6385d29 code=0x7ffc0000 [ 276.453274][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.460116][ T29] audit: type=1326 audit(1737161010.279:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb6385d29 code=0x7ffc0000 [ 276.482386][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.494334][ T29] audit: type=1326 audit(1737161010.299:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8bb6385d29 code=0x7ffc0000 [ 276.516582][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.688514][ T6244] netlink: 104 bytes leftover after parsing attributes in process `syz.3.75'. [ 276.832891][ T6241] loop0: detected capacity change from 0 to 2048 [ 276.966561][ T6241] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 277.121139][ T6241] syz.0.76: attempt to access beyond end of device [ 277.121139][ T6241] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 277.138397][ T6249] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.175135][ T6248] loop4: detected capacity change from 0 to 256 [ 277.258154][ T6248] vfat: Unknown parameter 'sh[rtname' [ 277.418765][ T6248] loop4: detected capacity change from 0 to 64 [ 277.426157][ T6241] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 277.559694][ T6255] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 277.657790][ T6241] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 277.855477][ T5415] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 277.894171][ T6092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.927294][ T6259] FAULT_INJECTION: forcing a failure. [ 277.927294][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.941452][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.3.79 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 277.952283][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 277.962594][ T6259] Call Trace: [ 277.966077][ T6259] [ 277.969218][ T6259] dump_stack_lvl+0x216/0x2d0 [ 277.974499][ T6259] dump_stack+0x1e/0x24 [ 277.978988][ T6259] should_fail_ex+0x748/0x7f0 [ 277.984026][ T6259] should_fail+0x2a/0x40 [ 277.988599][ T6259] should_fail_usercopy+0x2e/0x40 [ 277.993967][ T6259] _copy_from_user+0x35/0x110 [ 277.999151][ T6259] ___sys_recvmsg+0x102/0x840 [ 278.004160][ T6259] ? __rcu_read_unlock+0x7b/0xe0 [ 278.009432][ T6259] ? __fget_files+0x42b/0x500 [ 278.014413][ T6259] ? kmsan_get_metadata+0x13e/0x1c0 [ 278.019916][ T6259] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 278.026053][ T6259] do_recvmmsg+0x45a/0xfc0 [ 278.030792][ T6259] ? filter_irq_stacks+0x60/0x1a0 [ 278.036139][ T6259] ? stack_depot_save_flags+0x2c/0x750 [ 278.041941][ T6259] ? x64_sys_call+0x35ba/0x3c30 [ 278.047158][ T6259] __x64_sys_recvmmsg+0x397/0x490 [ 278.052530][ T6259] x64_sys_call+0x35ba/0x3c30 [ 278.057570][ T6259] do_syscall_64+0xcd/0x1e0 [ 278.062353][ T6259] ? clear_bhb_loop+0x25/0x80 [ 278.067361][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.073593][ T6259] RIP: 0033:0x7f8bb6385d29 [ 278.078264][ T6259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.098207][ T6259] RSP: 002b:00007f8bb7281038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 278.106967][ T6259] RAX: ffffffffffffffda RBX: 00007f8bb6575fa0 RCX: 00007f8bb6385d29 [ 278.115223][ T6259] RDX: 040000000000012d RSI: 0000000020000080 RDI: 0000000000000003 [ 278.123464][ T6259] RBP: 00007f8bb7281090 R08: 0000000000000000 R09: 0000000000000000 [ 278.131704][ T6259] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 278.139940][ T6259] R13: 0000000000000000 R14: 00007f8bb6575fa0 R15: 00007ffd0fca6688 [ 278.148213][ T6259] [ 278.151626][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.294140][ T5415] usb 5-1: config 0 has an invalid interface number: 142 but max is 0 [ 278.302823][ T5415] usb 5-1: config 0 has no interface number 0 [ 278.374805][ T5415] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=2f.c1 [ 278.384551][ T5415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.393056][ T5415] usb 5-1: Product: syz [ 278.397687][ T5415] usb 5-1: Manufacturer: syz [ 278.402595][ T5415] usb 5-1: SerialNumber: syz [ 278.463461][ T5415] usb 5-1: config 0 descriptor?? [ 278.862905][ T29] audit: type=1800 audit(1737161012.949:11): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.78" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 278.883524][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.936187][ T6248] Trying to free block not in datazone [ 278.952949][ T6269] netlink: 'syz.0.80': attribute type 2 has an invalid length. [ 279.021181][ T5415] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 279.029533][ T1936] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 279.073644][ T5415] gspca_vc032x: reg_w err -71 [ 279.079009][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.084554][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.090243][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.095901][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.101475][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.107146][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.112804][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.119695][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.125452][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.130938][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.136621][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.150473][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.158444][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.163950][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.169613][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.175201][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.180697][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.186335][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.191833][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.197456][ T5415] gspca_vc032x: Unknown sensor... [ 279.202965][ T5415] vc032x 5-1:0.142: probe with driver vc032x failed with error -22 [ 279.226648][ T3805] Bluetooth: hci3: Frame reassembly failed (-84) [ 279.290674][ T6275] Bluetooth: hci3: Frame reassembly failed (-84) [ 279.296049][ T1936] usb 2-1: Using ep0 maxpacket: 32 [ 279.329710][ T1936] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 279.338660][ T1936] usb 2-1: config 0 has no interface number 0 [ 279.350553][ T1936] usb 2-1: too many endpoints for config 0 interface 34 altsetting 102: 90, using maximum allowed: 30 [ 279.363669][ T1936] usb 2-1: config 0 interface 34 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 90 [ 279.377558][ T1936] usb 2-1: config 0 interface 34 has no altsetting 0 [ 279.384748][ T1936] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 279.394254][ T1936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.563043][ T6269] loop0: detected capacity change from 0 to 128 [ 279.710591][ T6269] vfat: Unknown parameter 'D_HQp' [ 279.726043][ T1936] usb 2-1: config 0 descriptor?? [ 279.901202][ T5415] usb 5-1: USB disconnect, device number 5 [ 280.295815][ T6275] IPVS: set_ctl: invalid protocol: 37 160.28.0.0:31816 [ 280.857966][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.858043][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 280.865012][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.105302][ T5797] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 281.233138][ T6092] veth0_vlan: entered promiscuous mode [ 281.273951][ T1936] usb 2-1: string descriptor 0 read error: -71 [ 281.302099][ T1936] gspca_main: sunplus-2.14.0 probing 041e:400b [ 281.338208][ T1936] gspca_sunplus: reg_w_riv err -71 [ 281.343855][ T1936] sunplus 2-1:0.34: probe with driver sunplus failed with error -71 [ 281.346119][ T6294] loop3: detected capacity change from 0 to 256 [ 281.386005][ T6092] veth1_vlan: entered promiscuous mode [ 281.424596][ T1936] usb 2-1: USB disconnect, device number 5 [ 281.707265][ T6294] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 281.849580][ T6092] veth0_macvtap: entered promiscuous mode [ 281.886047][ T6092] veth1_macvtap: entered promiscuous mode [ 282.069519][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.080652][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.091907][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.103000][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.119717][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.132489][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.142848][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.153681][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.168555][ T6092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.187417][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.198543][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.208770][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.226197][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.238287][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.249093][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.259416][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.270258][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.285396][ T6092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.304112][ T6092] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.321256][ T6092] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.332614][ T6092] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.341802][ T6092] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.672015][ T1936] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 282.845281][ T1936] usb 4-1: Using ep0 maxpacket: 32 [ 282.886619][ T1936] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 282.895460][ T1936] usb 4-1: config 0 has no interface number 0 [ 282.903508][ T6305] loop1: detected capacity change from 0 to 2048 [ 282.941917][ T1936] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 282.951631][ T1936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.960157][ T1936] usb 4-1: Product: syz [ 282.964579][ T1936] usb 4-1: Manufacturer: syz [ 282.969681][ T1936] usb 4-1: SerialNumber: syz [ 282.997102][ T1936] usb 4-1: config 0 descriptor?? [ 283.046737][ T6305] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 283.051145][ T1936] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 283.126637][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 283.150935][ T6305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.254507][ T1936] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 283.308046][ T1936] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 283.345775][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 283.396704][ T44] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 283.405411][ T44] usb 5-1: config 0 has no interface number 0 [ 283.431717][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 114 [ 283.441462][ T5415] IPVS: starting estimator thread 0... [ 283.491771][ T44] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 283.501617][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.510553][ T44] usb 5-1: Product: syz [ 283.515177][ T44] usb 5-1: Manufacturer: syz [ 283.520220][ T44] usb 5-1: SerialNumber: syz [ 283.592254][ T6315] IPVS: using max 240 ests per chain, 12000 per kthread [ 283.638643][ T44] usb 5-1: config 0 descriptor?? [ 283.701459][ T44] smsc95xx v2.0.0 [ 284.103234][ T44] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 284.114705][ T44] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 284.341052][ T44] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 284.353637][ T44] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 284.440909][ T6320] loop1: detected capacity change from 0 to 256 [ 284.511567][ T6320] ======================================================= [ 284.511567][ T6320] WARNING: The mand mount option has been deprecated and [ 284.511567][ T6320] and is ignored by this kernel. Remove the mand [ 284.511567][ T6320] option from the mount to silence this warning. [ 284.511567][ T6320] ======================================================= [ 284.546888][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.629781][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 284.643996][ T44] usb 4-1: USB disconnect, device number 6 [ 284.703145][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 285.213421][ T6312] loop0: detected capacity change from 0 to 32768 [ 285.233231][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 285.248106][ T44] quatech2 4-1:0.51: device disconnected [ 285.360909][ T6320] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 285.446036][ T29] audit: type=1800 audit(1737161019.539:12): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.91" name="file2" dev="loop1" ino=1048600 res=0 errno=0 [ 285.538205][ T6312] (syz.0.90,6312,1):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 285.538205][ T6312] found = 1, set = 0, taken = 0, off = 0 [ 285.561121][ T6312] (syz.0.90,6312,1):ocfs2_load_local_alloc:356 ERROR: status = -22 [ 285.570708][ T6312] (syz.0.90,6312,1):ocfs2_check_volume:2456 ERROR: status = -22 [ 285.579836][ T6312] (syz.0.90,6312,1):ocfs2_check_volume:2484 ERROR: status = -22 [ 285.588223][ T6312] (syz.0.90,6312,1):ocfs2_mount_volume:1819 ERROR: status = -22 [ 285.700594][ T6320] syz.1.91: attempt to access beyond end of device [ 285.700594][ T6320] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 285.740213][ T6312] (syz.0.90,6312,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 285.883475][ T6320] syz.1.91: attempt to access beyond end of device [ 285.883475][ T6320] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 285.906591][ T6320] syz.1.91: attempt to access beyond end of device [ 285.906591][ T6320] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 285.988433][ T29] audit: type=1800 audit(1737161020.029:13): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.91" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 286.419007][ T1621] usb 5-1: USB disconnect, device number 6 [ 287.343296][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 287.486286][ T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 287.685277][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 287.710337][ T44] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 287.722532][ T44] usb 4-1: config 0 has no interface number 0 [ 287.732679][ T44] usb 4-1: too many endpoints for config 0 interface 34 altsetting 102: 90, using maximum allowed: 30 [ 287.749404][ T44] usb 4-1: config 0 interface 34 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 90 [ 287.765078][ T44] usb 4-1: config 0 interface 34 has no altsetting 0 [ 287.772115][ T44] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 287.781677][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.820947][ T44] usb 4-1: config 0 descriptor?? [ 288.135868][ T1936] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 288.365800][ T1936] usb 1-1: device descriptor read/64, error -71 [ 288.407626][ T6356] loop1: detected capacity change from 0 to 4096 [ 288.477433][ T6356] ntfs3: Unknown parameter ':m\!O4ߕkup H' [ 288.518740][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 288.536831][ T6348] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 288.622374][ T1936] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 288.677040][ T44] usb 4-1: string descriptor 0 read error: -71 [ 288.691725][ T44] gspca_main: sunplus-2.14.0 probing 041e:400b [ 288.745441][ T44] gspca_sunplus: reg_w_riv err -71 [ 288.751085][ T44] sunplus 4-1:0.34: probe with driver sunplus failed with error -71 [ 288.795854][ T1936] usb 1-1: device descriptor read/64, error -71 [ 288.890572][ T44] usb 4-1: USB disconnect, device number 7 [ 288.920768][ T1936] usb usb1-port1: attempt power cycle [ 289.315479][ T1936] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 289.466073][ T6356] loop1: detected capacity change from 0 to 2048 [ 289.476083][ T6356] hpfs: Unknown parameter '/dev/net/tun' [ 289.552560][ T1936] usb 1-1: device descriptor read/8, error -71 [ 290.065670][ T1936] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 290.114750][ T3850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.123191][ T3850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.158997][ T1936] usb 1-1: device descriptor read/8, error -71 [ 290.282915][ T1936] usb usb1-port1: unable to enumerate USB device [ 290.461201][ T3850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.469641][ T3850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.103740][ T6381] loop1: detected capacity change from 0 to 256 [ 291.385384][ T6381] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 292.093777][ T6386] netlink: 44 bytes leftover after parsing attributes in process `syz.3.102'. [ 292.275470][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 292.411159][ T6396] loop4: detected capacity change from 0 to 256 [ 292.420394][ T6396] vfat: Unknown parameter 'sh[rtname' [ 292.430596][ T6391] loop0: detected capacity change from 0 to 512 [ 292.445663][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 292.491367][ T44] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 292.500126][ T44] usb 2-1: config 0 has no interface number 0 [ 292.542538][ T44] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 292.559806][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.570457][ T44] usb 2-1: Product: syz [ 292.575146][ T44] usb 2-1: Manufacturer: syz [ 292.580000][ T44] usb 2-1: SerialNumber: syz [ 292.692554][ T44] usb 2-1: config 0 descriptor?? [ 292.735057][ T44] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 292.825364][ T6391] FAT-fs (loop0): bogus sectors per cluster 69 [ 292.832024][ T6391] FAT-fs (loop0): Can't find a valid FAT filesystem [ 293.138121][ T44] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 293.261822][ T44] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 293.609748][ T44] IPVS: starting estimator thread 0... [ 293.923717][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 114 [ 294.384404][ T1936] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 294.725422][ T6411] IPVS: using max 288 ests per chain, 14400 per kthread [ 294.752687][ T1936] usb 5-1: config 0 has an invalid interface number: 142 but max is 0 [ 294.765900][ T1936] usb 5-1: config 0 has no interface number 0 [ 294.777914][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024722a00: rx timeout, send abort [ 294.847176][ T1621] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 294.862548][ T1936] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=2f.c1 [ 294.873157][ T1936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.882602][ T1936] usb 5-1: Product: syz [ 294.885107][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 294.887140][ T1936] usb 5-1: Manufacturer: syz [ 294.899988][ T1936] usb 5-1: SerialNumber: syz [ 295.015645][ T1621] usb 6-1: Using ep0 maxpacket: 16 [ 295.061927][ T1936] usb 5-1: config 0 descriptor?? [ 295.082097][ T1621] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 295.090036][ T1621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 295.101716][ T1621] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 295.112973][ T1621] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 295.155798][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 295.215160][ T1621] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 295.225658][ T1621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.234120][ T1621] usb 6-1: Product: syz [ 295.238964][ T1621] usb 6-1: Manufacturer: syz [ 295.244111][ T1621] usb 6-1: SerialNumber: syz [ 295.286817][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024722a00: abort rx timeout. Force session deactivation [ 295.392451][ T1936] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 295.453091][ T8] usb 1-1: device descriptor read/all, error -71 [ 295.506084][ T1621] usb 6-1: config 0 descriptor?? [ 295.514513][ T6412] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 295.585987][ T1936] gspca_vc032x: reg_w err -71 [ 295.591098][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.596838][ T6412] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 295.605190][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.610876][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.613818][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024722800: rx timeout, send abort [ 295.616580][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.640845][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.648054][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 295.648578][ T1621] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 295.649003][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 295.669970][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.675836][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.681496][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.687308][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.692917][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.698614][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.704279][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.710058][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.718361][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.723980][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.740403][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.749207][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.755063][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.760741][ T1936] gspca_vc032x: I2c Bus Busy Wait 00 [ 295.766520][ T1936] gspca_vc032x: Unknown sensor... [ 295.772283][ T1936] vc032x 5-1:0.142: probe with driver vc032x failed with error -22 [ 296.056564][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 296.069673][ T5415] usb 2-1: USB disconnect, device number 6 [ 296.124677][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024722800: abort rx timeout. Force session deactivation [ 296.125473][ T1936] usb 5-1: USB disconnect, device number 7 [ 296.246769][ T6422] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 296.400542][ T44] usb 6-1: USB disconnect, device number 2 [ 296.411541][ T44] mcba_usb 6-1:0.0 can0: device disconnected [ 296.601579][ T6427] loop3: detected capacity change from 0 to 732 [ 296.713017][ T5415] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 296.763342][ T6431] capability: warning: `syz.0.114' uses 32-bit capabilities (legacy support in use) [ 296.896537][ T6431] loop0: detected capacity change from 0 to 4096 [ 296.980956][ T6431] loop0: detected capacity change from 0 to 256 [ 297.394325][ T5415] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 297.409843][ T5415] quatech2 2-1:0.51: device disconnected [ 298.051989][ T6443] loop1: detected capacity change from 0 to 256 [ 298.061326][ T6443] vfat: Unknown parameter 'sh[rtname' [ 298.089321][ T6443] loop1: detected capacity change from 0 to 64 [ 298.246138][ T6447] loop0: detected capacity change from 0 to 256 [ 298.318946][ T6441] netlink: zone id is out of range [ 298.324308][ T6441] netlink: zone id is out of range [ 298.380123][ T6444] netlink: 'syz.4.118': attribute type 1 has an invalid length. [ 298.397924][ T6444] netlink: 224 bytes leftover after parsing attributes in process `syz.4.118'. [ 298.582656][ T6447] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 298.743633][ T6444] loop4: detected capacity change from 0 to 512 [ 298.795308][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 298.948061][ T6444] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.118: invalid block [ 299.027394][ T44] usb 2-1: config 0 has an invalid interface number: 142 but max is 0 [ 299.037079][ T44] usb 2-1: config 0 has no interface number 0 [ 299.124215][ T6444] EXT4-fs (loop4): Remounting filesystem read-only [ 299.180128][ T6444] EXT4-fs (loop4): 2 truncates cleaned up [ 299.188115][ T6444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.432729][ T44] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=2f.c1 [ 299.443378][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.452524][ T44] usb 2-1: Product: syz [ 299.457439][ T44] usb 2-1: Manufacturer: syz [ 299.462308][ T44] usb 2-1: SerialNumber: syz [ 299.548185][ T44] usb 2-1: config 0 descriptor?? [ 299.555616][ T1621] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 299.642795][ T6459] netlink: 40 bytes leftover after parsing attributes in process `syz.3.123'. [ 299.755967][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.767570][ T1621] usb 1-1: Using ep0 maxpacket: 32 [ 299.812794][ T1621] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 299.821672][ T1621] usb 1-1: config 0 has no interface number 0 [ 299.863577][ T29] audit: type=1800 audit(1737161033.899:14): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.121" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 299.916820][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804638e800: rx timeout, send abort [ 299.926029][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804638f400: rx timeout, send abort [ 300.039060][ T44] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 300.049397][ T44] gspca_vc032x: reg_w err -71 [ 300.054420][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.060167][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.065767][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.071258][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.077703][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.083256][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.088852][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.094345][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.099975][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.105652][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.111135][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.117592][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.123176][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.128764][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.145147][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.153463][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.159129][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.164674][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.170475][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.176100][ T44] gspca_vc032x: Unknown sensor... [ 300.181618][ T44] vc032x 2-1:0.142: probe with driver vc032x failed with error -22 [ 300.426071][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804638e800: abort rx timeout. Force session deactivation [ 300.446401][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804638f400: abort rx timeout. Force session deactivation [ 300.611694][ T44] usb 2-1: USB disconnect, device number 7 [ 300.922307][ T1621] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 300.932425][ T1621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.940887][ T1621] usb 1-1: Product: syz [ 300.945408][ T1621] usb 1-1: Manufacturer: syz [ 300.951136][ T1621] usb 1-1: SerialNumber: syz [ 301.122147][ T1621] usb 1-1: config 0 descriptor?? [ 301.165327][ T1621] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 301.257045][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 301.576526][ T8] usb 5-1: config 0 has an invalid interface number: 100 but max is 0 [ 301.587578][ T8] usb 5-1: config 0 has no interface number 0 [ 301.594119][ T8] usb 5-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 301.605706][ T8] usb 5-1: config 0 interface 100 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 301.617902][ T8] usb 5-1: config 0 interface 100 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.855530][ T1621] usb 1-1: qt2_attach - failed to power on unit: -71 [ 301.863535][ T1621] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 301.966289][ T1621] usb 1-1: USB disconnect, device number 15 [ 302.373321][ T8] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 302.384575][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.393549][ T8] usb 5-1: Product: syz [ 302.398113][ T8] usb 5-1: Manufacturer: syz [ 302.402950][ T8] usb 5-1: SerialNumber: syz [ 302.718319][ T8] usb 5-1: config 0 descriptor?? [ 302.727939][ T6477] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 302.760685][ T8] port100 5-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 302.859979][ T1621] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 302.993991][ T6477] netlink: 'syz.4.126': attribute type 11 has an invalid length. [ 303.010772][ T6477] netlink: 148 bytes leftover after parsing attributes in process `syz.4.126'. [ 303.060671][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 303.145248][ T1621] usb 6-1: device descriptor read/64, error -71 [ 303.254997][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 303.274427][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 303.284716][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 303.295047][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 303.305282][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.337525][ T6477] loop4: detected capacity change from 0 to 2048 [ 303.412515][ T6502] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.430907][ T10] usb 4-1: config 0 descriptor?? [ 303.456284][ T1621] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 303.496222][ T10] appletouch 4-1:0.0: Could not find int-in endpoint [ 303.503332][ T10] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 303.515975][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 303.557733][ T8] usb 5-1: USB disconnect, device number 8 [ 303.559439][ T6500] loop1: detected capacity change from 0 to 256 [ 303.645237][ T1621] usb 6-1: device descriptor read/64, error -71 [ 303.693226][ T10] usb 4-1: USB disconnect, device number 8 [ 303.757578][ T1621] usb usb6-port1: attempt power cycle [ 303.768990][ T6500] process 'syz.1.135' launched './file1' with NULL argv: empty string added [ 304.167300][ T6510] loop0: detected capacity change from 0 to 16 [ 304.168531][ T1621] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 304.198229][ T6510] erofs (device loop0): mounted with root inode @ nid 36. [ 304.304199][ T1621] usb 6-1: device descriptor read/8, error -71 [ 304.452751][ T6510] erofs (device loop0): invalid logical cluster 0 at nid 36 [ 304.460749][ T6510] syz.0.137: attempt to access beyond end of device [ 304.460749][ T6510] loop0: rw=0, sector=296, nr_sectors = 8 limit=16 [ 304.474666][ T6510] erofs (device loop0): read error -5 @ 0 of nid 36 [ 304.481767][ T6510] erofs (device loop0): fail to readdir of logical block 0 of nid 36 [ 304.555485][ T1621] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 304.626832][ T1621] usb 6-1: device descriptor read/8, error -71 [ 304.751282][ T1621] usb usb6-port1: unable to enumerate USB device [ 304.919464][ T6522] loop3: detected capacity change from 0 to 256 [ 305.023376][ T6522] vfat: Unknown parameter 'sh[rtname' [ 305.477374][ T44] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 305.737036][ T44] usb 4-1: config 0 has an invalid interface number: 142 but max is 0 [ 305.745878][ T44] usb 4-1: config 0 has no interface number 0 [ 305.821811][ T44] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=2f.c1 [ 305.831946][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.840534][ T44] usb 4-1: Product: syz [ 305.845105][ T44] usb 4-1: Manufacturer: syz [ 305.850038][ T44] usb 4-1: SerialNumber: syz [ 305.917506][ T44] usb 4-1: config 0 descriptor?? [ 306.180973][ T44] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 306.217011][ T6531] loop0: detected capacity change from 0 to 4096 [ 306.247362][ T44] gspca_vc032x: reg_w err -71 [ 306.252281][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.258149][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.263635][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.269377][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.285595][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.291111][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.305419][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.310942][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.317400][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.322906][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.328554][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.334048][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.335256][ T6531] ntfs3(loop0): ino=3, Correct links count -> 2. [ 306.339616][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.351659][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.358110][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.363596][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.369206][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.374687][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.391252][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.399736][ T44] gspca_vc032x: Unknown sensor... [ 306.405308][ T44] vc032x 4-1:0.142: probe with driver vc032x failed with error -22 [ 306.427025][ T6531] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 306.485643][ T6531] ntfs3(loop0): Failed to load $LogFile (-22). [ 306.678382][ T44] usb 4-1: USB disconnect, device number 9 [ 307.267184][ T6531] loop0: detected capacity change from 0 to 1024 [ 307.376034][ T1621] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 307.572227][ T1621] usb 6-1: Using ep0 maxpacket: 32 [ 307.698498][ T6531] netlink: 72 bytes leftover after parsing attributes in process `syz.0.141'. [ 307.740220][ T1621] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 307.750387][ T1621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.758875][ T1621] usb 6-1: Product: syz [ 307.763349][ T1621] usb 6-1: Manufacturer: syz [ 307.768265][ T1621] usb 6-1: SerialNumber: syz [ 307.937867][ T1621] usb 6-1: config 0 descriptor?? [ 307.958628][ T6559] warning: `syz.1.149' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 308.298228][ T6546] loop5: detected capacity change from 0 to 512 [ 308.465265][ T6546] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.145: invalid block [ 308.579998][ T6546] EXT4-fs (loop5): Remounting filesystem read-only [ 308.635258][ T6546] EXT4-fs (loop5): 2 truncates cleaned up [ 308.643854][ T6546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.316941][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 309.339546][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.339653][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.340444][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.340535][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.341235][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.341324][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.342020][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.342110][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.342803][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.342892][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.343593][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.343748][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.344449][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.344538][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.345392][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.345483][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.346187][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.346276][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.346970][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.347065][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.347747][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.347835][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.348518][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.348608][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.349296][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.349384][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.350092][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.350181][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.350862][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.350952][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.351639][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.351728][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.352416][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.352504][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.353194][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.353282][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.353967][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.354063][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.354745][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.354896][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.355572][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.355663][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.356340][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.356428][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.357114][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.357201][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.357881][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 309.357965][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 309.358601][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.358696][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.359398][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.359496][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.360181][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.360339][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.361042][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.361136][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.361813][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.361907][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.362612][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.362707][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.363407][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.363503][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.364201][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.364297][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.365039][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.365131][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.365818][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.365916][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.366620][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.366716][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.367420][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.367515][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.368203][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.368299][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.368995][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.369090][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.369807][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.369902][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.370607][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.370702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.371383][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.371476][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.372144][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.372237][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.372907][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.373006][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.373677][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.373771][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.374455][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.374547][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.375292][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.375384][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.376065][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.376162][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.376859][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.377017][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.377805][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.377899][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.378598][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.378693][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.379366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.379461][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.380158][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.380255][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.380954][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.381056][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.381749][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.381842][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.382531][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.382627][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.383327][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.383423][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.384252][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.384360][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.385155][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.385255][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.385955][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.386064][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.386769][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 309.386866][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.390056][ T1621] airspy 6-1:0.0: usb_control_msg() failed -71 request 09 [ 309.390193][ T1621] airspy 6-1:0.0: Could not detect board [ 309.390587][ T1621] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 309.419131][ T1621] usb 6-1: USB disconnect, device number 7 [ 310.141135][ T6092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.982063][ T6599] loop1: detected capacity change from 0 to 256 [ 311.984393][ T6599] vfat: Unknown parameter 'sh[rtname' [ 312.105529][ T6602] loop4: detected capacity change from 0 to 164 [ 312.105664][ T6599] loop1: detected capacity change from 0 to 64 [ 312.528064][ T44] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 312.689392][ T44] usb 2-1: config 0 has an invalid interface number: 142 but max is 0 [ 313.017046][ T44] usb 2-1: config 0 has no interface number 0 [ 313.226272][ T44] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=2f.c1 [ 313.226455][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.226592][ T44] usb 2-1: Product: syz [ 313.226700][ T44] usb 2-1: Manufacturer: syz [ 313.226811][ T44] usb 2-1: SerialNumber: syz [ 313.270340][ T44] usb 2-1: config 0 descriptor?? [ 314.130241][ T29] audit: type=1800 audit(1737161048.229:15): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.158" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 314.197370][ T6604] loop3: detected capacity change from 0 to 32768 [ 314.227213][ T6599] Trying to free block not in datazone [ 314.323845][ T44] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 314.383234][ T44] gspca_vc032x: reg_w err -71 [ 314.388409][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.394030][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.399848][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.405468][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.410953][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.416831][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.422324][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.427948][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.433439][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.439111][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.444600][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.450290][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.455855][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.461335][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.477736][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.483245][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.491665][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.497273][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.502780][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.508436][ T44] gspca_vc032x: Unknown sensor... [ 314.513908][ T44] vc032x 2-1:0.142: probe with driver vc032x failed with error -22 [ 314.933809][ T44] usb 2-1: USB disconnect, device number 8 [ 314.971918][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 315.015656][ T6604] (syz.3.159,6604,0):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 315.015656][ T6604] found = 1, set = 0, taken = 0, off = 0 [ 315.036785][ T6604] (syz.3.159,6604,0):ocfs2_load_local_alloc:356 ERROR: status = -22 [ 315.046308][ T6604] (syz.3.159,6604,0):ocfs2_check_volume:2456 ERROR: status = -22 [ 315.054354][ T6604] (syz.3.159,6604,0):ocfs2_check_volume:2484 ERROR: status = -22 [ 315.062607][ T6604] (syz.3.159,6604,0):ocfs2_mount_volume:1819 ERROR: status = -22 [ 315.202583][ T6604] (syz.3.159,6604,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 315.835470][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 316.060956][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 316.287587][ T6647] loop0: detected capacity change from 0 to 256 [ 316.593999][ T6649] netlink: 'syz.3.168': attribute type 23 has an invalid length. [ 316.602655][ T6649] netlink: 244 bytes leftover after parsing attributes in process `syz.3.168'. [ 316.610393][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 316.622043][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.630697][ T10] usb 5-1: Product: syz [ 316.635305][ T10] usb 5-1: Manufacturer: syz [ 316.635420][ T10] usb 5-1: SerialNumber: syz [ 316.707740][ T10] usb 5-1: config 0 descriptor?? [ 316.996920][ T6647] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1325b4bc, utbl_chksum : 0xe619d30d) [ 317.049749][ T6638] loop4: detected capacity change from 0 to 512 [ 317.094672][ T6654] loop5: detected capacity change from 0 to 1024 [ 317.293239][ T6638] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.166: invalid block [ 317.359603][ T6638] EXT4-fs (loop4): Remounting filesystem read-only [ 317.383550][ T6654] afs: Unknown parameter 'dont_appraise' [ 317.424127][ T6638] EXT4-fs (loop4): 2 truncates cleaned up [ 317.432287][ T6638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.475405][ T10] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 317.482975][ T10] airspy 5-1:0.0: Could not detect board [ 317.490489][ T10] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 317.607608][ T10] usb 5-1: USB disconnect, device number 9 [ 317.625238][ T1621] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 317.705707][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 317.801204][ T1621] usb 1-1: too many configurations: 13, using maximum allowed: 8 [ 317.931065][ T8] usb 4-1: device descriptor read/64, error -71 [ 317.959864][ T2907] hfsplus: b-tree write err: -5, ino 4 [ 318.259872][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.5.172'. [ 318.269626][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.172'. [ 318.505605][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 318.607874][ T1621] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 318.618361][ T1621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.627807][ T1621] usb 1-1: Product: syz [ 318.632221][ T1621] usb 1-1: Manufacturer: syz [ 318.637966][ T1621] usb 1-1: SerialNumber: syz [ 318.655927][ T8] usb 4-1: device descriptor read/64, error -71 [ 318.677197][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.742613][ T1621] usb 1-1: config 0 descriptor?? [ 318.848837][ T8] usb usb4-port1: attempt power cycle [ 319.174515][ T6667] loop5: detected capacity change from 0 to 256 [ 319.185526][ T6667] vfat: Unknown parameter 'sh[rtname' [ 319.323074][ T1621] usb 1-1: USB disconnect, device number 16 [ 319.359451][ T6667] loop5: detected capacity change from 0 to 64 [ 319.398330][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 319.442889][ T8] usb 4-1: device descriptor read/8, error -71 [ 319.715467][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 319.726655][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 319.970597][ T10] usb 6-1: config 0 has an invalid interface number: 142 but max is 0 [ 319.979749][ T10] usb 6-1: config 0 has no interface number 0 [ 320.068849][ T10] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=2f.c1 [ 320.078604][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.087312][ T10] usb 6-1: Product: syz [ 320.091900][ T10] usb 6-1: Manufacturer: syz [ 320.097080][ T10] usb 6-1: SerialNumber: syz [ 320.177177][ T10] usb 6-1: config 0 descriptor?? [ 320.495671][ T8] usb 4-1: device descriptor read/8, error -71 [ 320.542503][ T6673] loop4: detected capacity change from 0 to 64 [ 320.565159][ T29] audit: type=1800 audit(1737161054.579:16): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.173" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 320.612212][ T8] usb usb4-port1: unable to enumerate USB device [ 320.645683][ T6673] BFS-fs: bfs_fill_super(): Impossible last inode number 6193 > 513 on loop4 [ 320.735445][ T6673] loop4: detected capacity change from 0 to 256 [ 320.757203][ T6675] netlink: 'syz.1.176': attribute type 3 has an invalid length. [ 320.765576][ T6675] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 320.773735][ T6675] netlink: 216 bytes leftover after parsing attributes in process `syz.1.176'. [ 320.783326][ T6675] NCSI netlink: No device for ifindex 33022 [ 320.851038][ T6667] Trying to free block not in datazone [ 320.973256][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 321.047239][ T10] gspca_vc032x: reg_w err -71 [ 321.052423][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.058154][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.063749][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.069457][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.075021][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.080507][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.086122][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.091609][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.097177][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.102660][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.108336][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.113844][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.123554][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.130083][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.135666][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.141171][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.146791][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.152296][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.159664][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.165263][ T10] gspca_vc032x: Unknown sensor... [ 321.170721][ T10] vc032x 6-1:0.142: probe with driver vc032x failed with error -22 [ 321.475486][ T6682] loop3: detected capacity change from 0 to 256 [ 321.516059][ T6682] vfat: Unknown parameter 'sh[rtname' [ 321.621911][ T6682] loop3: detected capacity change from 0 to 64 [ 321.679205][ T6686] netlink: 36 bytes leftover after parsing attributes in process `syz.4.179'. [ 321.688666][ T6686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.179'. [ 321.698017][ T6686] netlink: 36 bytes leftover after parsing attributes in process `syz.4.179'. [ 321.707337][ T6686] netlink: 36 bytes leftover after parsing attributes in process `syz.4.179'. [ 321.993116][ T10] usb 6-1: USB disconnect, device number 8 [ 322.045541][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 322.317686][ T8] usb 4-1: config 0 has an invalid interface number: 142 but max is 0 [ 322.327724][ T8] usb 4-1: config 0 has no interface number 0 [ 322.422162][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.477157][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 322.540798][ T8] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=2f.c1 [ 322.550920][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.560549][ T8] usb 4-1: Product: syz [ 322.565448][ T8] usb 4-1: Manufacturer: syz [ 322.570312][ T8] usb 4-1: SerialNumber: syz [ 322.818162][ T8] usb 4-1: config 0 descriptor?? [ 322.857037][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 322.963669][ T44] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 322.979406][ T44] usb 1-1: config 0 has no interface number 0 [ 322.988415][ T44] usb 1-1: too many endpoints for config 0 interface 34 altsetting 102: 90, using maximum allowed: 30 [ 323.000368][ T44] usb 1-1: config 0 interface 34 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 90 [ 323.014158][ T44] usb 1-1: config 0 interface 34 has no altsetting 0 [ 323.021906][ T44] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 323.031506][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.052201][ T44] usb 1-1: config 0 descriptor?? [ 323.249461][ T29] audit: type=1800 audit(1737161057.319:17): pid=6682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.177" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 323.394543][ T6696] 9pnet: Could not find request transport: fd [ 323.709533][ T6682] Trying to free block not in datazone [ 323.859932][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 323.992233][ T8] gspca_vc032x: reg_w err -71 [ 323.997731][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.003469][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.009170][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.014653][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.020306][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.025999][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.031487][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.037119][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.042605][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.048253][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.053728][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.059491][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.065090][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.070575][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.076142][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.081634][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.087577][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.094348][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.100248][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.105849][ T8] gspca_vc032x: Unknown sensor... [ 324.111313][ T8] vc032x 4-1:0.142: probe with driver vc032x failed with error -22 [ 324.296872][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 324.606007][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 324.743344][ T44] usb 1-1: string descriptor 0 read error: -71 [ 324.757894][ T44] gspca_main: sunplus-2.14.0 probing 041e:400b [ 324.879641][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 324.886118][ T44] gspca_sunplus: reg_w_riv err -71 [ 324.889411][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.894635][ T44] sunplus 1-1:0.34: probe with driver sunplus failed with error -71 [ 324.902434][ T10] usb 5-1: Product: syz [ 324.916923][ T10] usb 5-1: Manufacturer: syz [ 324.921768][ T10] usb 5-1: SerialNumber: syz [ 325.196573][ T44] usb 1-1: USB disconnect, device number 17 [ 325.215927][ T8] usb 4-1: USB disconnect, device number 14 [ 325.371149][ T10] usb 5-1: config 0 descriptor?? [ 325.819828][ T6708] loop4: detected capacity change from 0 to 512 [ 325.999492][ T6708] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.184: invalid indirect mapped block 4294967295 (level 1) [ 326.034749][ T6708] EXT4-fs (loop4): Remounting filesystem read-only [ 326.044157][ T6708] EXT4-fs (loop4): 2 truncates cleaned up [ 326.052806][ T6708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.078707][ T10] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 326.086444][ T10] airspy 5-1:0.0: Could not detect board [ 326.092610][ T10] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 326.222428][ T10] usb 5-1: USB disconnect, device number 10 [ 326.566721][ T6727] loop0: detected capacity change from 0 to 512 [ 326.636128][ T6727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.832895][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.190'. [ 326.842156][ T6729] netlink: 20 bytes leftover after parsing attributes in process `syz.5.190'. [ 326.872986][ T6727] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.189: invalid indirect mapped block 4294967295 (level 1) [ 326.997705][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.008932][ T6727] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.189: invalid indirect mapped block 4294967295 (level 1) [ 327.052100][ T6727] EXT4-fs (loop0): 2 truncates cleaned up [ 327.062309][ T6727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.843208][ T6741] loop1: detected capacity change from 0 to 256 [ 327.936910][ T6741] vfat: Unknown parameter 'sh[rtname' [ 328.460890][ T6741] loop1: detected capacity change from 0 to 64 [ 328.775365][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 328.825495][ T6752] loop5: detected capacity change from 0 to 256 [ 328.871392][ T6752] vfat: Unknown parameter 'sh[rtname' [ 328.950501][ T6752] loop5: detected capacity change from 0 to 64 [ 328.965833][ T6723] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 329.063966][ T10] usb 2-1: config 0 has an invalid interface number: 142 but max is 0 [ 329.073245][ T10] usb 2-1: config 0 has no interface number 0 [ 329.143734][ T10] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=2f.c1 [ 329.153600][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.162215][ T10] usb 2-1: Product: syz [ 329.167280][ T10] usb 2-1: Manufacturer: syz [ 329.172145][ T10] usb 2-1: SerialNumber: syz [ 329.335410][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 329.506609][ T10] usb 2-1: config 0 descriptor?? [ 329.610499][ T8] usb 6-1: config 0 has an invalid interface number: 142 but max is 0 [ 329.619377][ T8] usb 6-1: config 0 has no interface number 0 [ 329.739470][ T29] audit: type=1800 audit(1737161063.839:18): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.193" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 329.816642][ T8] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=2f.c1 [ 329.827228][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.836056][ T8] usb 6-1: Product: syz [ 329.840745][ T8] usb 6-1: Manufacturer: syz [ 329.845942][ T8] usb 6-1: SerialNumber: syz [ 329.891005][ T6741] Trying to free block not in datazone [ 329.914785][ T8] usb 6-1: config 0 descriptor?? [ 329.993903][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 330.016277][ T10] gspca_vc032x: reg_w err -71 [ 330.021382][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.027294][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.034428][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.039911][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.050139][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.055903][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.061576][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.067463][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.073165][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.078958][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.084546][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.090266][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.096026][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.101697][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.107454][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.113150][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.119012][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.124762][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.131050][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.138139][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.143632][ T10] gspca_vc032x: Unknown sensor... [ 330.149763][ T10] vc032x 2-1:0.142: probe with driver vc032x failed with error -22 [ 330.271221][ T29] audit: type=1800 audit(1737161064.339:19): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.196" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 330.353624][ T6752] Trying to free block not in datazone [ 330.442470][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 330.522680][ T8] gspca_vc032x: reg_w err -71 [ 330.523822][ T6755] loop3: detected capacity change from 0 to 4096 [ 330.528187][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528253][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528308][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528366][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528421][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528475][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528532][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528589][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528646][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528700][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528757][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528811][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528868][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528938][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.528997][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.529052][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.529109][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.529164][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.529221][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.529278][ T8] gspca_vc032x: Unknown sensor... [ 330.529564][ T8] vc032x 6-1:0.142: probe with driver vc032x failed with error -22 [ 330.716692][ T44] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 330.763282][ T10] usb 2-1: USB disconnect, device number 9 [ 330.789199][ T6761] loop0: detected capacity change from 0 to 256 [ 330.833090][ T8] usb 6-1: USB disconnect, device number 9 [ 330.925897][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 331.049274][ T44] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 331.067308][ T44] usb 5-1: config 0 has no interface number 0 [ 331.073718][ T44] usb 5-1: too many endpoints for config 0 interface 34 altsetting 102: 90, using maximum allowed: 30 [ 331.085316][ T44] usb 5-1: config 0 interface 34 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 90 [ 331.099027][ T44] usb 5-1: config 0 interface 34 has no altsetting 0 [ 331.106162][ T44] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 331.115693][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.386382][ T6764] FAULT_INJECTION: forcing a failure. [ 331.386382][ T6764] name failslab, interval 1, probability 0, space 0, times 0 [ 331.401897][ T6764] CPU: 0 UID: 0 PID: 6764 Comm: syz.3.197 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 331.412818][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 331.423139][ T6764] Call Trace: [ 331.426617][ T6764] [ 331.429745][ T6764] dump_stack_lvl+0x216/0x2d0 [ 331.434837][ T6764] dump_stack+0x1e/0x24 [ 331.439300][ T6764] should_fail_ex+0x748/0x7f0 [ 331.444294][ T6764] should_failslab+0x17f/0x210 [ 331.449342][ T6764] __kmalloc_noprof+0x176/0x1230 [ 331.454577][ T6764] ? ntfs_set_ea+0x9fe/0x1fe0 [ 331.459564][ T6764] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 331.466247][ T6764] ? kmsan_get_metadata+0x13e/0x1c0 [ 331.471754][ T6764] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 331.477855][ T6764] ntfs_set_ea+0x9fe/0x1fe0 [ 331.482700][ T6764] ? kmsan_get_metadata+0x13e/0x1c0 [ 331.488166][ T6764] ? kmsan_get_metadata+0x13e/0x1c0 [ 331.493624][ T6764] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 331.499712][ T6764] ntfs_setxattr+0x217/0xb70 [ 331.504554][ T6764] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 331.510628][ T6764] ? kmsan_get_metadata+0x13e/0x1c0 [ 331.516174][ T6764] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 331.522249][ T6764] ? __pfx_ntfs_setxattr+0x10/0x10 [ 331.527610][ T6764] __vfs_setxattr+0x844/0x8b0 [ 331.532591][ T6764] ? kmsan_get_metadata+0x13e/0x1c0 [ 331.538073][ T6764] __vfs_setxattr_noperm+0x22f/0xb00 [ 331.543682][ T6764] __vfs_setxattr_locked+0x444/0x480 [ 331.549293][ T6764] vfs_setxattr+0x294/0x650 [ 331.554103][ T6764] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 331.560186][ T6764] filename_setxattr+0x3bc/0x760 [ 331.565401][ T6764] path_setxattrat+0x53d/0x760 [ 331.570454][ T6764] ? kmsan_get_metadata+0x13e/0x1c0 [ 331.575947][ T6764] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 331.582611][ T6764] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 331.589020][ T6764] __x64_sys_setxattr+0xfc/0x190 [ 331.594239][ T6764] x64_sys_call+0x2838/0x3c30 [ 331.599236][ T6764] do_syscall_64+0xcd/0x1e0 [ 331.604006][ T6764] ? clear_bhb_loop+0x25/0x80 [ 331.608993][ T6764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.615195][ T6764] RIP: 0033:0x7f8bb6385d29 [ 331.619848][ T6764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.639746][ T6764] RSP: 002b:00007f8bb7260038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 331.648464][ T6764] RAX: ffffffffffffffda RBX: 00007f8bb6576080 RCX: 00007f8bb6385d29 [ 331.656687][ T6764] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 00000000200001c0 [ 331.664890][ T6764] RBP: 00007f8bb7260090 R08: 0000000000000000 R09: 0000000000000000 [ 331.673114][ T6764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.681317][ T6764] R13: 0000000000000001 R14: 00007f8bb6576080 R15: 00007ffd0fca6688 [ 331.689542][ T6764] [ 331.695952][ T44] usb 5-1: config 0 descriptor?? [ 332.735873][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 332.823964][ T44] usb 5-1: string descriptor 0 read error: -71 [ 332.838495][ T44] gspca_main: sunplus-2.14.0 probing 041e:400b [ 332.896894][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 332.917135][ T44] gspca_sunplus: reg_w_riv err -71 [ 332.922980][ T44] sunplus 5-1:0.34: probe with driver sunplus failed with error -71 [ 332.998343][ T8] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 333.008663][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.017584][ T8] usb 1-1: Product: syz [ 333.022019][ T8] usb 1-1: Manufacturer: syz [ 333.027058][ T8] usb 1-1: SerialNumber: syz [ 333.052801][ T44] usb 5-1: USB disconnect, device number 11 [ 333.115232][ T8] usb 1-1: config 0 descriptor?? [ 333.173900][ T6782] input: syz1 as /devices/virtual/input/input5 [ 333.496455][ T6772] loop0: detected capacity change from 0 to 512 [ 333.526190][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 333.757519][ T5836] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 333.841648][ T6772] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.202: invalid indirect mapped block 4294967295 (level 1) [ 333.943402][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 333.948452][ T6772] EXT4-fs (loop0): Remounting filesystem read-only [ 333.965220][ T6772] EXT4-fs (loop0): 2 truncates cleaned up [ 333.972968][ T6772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.998305][ T8] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 334.006118][ T8] airspy 1-1:0.0: Could not detect board [ 334.012567][ T8] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 334.048225][ T8] usb 1-1: USB disconnect, device number 18 [ 334.107480][ T10] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 334.117390][ T10] usb 6-1: config 0 has no interface number 0 [ 334.123978][ T10] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 334.209378][ T5836] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 334.218116][ T5836] usb 4-1: config 0 has no interface number 0 [ 334.224594][ T5836] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 334.237176][ T5836] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 334.272154][ T10] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 334.282009][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.290433][ T10] usb 6-1: Product: syz [ 334.295476][ T10] usb 6-1: Manufacturer: syz [ 334.300352][ T10] usb 6-1: SerialNumber: syz [ 334.381084][ T5836] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58 [ 334.391438][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.399872][ T5836] usb 4-1: Product: syz [ 334.404277][ T5836] usb 4-1: Manufacturer: syz [ 334.409307][ T5836] usb 4-1: SerialNumber: syz [ 334.480066][ T10] usb 6-1: config 0 descriptor?? [ 334.499378][ T6785] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 334.660249][ T5836] usb 4-1: config 0 descriptor?? [ 334.718605][ T10] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 334.729049][ T10] em28xx 6-1:0.132: Video interface 132 found: bulk [ 334.775240][ T5836] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input6 [ 334.803085][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.924459][ T5836] usb 4-1: USB disconnect, device number 15 [ 334.952974][ T10] em28xx 6-1:0.132: chip ID is em28174 [ 335.377288][ T6802] loop0: detected capacity change from 0 to 256 [ 335.388025][ T6802] vfat: Unknown parameter 'sh[rtname' [ 335.573148][ T6782] netlink: 'syz.5.206': attribute type 10 has an invalid length. [ 335.826293][ T6802] loop0: detected capacity change from 0 to 64 [ 335.890252][ T6782] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 335.953742][ T6808] loop4: detected capacity change from 0 to 256 [ 335.986350][ T6808] vfat: Unknown parameter 'sh[rtname' [ 336.089589][ T10] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 336.102905][ T10] em28xx 6-1:0.132: board has no eeprom [ 336.173731][ T6808] loop4: detected capacity change from 0 to 64 [ 336.245255][ T10] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 336.253617][ T10] em28xx 6-1:0.132: analog set to bulk mode. [ 336.263950][ T1621] em28xx 6-1:0.132: Registering V4L2 extension [ 336.285396][ T44] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 336.390464][ T10] usb 6-1: USB disconnect, device number 10 [ 336.398511][ T10] em28xx 6-1:0.132: Disconnecting em28xx [ 336.516204][ T44] usb 1-1: config 0 has an invalid interface number: 142 but max is 0 [ 336.525013][ T44] usb 1-1: config 0 has no interface number 0 [ 336.555669][ T5415] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 336.608746][ T44] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=2f.c1 [ 336.618476][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.627013][ T44] usb 1-1: Product: syz [ 336.631440][ T44] usb 1-1: Manufacturer: syz [ 336.636441][ T44] usb 1-1: SerialNumber: syz [ 336.718308][ T44] usb 1-1: config 0 descriptor?? [ 336.833752][ T5415] usb 5-1: config 0 has an invalid interface number: 142 but max is 0 [ 336.842762][ T5415] usb 5-1: config 0 has no interface number 0 [ 336.956688][ T29] audit: type=1800 audit(1737161071.029:20): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.210" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 337.009618][ T5415] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=2f.c1 [ 337.019632][ T5415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.028345][ T5415] usb 5-1: Product: syz [ 337.032938][ T5415] usb 5-1: Manufacturer: syz [ 337.038073][ T5415] usb 5-1: SerialNumber: syz [ 337.091081][ T6802] Trying to free block not in datazone [ 337.325342][ T5415] usb 5-1: config 0 descriptor?? [ 337.334268][ T44] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 337.385393][ T44] gspca_vc032x: reg_w err -71 [ 337.390433][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.396274][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.401892][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.418223][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.423748][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.432232][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.437867][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.443366][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.449032][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.454534][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.460268][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.465882][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.471378][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.478858][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.484352][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.490318][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.495907][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.501409][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.517723][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.523231][ T44] gspca_vc032x: Unknown sensor... [ 337.531731][ T44] vc032x 1-1:0.142: probe with driver vc032x failed with error -22 [ 337.641991][ T5415] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 337.725783][ T5415] gspca_vc032x: reg_w err -71 [ 337.730715][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.737958][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.743487][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.750693][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.756859][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.762358][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.768019][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.773505][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.779160][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.784656][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.790292][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.797866][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.803374][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.809050][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.826713][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.832263][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.845119][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.850636][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.856379][ T5415] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.861880][ T5415] gspca_vc032x: Unknown sensor... [ 337.867465][ T5415] vc032x 5-1:0.142: probe with driver vc032x failed with error -22 [ 338.160104][ T44] usb 1-1: USB disconnect, device number 19 [ 338.281474][ T6828] loop5: detected capacity change from 0 to 512 [ 338.571550][ T5415] usb 5-1: USB disconnect, device number 12 [ 339.069894][ T1621] usb 6-1: Decoder not found [ 339.074796][ T1621] em28xx 6-1:0.132: failed to create media graph [ 339.099092][ T1621] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 339.127995][ T1621] em28xx 6-1:0.132: Remote control support is not available for this card. [ 339.291713][ T10] em28xx 6-1:0.132: Closing input extension [ 339.678897][ T6828] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.214: bg 0: block 248: padding at end of block bitmap is not set [ 339.769464][ T6828] Quota error (device loop5): write_blk: dquota write failed [ 339.777856][ T6828] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 339.791368][ T6828] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.214: Failed to acquire dquot type 1 [ 339.932428][ T6828] EXT4-fs (loop5): 1 truncate cleaned up [ 340.000649][ T6828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.013925][ T6828] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.034040][ T10] em28xx 6-1:0.132: Freeing device [ 340.088132][ T5415] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 340.256279][ T5415] usb 4-1: Using ep0 maxpacket: 32 [ 340.288921][ T6828] macvlan0: entered promiscuous mode [ 340.370518][ T5415] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 340.387162][ T5415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.401258][ T5415] usb 4-1: Product: syz [ 340.405906][ T5415] usb 4-1: Manufacturer: syz [ 340.410864][ T5415] usb 4-1: SerialNumber: syz [ 340.415288][ T6828] ipvlan0: entered promiscuous mode [ 340.426026][ T6828] ipvlan0: left promiscuous mode [ 340.523748][ T5415] usb 4-1: config 0 descriptor?? [ 340.556553][ T6828] macvlan0: left promiscuous mode [ 340.865902][ T6849] loop3: detected capacity change from 0 to 512 [ 341.041510][ T6857] loop1: detected capacity change from 0 to 4096 [ 341.238118][ T6857] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 341.353344][ T6849] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.220: invalid indirect mapped block 4294967295 (level 1) [ 341.411033][ T6843] loop4: detected capacity change from 0 to 4096 [ 341.457475][ T6843] ntfs3: Unknown parameter 'f' [ 341.531878][ T6849] EXT4-fs (loop3): Remounting filesystem read-only [ 341.595503][ T6849] EXT4-fs (loop3): 2 truncates cleaned up [ 341.604104][ T6828] ext4: Unknown parameter '2#d^uC/^yѨ?J?jn"rEgLJ>3~ȅ3dOap'̬.ze-SػN_ǶvvB&Wp' [ 341.630759][ T6849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.645518][ T5415] airspy 4-1:0.0: usb_control_msg() failed -110 request 09 [ 341.653043][ T5415] airspy 4-1:0.0: Could not detect board [ 341.662427][ T5415] airspy 4-1:0.0: probe with driver airspy failed with error -110 [ 341.683953][ T6828] syz.5.214 (6828) used greatest stack depth: 3888 bytes left [ 341.755464][ T5415] usb 4-1: USB disconnect, device number 16 [ 341.859348][ T6865] loop0: detected capacity change from 0 to 512 [ 341.943930][ T6857] ntfs3(loop1): Failed to load $Extend (-22). [ 341.950542][ T6857] ntfs3(loop1): Failed to initialize $Extend. [ 342.010054][ T6865] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 342.024611][ T6865] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 342.154441][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.161473][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.268679][ T6865] EXT4-fs (loop0): 1 truncate cleaned up [ 342.277305][ T6865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.378277][ T6092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.474270][ T6865] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.222: corrupted in-inode xattr: overlapping e_value [ 342.575421][ T6865] EXT4-fs (loop0): Remounting filesystem read-only [ 342.582231][ T6865] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1772: inode #15: comm syz.0.222: unable to update i_inline_off [ 342.598612][ T6865] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 342.854009][ T6874] loop4: detected capacity change from 0 to 512 [ 342.889789][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.931710][ T6874] EXT4-fs: Ignoring removed mblk_io_submit option [ 343.007973][ T6874] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 343.109662][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.161982][ T6874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 343.236954][ T6874] System zones: 1-12 [ 343.246560][ T6874] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.224: corrupted in-inode xattr: e_value size too large [ 343.277093][ T6874] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.224: couldn't read orphan inode 15 (err -117) [ 343.382747][ T6883] program syz.0.227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.394587][ T6874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.572484][ T6883] bond1: entered promiscuous mode [ 343.578112][ T6883] bond1: entered allmulticast mode [ 343.588460][ T6883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.077786][ T6883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.227'. [ 344.087303][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.227'. [ 344.165481][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 344.196805][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 344.203200][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 344.212952][ T5792] Bluetooth: hci4: command 0x0406 tx timeout [ 344.280539][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 344.295455][ T1621] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 344.345448][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 344.645315][ T10] usb 4-1: config 56 has an invalid descriptor of length 94, skipping remainder of the config [ 344.656111][ T10] usb 4-1: config 56 has 0 interfaces, different from the descriptor's value: 1 [ 344.749108][ T1621] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 344.758189][ T1621] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 344.767033][ T1621] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.778549][ T1621] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 344.788298][ T1621] usb 2-1: config 0 has no interface number 0 [ 344.794908][ T1621] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 344.805305][ T1621] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 344.816829][ T1621] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 344.827220][ T1621] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.841335][ T1621] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 344.851573][ T1621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.037547][ T1621] usb 2-1: config 0 descriptor?? [ 345.057673][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.069567][ T1621] gspca_main: spca561-2.14.0 probing abcd:cdee [ 345.084796][ T10] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 345.094614][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.103100][ T10] usb 4-1: Product: syz [ 345.108257][ T10] usb 4-1: Manufacturer: syz [ 345.113285][ T10] usb 4-1: SerialNumber: syz [ 345.482938][ T1621] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 345.494377][ T1621] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.503066][ T1621] usb 2-1: MIDIStreaming interface descriptor not found [ 345.537353][ T6887] fuse: Unknown parameter '00000000000000000000!K`IlW٣ú6N#od>jQ)K9{EeCU5›\ktfF]gF|qpmG' [ 345.896052][ T10] usb 4-1: USB disconnect, device number 17 [ 345.935254][ T1621] usb 2-1: USB disconnect, device number 10 [ 346.395534][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.765139][ T5415] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 347.975584][ T5415] usb 4-1: Using ep0 maxpacket: 32 [ 348.057839][ T5415] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 348.072252][ T5415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.080907][ T5415] usb 4-1: Product: syz [ 348.085455][ T5415] usb 4-1: Manufacturer: syz [ 348.090314][ T5415] usb 4-1: SerialNumber: syz [ 348.189601][ T5415] usb 4-1: config 0 descriptor?? [ 348.365794][ T1621] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 348.500778][ T6923] loop3: detected capacity change from 0 to 512 [ 348.566517][ T1621] usb 1-1: Using ep0 maxpacket: 8 [ 348.639886][ T1621] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 348.648602][ T1621] usb 1-1: config 0 has no interface number 0 [ 348.655101][ T1621] usb 1-1: config 0 interface 89 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 348.666244][ T1621] usb 1-1: config 0 interface 89 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 348.678729][ T1621] usb 1-1: config 0 interface 89 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 348.775535][ T1621] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=dd.3e [ 348.785151][ T1621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.793451][ T1621] usb 1-1: Product: syz [ 348.798091][ T1621] usb 1-1: Manufacturer: syz [ 348.802948][ T1621] usb 1-1: SerialNumber: syz [ 348.850162][ T1621] usb 1-1: config 0 descriptor?? [ 348.885944][ T6923] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.236: invalid block [ 349.106670][ T1621] snd-usb-audio 1-1:0.89: probe with driver snd-usb-audio failed with error -71 [ 349.303706][ T1621] usb 1-1: USB disconnect, device number 20 [ 349.345901][ T6923] EXT4-fs (loop3): Remounting filesystem read-only [ 349.364952][ T6923] EXT4-fs (loop3): 2 truncates cleaned up [ 349.372577][ T6923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.454788][ T5415] airspy 4-1:0.0: usb_control_msg() failed -110 request 09 [ 349.463863][ T5415] airspy 4-1:0.0: Could not detect board [ 349.472870][ T5415] airspy 4-1:0.0: probe with driver airspy failed with error -110 [ 349.566425][ T5415] usb 4-1: USB disconnect, device number 18 [ 350.376665][ T6941] loop1: detected capacity change from 0 to 4096 [ 350.727054][ T6941] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 352.294105][ T6941] ntfs3(loop1): Failed to read $UpCase (-4). [ 352.586832][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.075630][ T5415] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 354.237858][ T44] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 354.332910][ T6974] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 354.384233][ T5415] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 354.397047][ T5415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.411642][ T5415] usb 2-1: Product: syz [ 354.418119][ T5415] usb 2-1: Manufacturer: syz [ 354.422973][ T5415] usb 2-1: SerialNumber: syz [ 354.464333][ T44] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.475812][ T44] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 19503, setting to 1024 [ 354.490186][ T44] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 354.534401][ T5415] usb 2-1: config 0 descriptor?? [ 354.577292][ T6976] loop4: detected capacity change from 0 to 4096 [ 354.644528][ T44] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 354.654624][ T44] usb 6-1: New USB device strings: Mfr=0, Product=157, SerialNumber=189 [ 354.663735][ T44] usb 6-1: Product: syz [ 354.671210][ T44] usb 6-1: SerialNumber: syz [ 354.706924][ T6982] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 354.741857][ T6987] loop0: detected capacity change from 0 to 8 [ 354.841529][ T6976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.876256][ T44] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.889456][ T44] usb 6-1: invalid MIDI in EP 0 [ 354.910910][ T5415] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 354.931895][ T5415] peak_usb 2-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 355.079020][ T5415] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 355.171109][ T44] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 355.189099][ T5415] usb 2-1: USB disconnect, device number 11 [ 355.194418][ T44] usb 6-1: USB disconnect, device number 11 [ 355.262672][ T6983] loop3: detected capacity change from 0 to 8192 [ 355.578267][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.886055][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 356.148950][ T1621] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 356.305948][ T1621] usb 5-1: device descriptor read/64, error -71 [ 356.583463][ T7003] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 356.583555][ T7003] netlink: 224 bytes leftover after parsing attributes in process `syz.3.257'. [ 356.763186][ T1621] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 356.900933][ T7006] FAULT_INJECTION: forcing a failure. [ 356.900933][ T7006] name failslab, interval 1, probability 0, space 0, times 0 [ 356.901079][ T7006] CPU: 0 UID: 0 PID: 7006 Comm: syz.1.259 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 356.901238][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 356.901324][ T7006] Call Trace: [ 356.901382][ T7006] [ 356.901434][ T7006] dump_stack_lvl+0x216/0x2d0 [ 356.901629][ T7006] dump_stack+0x1e/0x24 [ 356.901791][ T7006] should_fail_ex+0x748/0x7f0 [ 356.901982][ T7006] should_failslab+0x17f/0x210 [ 356.902135][ T7006] kmem_cache_alloc_noprof+0xee/0xe10 [ 356.902320][ T7006] ? skb_clone+0x303/0x550 [ 356.902493][ T7006] ? kmsan_get_metadata+0x13e/0x1c0 [ 356.902646][ T7006] skb_clone+0x303/0x550 [ 356.902814][ T7006] __netlink_deliver_tap+0x5f6/0xd30 [ 356.903009][ T7006] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 356.903174][ T7006] netlink_unicast+0x1103/0x1260 [ 356.903358][ T7006] netlink_sendmsg+0x10da/0x11e0 [ 356.903565][ T7006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.903746][ T7006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.903926][ T7006] __sock_sendmsg+0x30f/0x380 [ 356.904119][ T7006] ____sys_sendmsg+0x877/0xb60 [ 356.904307][ T7006] ___sys_sendmsg+0x28d/0x3c0 [ 356.904489][ T7006] ? __rcu_read_unlock+0x7b/0xe0 [ 356.904680][ T7006] ? __fget_files+0x42b/0x500 [ 356.904836][ T7006] ? kmsan_get_metadata+0x13e/0x1c0 [ 356.904995][ T7006] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 356.905152][ T7006] __x64_sys_sendmsg+0x212/0x3c0 [ 356.905327][ T7006] ? kmsan_get_metadata+0x13e/0x1c0 [ 356.905485][ T7006] x64_sys_call+0x2ed6/0x3c30 [ 356.905676][ T7006] do_syscall_64+0xcd/0x1e0 [ 356.905823][ T7006] ? clear_bhb_loop+0x25/0x80 [ 356.906013][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.906204][ T7006] RIP: 0033:0x7f7576185d29 [ 356.906317][ T7006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.906455][ T7006] RSP: 002b:00007f7576f5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.906604][ T7006] RAX: ffffffffffffffda RBX: 00007f7576375fa0 RCX: 00007f7576185d29 [ 356.906717][ T7006] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 356.906814][ T7006] RBP: 00007f7576f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 356.906914][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.907008][ T7006] R13: 0000000000000000 R14: 00007f7576375fa0 R15: 00007fff096069a8 [ 356.907130][ T7006] [ 356.955086][ T44] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 357.118359][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 357.120362][ T1621] usb 5-1: device descriptor read/64, error -71 [ 357.151341][ T44] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 357.151525][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.151663][ T44] usb 4-1: Product: syz [ 357.151773][ T44] usb 4-1: Manufacturer: syz [ 357.151885][ T44] usb 4-1: SerialNumber: syz [ 357.179973][ T44] usb 4-1: config 0 descriptor?? [ 357.226144][ T1621] usb usb5-port1: attempt power cycle [ 357.627961][ T1621] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 357.746560][ T7003] loop3: detected capacity change from 0 to 512 [ 358.116588][ T7003] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.257: invalid indirect mapped block 4294967295 (level 1) [ 358.132412][ T7003] EXT4-fs (loop3): Remounting filesystem read-only [ 358.132997][ T7003] EXT4-fs (loop3): 2 truncates cleaned up [ 358.136733][ T7003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.277052][ T44] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 358.277192][ T44] airspy 4-1:0.0: Could not detect board [ 358.277571][ T44] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 358.311932][ T44] usb 4-1: USB disconnect, device number 19 [ 359.066692][ T7023] No such timeout policy "syz1" [ 359.332689][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.215087][ T1621] usb 5-1: device descriptor read/8, error -71 [ 360.253095][ T7018] syz.5.261: attempt to access beyond end of device [ 360.253095][ T7018] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 360.506912][ T7035] loop1: detected capacity change from 0 to 256 [ 360.942665][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.395867][ T7049] x_tables: duplicate underflow at hook 1 [ 361.621080][ T7052] loop4: detected capacity change from 0 to 2048 [ 361.689874][ T7052] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 361.731647][ T7052] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.196022][ T7057] netlink: 'syz.5.274': attribute type 1 has an invalid length. [ 362.204053][ T7057] netlink: 224 bytes leftover after parsing attributes in process `syz.5.274'. [ 365.267417][ T7081] loop4: detected capacity change from 0 to 1024 [ 365.726362][ T29] audit: type=1800 audit(1737161099.789:21): pid=7081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.277" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 365.772385][ T7081] hfsplus: found bad thread record in catalog [ 365.946470][ T7081] hfsplus: found bad thread record in catalog [ 366.779815][ T1621] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 367.007373][ T1621] usb 4-1: device descriptor read/64, error -71 [ 367.086560][ T1871] hfsplus: b-tree write err: -5, ino 4 [ 367.315894][ T1621] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 367.622816][ T1621] usb 4-1: device descriptor read/64, error -71 [ 367.797080][ T1621] usb usb4-port1: attempt power cycle [ 367.857678][ T7104] syz.0.280 uses obsolete (PF_INET,SOCK_PACKET) [ 368.091751][ T5794] hfsplus: bad catalog entry type [ 368.138397][ T5794] ===================================================== [ 368.145858][ T5794] BUG: KMSAN: uninit-value in hfsplus_strcasecmp+0x1ca/0x770 [ 368.153626][ T5794] hfsplus_strcasecmp+0x1ca/0x770 [ 368.159165][ T5794] hfsplus_cat_case_cmp_key+0xde/0x190 [ 368.164920][ T5794] hfs_find_rec_by_key+0xb1/0x240 [ 368.170158][ T5794] __hfsplus_brec_find+0x26f/0x7b0 [ 368.175593][ T5794] hfsplus_brec_find+0x445/0x970 [ 368.180728][ T5794] hfsplus_brec_read+0x46/0x1a0 [ 368.186467][ T5794] hfsplus_find_cat+0xdb/0x460 [ 368.191887][ T5794] hfsplus_iget+0x729/0xae0 [ 368.196772][ T5794] hfsplus_lookup+0xcde/0xef0 [ 368.201671][ T5794] __lookup_slow+0x506/0x6e0 [ 368.206608][ T5794] lookup_slow+0x6a/0xd0 [ 368.211041][ T5794] walk_component+0x467/0x650 [ 368.216562][ T5794] path_lookupat+0x27d/0x6f0 [ 368.221337][ T5794] filename_lookup+0x288/0x7c0 [ 368.228405][ T5794] user_path_at+0x90/0x3e0 [ 368.233020][ T5794] __x64_sys_umount+0x146/0x240 [ 368.240306][ T5794] x64_sys_call+0x265e/0x3c30 [ 368.246054][ T5794] do_syscall_64+0xcd/0x1e0 [ 368.250740][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.257014][ T5794] [ 368.259448][ T5794] Uninit was created at: [ 368.263999][ T5794] __kmalloc_noprof+0x923/0x1230 [ 368.269272][ T5794] hfsplus_find_init+0x95/0x1d0 [ 368.274332][ T5794] hfsplus_iget+0x3c4/0xae0 [ 368.279606][ T5794] hfsplus_lookup+0xcde/0xef0 [ 368.284468][ T5794] __lookup_slow+0x506/0x6e0 [ 368.289378][ T5794] lookup_slow+0x6a/0xd0 [ 368.293827][ T5794] walk_component+0x467/0x650 [ 368.298900][ T5794] path_lookupat+0x27d/0x6f0 [ 368.303700][ T5794] filename_lookup+0x288/0x7c0 [ 368.308869][ T5794] user_path_at+0x90/0x3e0 [ 368.313480][ T5794] __x64_sys_umount+0x146/0x240 [ 368.318691][ T5794] x64_sys_call+0x265e/0x3c30 [ 368.323593][ T5794] do_syscall_64+0xcd/0x1e0 [ 368.330371][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.337368][ T5794] [ 368.339802][ T5794] CPU: 0 UID: 0 PID: 5794 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 368.351017][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 368.361381][ T5794] ===================================================== [ 368.369449][ T5794] Disabling lock debugging due to kernel taint [ 368.375859][ T5794] Kernel panic - not syncing: kmsan.panic set ... [ 368.382407][ T5794] CPU: 0 UID: 0 PID: 5794 Comm: syz-executor Tainted: G B 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 368.394967][ T5794] Tainted: [B]=BAD_PAGE [ 368.399223][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 368.409424][ T5794] Call Trace: [ 368.412808][ T5794] [ 368.415841][ T5794] dump_stack_lvl+0x216/0x2d0 [ 368.420736][ T5794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 368.426725][ T5794] dump_stack+0x1e/0x24 [ 368.431066][ T5794] panic+0x4e2/0xcf0 [ 368.435159][ T5794] ? kmsan_get_metadata+0xd1/0x1c0 [ 368.440462][ T5794] kmsan_report+0x2c7/0x2d0 [ 368.445132][ T5794] ? __entry_text_end+0x4e72/0x101f09 [ 368.450698][ T5794] ? __msan_warning+0x95/0x120 [ 368.455672][ T5794] ? hfsplus_strcasecmp+0x1ca/0x770 [ 368.461069][ T5794] ? hfsplus_cat_case_cmp_key+0xde/0x190 [ 368.466879][ T5794] ? hfs_find_rec_by_key+0xb1/0x240 [ 368.472273][ T5794] ? __hfsplus_brec_find+0x26f/0x7b0 [ 368.477750][ T5794] ? hfsplus_brec_find+0x445/0x970 [ 368.483066][ T5794] ? hfsplus_brec_read+0x46/0x1a0 [ 368.488282][ T5794] ? hfsplus_find_cat+0xdb/0x460 [ 368.493381][ T5794] ? hfsplus_iget+0x729/0xae0 [ 368.498255][ T5794] ? hfsplus_lookup+0xcde/0xef0 [ 368.503277][ T5794] ? __lookup_slow+0x506/0x6e0 [ 368.508232][ T5794] ? lookup_slow+0x6a/0xd0 [ 368.512834][ T5794] ? walk_component+0x467/0x650 [ 368.517896][ T5794] ? path_lookupat+0x27d/0x6f0 [ 368.522872][ T5794] ? filename_lookup+0x288/0x7c0 [ 368.528017][ T5794] ? user_path_at+0x90/0x3e0 [ 368.532799][ T5794] ? __x64_sys_umount+0x146/0x240 [ 368.538046][ T5794] ? x64_sys_call+0x265e/0x3c30 [ 368.543113][ T5794] ? do_syscall_64+0xcd/0x1e0 [ 368.547975][ T5794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.554274][ T5794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 368.560268][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.565632][ T5794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 368.571608][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.576981][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.582360][ T5794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 368.588341][ T5794] ? hfsplus_bnode_read_u16+0x3e/0x2b0 [ 368.593998][ T5794] ? filter_irq_stacks+0x164/0x1a0 [ 368.599317][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.604687][ T5794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 368.610676][ T5794] __msan_warning+0x95/0x120 [ 368.615478][ T5794] hfsplus_strcasecmp+0x1ca/0x770 [ 368.620708][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.626086][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.631461][ T5794] hfsplus_cat_case_cmp_key+0xde/0x190 [ 368.637113][ T5794] hfs_find_rec_by_key+0xb1/0x240 [ 368.642349][ T5794] ? __pfx_hfsplus_cat_case_cmp_key+0x10/0x10 [ 368.648613][ T5794] __hfsplus_brec_find+0x26f/0x7b0 [ 368.653945][ T5794] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 368.659793][ T5794] hfsplus_brec_find+0x445/0x970 [ 368.664942][ T5794] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 368.670797][ T5794] hfsplus_brec_read+0x46/0x1a0 [ 368.675859][ T5794] hfsplus_find_cat+0xdb/0x460 [ 368.680803][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.686268][ T5794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 368.692261][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.697622][ T5794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 368.703599][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.708996][ T5794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 368.714989][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.720351][ T5794] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 368.726903][ T5794] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 368.733194][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.738558][ T5794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 368.744546][ T5794] hfsplus_iget+0x729/0xae0 [ 368.749270][ T5794] hfsplus_lookup+0xcde/0xef0 [ 368.754152][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.759571][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.764947][ T5794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 368.770945][ T5794] ? __pfx_hfsplus_lookup+0x10/0x10 [ 368.776327][ T5794] ? __pfx_hfsplus_lookup+0x10/0x10 [ 368.781695][ T5794] __lookup_slow+0x506/0x6e0 [ 368.786481][ T5794] lookup_slow+0x6a/0xd0 [ 368.790919][ T5794] walk_component+0x467/0x650 [ 368.795773][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.801164][ T5794] path_lookupat+0x27d/0x6f0 [ 368.805947][ T5794] filename_lookup+0x288/0x7c0 [ 368.810904][ T5794] ? strncpy_from_user+0x46d/0x550 [ 368.816199][ T5794] ? kmsan_get_metadata+0x13e/0x1c0 [ 368.821563][ T5794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 368.827551][ T5794] ? getname_flags+0x5df/0xa30 [ 368.832502][ T5794] user_path_at+0x90/0x3e0 [ 368.837112][ T5794] ? __x64_sys_umount+0x6d/0x240 [ 368.842259][ T5794] __x64_sys_umount+0x146/0x240 [ 368.847328][ T5794] x64_sys_call+0x265e/0x3c30 [ 368.852224][ T5794] do_syscall_64+0xcd/0x1e0 [ 368.856899][ T5794] ? clear_bhb_loop+0x25/0x80 [ 368.861809][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.867935][ T5794] RIP: 0033:0x7f6996d87057 [ 368.872485][ T5794] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 368.892300][ T5794] RSP: 002b:00007ffe837676c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 368.900907][ T5794] RAX: ffffffffffffffda RBX: 00007f6996e018f4 RCX: 00007f6996d87057 [ 368.909029][ T5794] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe83767780 [ 368.917143][ T5794] RBP: 00007ffe83767780 R08: 0000000000000000 R09: 0000000000000000 [ 368.925263][ T5794] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe83768870 [ 368.933382][ T5794] R13: 00007f6996e018f4 R14: 00007ffe8376aa20 R15: 000000000000003a [ 368.941516][ T5794] [ 368.944947][ T5794] Kernel Offset: disabled [ 368.949337][ T5794] Rebooting in 86400 seconds..