last executing test programs: 1m5.136143842s ago: executing program 4 (id=694): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="e8828aceb25b", 'team_slave_0\x00'}}, 0x1e) socket$netlink(0x10, 0x3, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000480)={0x18, 0x0, {0x1, @multicast, 'gretap0\x00'}}) 1m4.725733603s ago: executing program 4 (id=698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, r1, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0xfffffffffffffe7f, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x20004080) 1m4.288616348s ago: executing program 4 (id=701): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x8000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0x5, 0x2, 0x0, 0x4000000000008, 0xfffffffd, 0x6e, {0x3, 0xfffffffffffffffb, 0x1, 0x100000000004, 0x7, 0x81, 0x8, 0xfff, 0x8, 0x1000, 0x28001, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) 1m3.957812729s ago: executing program 4 (id=704): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) stat(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000540)) 1m3.605403372s ago: executing program 4 (id=706): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x6, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) faccessat2(0xffffffffffffffff, 0x0, 0x1, 0x1300) 1m2.759783944s ago: executing program 4 (id=709): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff7ffc}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8000000000000001) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.557300603s ago: executing program 32 (id=709): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff7ffc}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8000000000000001) close_range(r0, 0xffffffffffffffff, 0x0) 5.017648146s ago: executing program 0 (id=1100): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r0], 0x27) 4.58404826s ago: executing program 0 (id=1104): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 4.030230121s ago: executing program 0 (id=1108): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r1, 0x3, 0x9, 0x3ffc}) 3.612128123s ago: executing program 0 (id=1112): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), 0x0, 0x0, 0x2) 3.186047533s ago: executing program 0 (id=1116): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0) 3.134634899s ago: executing program 3 (id=1117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) 2.83424424s ago: executing program 3 (id=1118): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)={0x30, r2, 0x603, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xc}]}, 0x30}}, 0x10) 2.762763298s ago: executing program 2 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x68, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 2.434200511s ago: executing program 3 (id=1123): mount(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2904c40, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x0}) 2.256382449s ago: executing program 2 (id=1124): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000500)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@any, 0xffffffff}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x58df}) 2.200247801s ago: executing program 5 (id=1125): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = epoll_create1(0x80000) close(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.192562273s ago: executing program 1 (id=1126): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000000c0)=@udp6=r1, 0x1}, 0x20) recvfrom(r1, 0x0, 0x0, 0x2101, 0x0, 0x0) 2.032029608s ago: executing program 3 (id=1127): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x20060d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={0x0}) 1.884876361s ago: executing program 5 (id=1128): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r0, 0x0, 0x0, 0x40010000, &(0x7f0000000340)={0x11, 0x6, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) 1.747712359s ago: executing program 1 (id=1129): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000005c0)="19469ab50d17d78460d861cfaea68e", 0xf}], 0x1) 1.726729752s ago: executing program 2 (id=1130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) 1.524091985s ago: executing program 5 (id=1131): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x381, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 1.23836535s ago: executing program 0 (id=1132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x3, &(0x7f0000000140)={0x11, "03b6fd853ff9080ef36c2bd4e33982e235c9bf5f6e38f2d4315684f0a42a645872"}}) 1.135568056s ago: executing program 1 (id=1133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gretap0\x00'}) 1.127516756s ago: executing program 2 (id=1134): mount$bind(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x1005406, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x1}, 0x8) 1.042897785s ago: executing program 5 (id=1135): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003f00), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1000, "0cda7ec98a5aac50e8955f18dc7703e4a29897af2a6ecfb3e97ac490020edaec", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"2c9ee1f0b00be0c47142eea3b88fc09d479117801d05c248cb12e40368c7586d", r1}) 788.376646ms ago: executing program 1 (id=1136): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvmsg$can_raw(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000f80)=""/24, 0x18}], 0x1}, 0x12002) 784.307093ms ago: executing program 2 (id=1137): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1200414, &(0x7f00000001c0)={[{@dmode={'dmode', 0x3d, 0x8002}}, {@showassoc}, {@hide}, {@uid}, {}, {@overriderock}]}, 0x5, 0x56b, &(0x7f0000000a80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) 715.082164ms ago: executing program 5 (id=1138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x3}, @TCA_CHOKE_STAB={0x104, 0x2, "18f0c5944e3321ee0516fdc0f8f4ceb7489217e2b89bd4423d681f939290f65783dddcf001baade69de97e63c0eaee26e55ad36854e7ce7da3f4bc3258d3a6265278f11bd9c05e8426d1c9724a604ff3ca640dcb02d228e526b9137732947e08f440216f7abf727e5f2f4ad681e5d2dbc050d50375eebdc0f53776d2eaca0d576ea1f45bd24a0d4b0ed3545b37c1e678cf0b36ba8a6c1d4a8e0610ac9bc3f7a505663f70545fd9e2feaf9c7f0818fce16eeb6bbcf144f3117a4d9e4cc8c642195733012395b483c212169413b031516467b94bb2afd77dd0e0321598af6cc89aca05385a2a2fc49cad62cdc67e7c5b24ff98edc4c04d7fd39e31d10fe4cd6ab4"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x3bf2, 0x5, 0x11, 0x14, 0x1b, 0x4}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 548.154897ms ago: executing program 3 (id=1139): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 472.066977ms ago: executing program 1 (id=1140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000007000000010001000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xe, &(0x7f0000000780)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x44) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 411.181651ms ago: executing program 5 (id=1141): mkdir(&(0x7f00000000c0)='./file0\x00', 0x88) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$overlay(0x0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x48088, 0x0) 301.048596ms ago: executing program 2 (id=1142): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 86.704046ms ago: executing program 3 (id=1143): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 0s ago: executing program 1 (id=1144): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @remote, 0x4e24, 0x4, 'sed\x00', 0x38, 0x8, 0x55}, {@broadcast, 0x4e24, 0x3, 0x64e, 0x1ff, 0x5}}, 0x44) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): twork, BSSID 50:50:50:50:50:50 [ 204.038905][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.047445][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.103362][ T4403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.111487][ T4403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.294351][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.302453][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.524118][ T5801] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 204.741457][ T3820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.750054][ T3820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.016661][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.025050][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.215375][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.224267][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.233058][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 205.519213][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.527242][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.148976][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.157098][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.381228][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.389522][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.515089][ T6002] loop3: detected capacity change from 0 to 16 [ 206.597655][ T6002] erofs (device loop3): mounted with root inode @ nid 36. [ 207.180773][ T6006] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 207.326371][ T6011] loop0: detected capacity change from 0 to 128 [ 207.468617][ T6011] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 207.667096][ T6011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.769482][ T5859] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 207.978571][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 208.027418][ T5859] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.043597][ T5859] usb 4-1: config 179 has no interface number 0 [ 208.052954][ T5859] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 208.064691][ T5859] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 208.076475][ T5859] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.088127][ T5859] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 208.098574][ T5859] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 208.112274][ T5859] usb 4-1: config 179 interface 65 has no altsetting 0 [ 208.116183][ T6020] loop2: detected capacity change from 0 to 1024 [ 208.120146][ T5859] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 208.135167][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.364551][ T6022] loop1: detected capacity change from 0 to 512 [ 208.421766][ T5859] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 208.669683][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 208.678462][ T5859] usb 4-1: USB disconnect, device number 2 [ 208.885545][ T4305] hfsplus: bad catalog file entry [ 208.903204][ T30] audit: type=1326 audit(1761994697.650:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d678efc9 code=0x7ffc0000 [ 208.966801][ T30] audit: type=1326 audit(1761994697.700:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d678efc9 code=0x7ffc0000 [ 208.989506][ T30] audit: type=1326 audit(1761994697.710:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f84d678efc9 code=0x7ffc0000 [ 209.011922][ T30] audit: type=1326 audit(1761994697.710:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d678efc9 code=0x7ffc0000 [ 209.034732][ T30] audit: type=1326 audit(1761994697.710:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d678efc9 code=0x7ffc0000 [ 209.058349][ T30] audit: type=1326 audit(1761994697.740:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f84d678efc9 code=0x7ffc0000 [ 209.080875][ T30] audit: type=1326 audit(1761994697.740:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d678efc9 code=0x7ffc0000 [ 209.103462][ T30] audit: type=1326 audit(1761994697.740:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d678efc9 code=0x7ffc0000 [ 209.787399][ T30] audit: type=1326 audit(1761994697.920:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f84d678efc9 code=0x7ffc0000 [ 209.809883][ T30] audit: type=1326 audit(1761994697.920:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d678efc9 code=0x7ffc0000 [ 211.089575][ T6048] netlink: 64 bytes leftover after parsing attributes in process `syz.2.26'. [ 211.561740][ T6053] loop1: detected capacity change from 0 to 128 [ 211.597468][ T6055] capability: warning: `syz.2.29' uses deprecated v2 capabilities in a way that may be insecure [ 211.645014][ T6053] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.939458][ T6053] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.323740][ T5801] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.168839][ T5862] kernel read not supported for file /dsp1 (pid: 5862 comm: kworker/1:5) [ 213.795570][ T6078] loop4: detected capacity change from 0 to 64 [ 214.556791][ T6089] loop4: detected capacity change from 0 to 256 [ 214.653101][ T6089] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 214.846259][ T6092] loop0: detected capacity change from 0 to 128 [ 214.919240][ T6092] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.987889][ T6092] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.568998][ T6100] mmap: syz.3.46 (6100) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 215.594791][ T5807] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.178558][ T6098] loop1: detected capacity change from 0 to 4096 [ 217.234260][ T6116] loop0: detected capacity change from 0 to 512 [ 217.276426][ T6116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.404441][ T6116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.404834][ T6116] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.604668][ T30] audit: type=1800 audit(1761994706.360:12): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.54" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 217.769696][ T5862] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 217.969374][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.007890][ T5862] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.019544][ T5862] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.063126][ T5862] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.074926][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.085002][ T5862] usb 2-1: Product: syz [ 218.089432][ T5862] usb 2-1: Manufacturer: syz [ 218.094197][ T5862] usb 2-1: SerialNumber: syz [ 218.430178][ T6131] loop3: detected capacity change from 0 to 128 [ 218.517330][ T6131] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.596775][ T5862] usb 2-1: 0:2 : does not exist [ 218.625431][ T6131] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.113097][ T5859] usb 2-1: USB disconnect, device number 2 [ 219.221263][ T6029] udevd[6029]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.255812][ T5810] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.190018][ T6148] vivid-007: disconnect [ 220.195438][ T6146] vivid-007: reconnect [ 221.194982][ T6163] block nbd0: Unsupported socket: should be TCP or UNIX. [ 221.482146][ T6169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.945496][ T6166] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 221.954390][ T6166] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 222.018808][ T6166] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 222.031415][ T6176] loop1: detected capacity change from 0 to 512 [ 222.050126][ T6166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 222.056659][ T6166] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 222.121819][ T6166] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 222.147869][ T6166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 222.155229][ T6166] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 222.253131][ T6176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.321656][ T6166] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 222.349864][ T6166] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 222.356280][ T6166] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 222.390456][ T6166] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 222.425890][ T6166] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 222.432674][ T6166] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 222.446069][ T30] audit: type=1800 audit(1761994711.210:13): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.79" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 222.483467][ T6166] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 222.846937][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.669669][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout [ 223.866073][ T6197] loop0: detected capacity change from 0 to 4096 [ 223.904602][ T6202] bond_slave_0: entered promiscuous mode [ 223.910700][ T6202] bond_slave_1: entered promiscuous mode [ 223.927047][ T6202] macsec1: entered promiscuous mode [ 223.932602][ T6202] bond0: entered promiscuous mode [ 223.940933][ T6202] macsec1: entered allmulticast mode [ 223.946406][ T6202] bond0: entered allmulticast mode [ 223.952072][ T6202] bond_slave_0: entered allmulticast mode [ 223.957958][ T6202] bond_slave_1: entered allmulticast mode [ 224.046737][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 224.109166][ T6206] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.160342][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.228331][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.398403][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 224.496918][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.497811][ T5802] Bluetooth: hci4: command 0x0c1a tx timeout [ 224.503707][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.689259][ T6212] loop1: detected capacity change from 0 to 16 [ 225.010034][ T6212] erofs (device loop1): mounted with root inode @ nid 36. [ 225.763760][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout [ 226.244936][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout [ 226.308863][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout [ 226.518363][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 226.553390][ T5802] Bluetooth: hci4: command 0x0c1a tx timeout [ 227.231739][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 227.828758][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout [ 227.962915][ T6253] process 'syz.3.113' launched '/dev/fd/3' with NULL argv: empty string added [ 228.134754][ T6257] loop4: detected capacity change from 0 to 256 [ 228.222576][ T6257] exfat: Deprecated parameter 'utf8' [ 228.324223][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.433748][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.483562][ T6257] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 228.548245][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.629447][ T5802] Bluetooth: hci4: command 0x0c1a tx timeout [ 229.461957][ T6273] loop4: detected capacity change from 0 to 2048 [ 229.633147][ T6279] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.784642][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 229.794078][ T6281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.124'. [ 230.066638][ T6285] loop0: detected capacity change from 0 to 256 [ 230.081777][ T6279] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 230.092896][ T6279] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 230.175557][ T6279] Remounting filesystem read-only [ 230.183561][ T5814] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 232.246171][ T6305] loop2: detected capacity change from 0 to 32768 [ 232.316029][ T6305] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 232.595318][ T6305] XFS (loop2): Ending clean mount [ 232.611235][ T6305] XFS (loop2): Quotacheck needed: Please wait. [ 232.728265][ T6305] XFS (loop2): Quotacheck: Done. [ 232.899642][ T5805] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 233.582525][ T6334] loop4: detected capacity change from 0 to 16 [ 233.621159][ T6332] Bluetooth: MGMT ver 1.23 [ 233.625868][ T6332] Bluetooth: hci0: unsupported parameter 512 [ 233.632302][ T6332] Bluetooth: hci0: unsupported parameter 65459 [ 233.645240][ T6332] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 233.659305][ T6334] erofs (device loop4): mounted with root inode @ nid 36. [ 233.756953][ T6334] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 233.826763][ T6339] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 233.836124][ T6339] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 233.845787][ T6339] erofs (device loop4): readahead error at folio 42 @ nid 36 [ 233.853901][ T6339] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 233.862496][ T6339] erofs (device loop4): readahead error at folio 41 @ nid 36 [ 233.870170][ T6339] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 233.878781][ T6339] erofs (device loop4): readahead error at folio 40 @ nid 36 [ 233.886455][ T6339] erofs (device loop4): readahead error at folio 39 @ nid 36 [ 233.889269][ T6334] erofs (device loop4): failed to decompress -29 in[58, 4038] out[2639] [ 233.894127][ T6339] erofs (device loop4): readahead error at folio 38 @ nid 36 [ 233.902884][ T6334] erofs (device loop4): read error -117 @ 43 of nid 36 [ 233.911241][ T6339] erofs (device loop4): readahead error at folio 36 @ nid 36 [ 233.925392][ T6339] erofs (device loop4): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 233.934017][ T6339] erofs (device loop4): readahead error at folio 31 @ nid 36 [ 233.943187][ T6339] erofs (device loop4): readahead error at folio 25 @ nid 36 [ 233.951182][ T6339] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 233.959415][ T6339] erofs (device loop4): readahead error at folio 19 @ nid 36 [ 233.967937][ T6339] syz.4.146: attempt to access beyond end of device [ 233.967937][ T6339] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 233.982422][ T6339] syz.4.146: attempt to access beyond end of device [ 233.982422][ T6339] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 233.997275][ T6339] syz.4.146: attempt to access beyond end of device [ 233.997275][ T6339] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 234.014224][ T6339] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 234.022889][ T6339] erofs (device loop4): readahead error at folio 47 @ nid 36 [ 234.030613][ T6339] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 234.039242][ T6339] erofs (device loop4): readahead error at folio 46 @ nid 36 [ 234.047806][ T6339] erofs (device loop4): readahead error at folio 45 @ nid 36 [ 234.056112][ T6339] syz.4.146: attempt to access beyond end of device [ 234.056112][ T6339] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 234.207093][ T6340] loop1: detected capacity change from 0 to 512 [ 234.256566][ T6340] ======================================================= [ 234.256566][ T6340] WARNING: The mand mount option has been deprecated and [ 234.256566][ T6340] and is ignored by this kernel. Remove the mand [ 234.256566][ T6340] option from the mount to silence this warning. [ 234.256566][ T6340] ======================================================= [ 234.305726][ T6339] erofs (device loop4): failed to decompress -29 in[58, 4038] out[3537] [ 234.488640][ T6340] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.566180][ T6347] tap0: tun_chr_ioctl cmd 1074025672 [ 234.575315][ T6347] tap0: ignored: set checksum enabled [ 234.840503][ T6340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 234.853769][ T6340] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.879922][ T6352] tipc: Started in network mode [ 234.885067][ T6352] tipc: Node identity ac14140f, cluster identity 4711 [ 234.893158][ T6352] tipc: New replicast peer: 255.255.255.255 [ 234.903782][ T6352] tipc: Enabled bearer , priority 10 [ 235.010105][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.152'. [ 235.444702][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 235.564238][ T6354] loop0: detected capacity change from 0 to 4096 [ 235.601612][ T5862] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 235.850639][ T5862] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.858965][ T5862] usb 4-1: config 0 has no interface number 0 [ 235.865370][ T5862] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.876715][ T5862] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.887812][ T5862] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.904635][ T5862] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 235.914162][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.033199][ T5526] tipc: Node number set to 2886997007 [ 236.082492][ T5862] usb 4-1: config 0 descriptor?? [ 236.361630][ T1150] ntfs3(loop0): ino=5, mi_enum_attr [ 236.750280][ T6362] loop1: detected capacity change from 0 to 2048 [ 236.788825][ T5862] uclogic 0003:28BD:0042.0001: failed retrieving string descriptor #100: -71 [ 236.800086][ T5862] uclogic 0003:28BD:0042.0001: failed retrieving pen parameters: -71 [ 236.811927][ T5862] uclogic 0003:28BD:0042.0001: pen probing failed: -71 [ 236.819431][ T5862] uclogic 0003:28BD:0042.0001: failed probing parameters: -71 [ 236.827445][ T5862] uclogic 0003:28BD:0042.0001: probe with driver uclogic failed with error -71 [ 236.844317][ T6362] hpfs: filesystem error: improperly stopped; already mounted read-only [ 236.853796][ T6362] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 236.861919][ T6362] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000003 [ 237.026044][ T5862] usb 4-1: USB disconnect, device number 3 [ 237.589333][ T6377] netlink: 140 bytes leftover after parsing attributes in process `syz.1.163'. [ 237.982726][ T6381] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 238.069093][ T6383] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 238.266246][ T6388] loop1: detected capacity change from 0 to 64 [ 239.803406][ T6411] loop7: detected capacity change from 0 to 7 [ 239.825752][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.835238][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 239.858176][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.867681][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 239.877009][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.886556][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 239.905442][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.915040][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 239.949632][ T6414] loop7: detected capacity change from 7 to 0 [ 239.966427][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.976003][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 239.984491][ T6411] ldm_validate_partition_table(): Disk read failed. [ 239.992062][ T6411] Dev loop7: unable to read RDB block 0 [ 239.997883][ T6411] loop7: unable to read partition table [ 240.044408][ T6411] loop7: partition table beyond EOD, truncated [ 240.051450][ T6411] loop_reread_partitions: partition scan of loop7 (SJ…_+]Ö‹ ¸SûÁ'±(‹“ŠJ‚ñ^àÀZ ûÎ(îüŽ63Ÿ3)eeö½DÏ«ý?Æ¢4+ó) failed (rc=-5) [ 240.405778][ T6418] loop0: detected capacity change from 0 to 2048 [ 240.610709][ T6418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.623329][ T6418] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.148619][ T5862] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 241.248469][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.349905][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 241.363989][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.376738][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.386982][ T5862] usb 3-1: New USB device found, idVendor=37b5, idProduct=00dd, bcdDevice= 0.00 [ 241.396524][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.520755][ T5862] usb 3-1: config 0 descriptor?? [ 241.633728][ T6437] binder: 6436:6437 ioctl 400c620e 0 returned -14 [ 242.021179][ T5862] hid-generic 0003:37B5:00DD.0002: hidraw0: USB HID v0.05 Device [HID 37b5:00dd] on usb-dummy_hcd.2-1/input0 [ 242.160081][ T5862] usb 3-1: USB disconnect, device number 2 [ 242.869832][ T6453] usb usb8: usbfs: process 6453 (syz.3.196) did not claim interface 0 before use [ 243.157780][ T6447] fido_id[6447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 243.299860][ T6456] loop4: detected capacity change from 0 to 512 [ 243.629093][ T6451] loop1: detected capacity change from 0 to 40427 [ 243.653708][ T6451] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 243.663005][ T6451] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 243.684750][ T6456] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.692314][ T6451] F2FS-fs (loop1): invalid crc value [ 244.059157][ T6451] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 244.075933][ T6451] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 244.090224][ T6451] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 244.134758][ T6456] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 244.146066][ T6456] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 244.566715][ T6474] loop0: detected capacity change from 0 to 256 [ 244.654997][ T5814] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 245.050185][ T6474] FAT-fs (loop0): Directory bread(block 64) failed [ 245.057135][ T6474] FAT-fs (loop0): Directory bread(block 65) failed [ 245.065445][ T6474] FAT-fs (loop0): Directory bread(block 66) failed [ 245.072924][ T6474] FAT-fs (loop0): Directory bread(block 67) failed [ 245.079990][ T6474] FAT-fs (loop0): Directory bread(block 68) failed [ 245.086690][ T6474] FAT-fs (loop0): Directory bread(block 69) failed [ 245.093819][ T6474] FAT-fs (loop0): Directory bread(block 70) failed [ 245.100704][ T6474] FAT-fs (loop0): Directory bread(block 71) failed [ 245.114803][ T6474] FAT-fs (loop0): Directory bread(block 72) failed [ 245.124288][ T6474] FAT-fs (loop0): Directory bread(block 73) failed [ 245.524253][ T6485] netlink: 'syz.2.206': attribute type 25 has an invalid length. [ 245.533139][ T6485] netlink: 'syz.2.206': attribute type 7 has an invalid length. [ 245.541190][ T6485] netlink: 164 bytes leftover after parsing attributes in process `syz.2.206'. [ 246.401261][ T6494] sctp: [Deprecated]: syz.2.211 (pid 6494) Use of int in max_burst socket option deprecated. [ 246.401261][ T6494] Use struct sctp_assoc_value instead [ 246.613475][ T5859] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 246.809605][ T5859] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 246.819038][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.940037][ T5859] usb 5-1: config 0 descriptor?? [ 247.026947][ T5859] cp210x 5-1:0.0: cp210x converter detected [ 247.478968][ T5859] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 247.533183][ T5859] usb 5-1: cp210x converter now attached to ttyUSB0 [ 247.733977][ T5859] usb 5-1: USB disconnect, device number 2 [ 247.787047][ T5859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 247.850113][ T5859] cp210x 5-1:0.0: device disconnected [ 249.021711][ T6522] loop4: detected capacity change from 0 to 1024 [ 249.552743][ T6521] loop3: detected capacity change from 0 to 32768 [ 249.565332][ T6521] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.224 (6521) [ 249.579822][ T6522] hfsplus: unable to mark blocks free: error -5 [ 249.585731][ T6521] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.586309][ T6522] hfsplus: can't free extent: start 134, count 1 [ 249.596586][ T6521] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 249.596853][ T6521] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 249.855646][ T6521] BTRFS info (device loop3): rebuilding free space tree [ 249.885935][ T6521] BTRFS info (device loop3): disabling free space tree [ 249.896102][ T6521] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 249.906186][ T6521] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 249.944410][ T6521] BTRFS info (device loop3): enabling ssd optimizations [ 249.951729][ T6521] BTRFS info (device loop3): turning off barriers [ 249.958980][ T6521] BTRFS info (device loop3): turning on flush-on-commit [ 249.966100][ T6521] BTRFS info (device loop3): enabling disk space caching [ 249.973384][ T6521] BTRFS info (device loop3): force clearing of disk cache [ 249.980876][ T6521] BTRFS info (device loop3): use zlib compression, level 3 [ 250.057882][ T6521] new mount options do not match the existing superblock, will be ignored [ 250.090775][ T6546] loop1: detected capacity change from 0 to 256 [ 250.166639][ T6546] vfat: Unknown parameter 's»' [ 250.421653][ T5810] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.715662][ T5859] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 250.956930][ T5859] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 250.965774][ T5859] usb 3-1: config 0 has no interface number 0 [ 251.020243][ T5859] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 251.033694][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.049081][ T5859] usb 3-1: Product: syz [ 251.053433][ T5859] usb 3-1: Manufacturer: syz [ 251.060274][ T5859] usb 3-1: SerialNumber: syz [ 251.103299][ T5859] usb 3-1: config 0 descriptor?? [ 252.092431][ T5859] usb 3-1: Firmware version (0.0) predates our first public release. [ 252.101507][ T5859] usb 3-1: Please update to version 0.2 or newer [ 252.251474][ T6559] loop0: detected capacity change from 0 to 40427 [ 252.296738][ T6559] F2FS-fs (loop0): Image doesn't support compression [ 252.304995][ T6559] F2FS-fs (loop0): build fault injection rate: 690 [ 252.311886][ T6559] F2FS-fs (loop0): build fault injection type: 0x4 [ 252.395523][ T6559] F2FS-fs (loop0): invalid crc value [ 252.625824][ T5859] usb 3-1: USB disconnect, device number 3 [ 252.783224][ T6559] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 252.825472][ T6028] udevd[6028]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [6551] terminated by signal 33 (Unknown signal 33) [ 252.874907][ T6559] F2FS-fs (loop0): Start checkpoint disabled! [ 252.943745][ T6559] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 252.956181][ T6559] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 253.109457][ T5974] udevd[5974]: failed to send result of seq 11453 to main daemon: Connection refused [ 253.110717][ T4305] kworker/u8:26: attempt to access beyond end of device [ 253.110717][ T4305] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.134238][ T4305] CPU: 0 UID: 0 PID: 4305 Comm: kworker/u8:26 Not tainted syzkaller #0 PREEMPT(none) [ 253.134385][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 253.134510][ T4305] Workqueue: writeback wb_workfn (flush-7:0) [ 253.134715][ T4305] Call Trace: [ 253.134769][ T4305] [ 253.134818][ T4305] __dump_stack+0x26/0x30 [ 253.134982][ T4305] dump_stack_lvl+0x1df/0x270 [ 253.135149][ T4305] dump_stack+0x1e/0x25 [ 253.135291][ T4305] f2fs_handle_critical_error+0xa6f/0xc20 [ 253.135477][ T4305] f2fs_stop_checkpoint+0x65/0x80 [ 253.135617][ T4305] f2fs_write_end_io+0x101c/0x1bc0 [ 253.135803][ T4305] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 253.135944][ T4305] bio_endio+0xeb4/0x1010 [ 253.136108][ T4305] submit_bio_noacct+0x2009/0x2930 [ 253.136317][ T4305] submit_bio+0x57c/0x630 [ 253.136474][ T4305] f2fs_submit_write_bio+0x92/0x250 [ 253.136668][ T4305] __submit_merged_bio+0x16f/0x6a0 [ 253.136851][ T4305] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.137011][ T4305] __submit_merged_write_cond+0x458/0x9a0 [ 253.137220][ T4305] f2fs_write_data_pages+0x4bb2/0x5480 [ 253.137446][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.137627][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.137768][ T4305] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.137919][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.138059][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.138203][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.138348][ T4305] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.138496][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.138637][ T4305] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.138783][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.138919][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.139061][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.139202][ T4305] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.139354][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.139495][ T4305] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.139642][ T4305] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 253.139781][ T4305] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 253.139919][ T4305] do_writepages+0x3f2/0x860 [ 253.140085][ T4305] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.140240][ T4305] ? __pfx_writeback_sb_inodes+0x1/0x10 [ 253.140407][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.140569][ T4305] __writeback_single_inode+0x101/0x1190 [ 253.140746][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.140901][ T4305] writeback_sb_inodes+0xac1/0x1cb0 [ 253.141154][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.141344][ T4305] wb_writeback+0x4ce/0xc00 [ 253.141522][ T4305] ? queue_io+0x491/0x790 [ 253.141688][ T4305] wb_workfn+0x397/0x1910 [ 253.141829][ T4305] ? kmsan_get_metadata+0xfb/0x160 [ 253.141995][ T4305] ? __pfx_wb_workfn+0x10/0x10 [ 253.142132][ T4305] process_scheduled_works+0xb91/0x1d80 [ 253.142364][ T4305] worker_thread+0xedf/0x1590 [ 253.142566][ T4305] kthread+0xd5c/0xf00 [ 253.142678][ T4305] ? __pfx_worker_thread+0x10/0x10 [ 253.142870][ T4305] ? __pfx_kthread+0x10/0x10 [ 253.142988][ T4305] ret_from_fork+0x1f5/0x4c0 [ 253.143152][ T4305] ? __pfx_kthread+0x10/0x10 [ 253.143274][ T4305] ret_from_fork_asm+0x1a/0x30 [ 253.143474][ T4305] [ 253.466927][ T4305] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 253.576747][ T6569] loop1: detected capacity change from 0 to 64 [ 254.459696][ T6028] udevd[6028]: failed to send result of seq 11436 to main daemon: Transport endpoint is not connected [ 254.723106][ T6583] warning: `syz.3.244' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 255.720315][ T6599] loop2: detected capacity change from 0 to 512 [ 255.784963][ T6599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.851665][ T30] audit: type=1800 audit(1761994745.603:14): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.251" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 256.145390][ T6611] loop4: detected capacity change from 0 to 512 [ 256.180034][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.290232][ T6611] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.255: invalid block [ 256.383896][ T6611] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.255: invalid indirect mapped block 4294967295 (level 1) [ 256.448430][ T6611] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.255: invalid indirect mapped block 4294967295 (level 1) [ 256.504397][ T6611] EXT4-fs (loop4): 2 truncates cleaned up [ 256.512546][ T6611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.825072][ T6618] loop2: detected capacity change from 0 to 4096 [ 256.870258][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.965576][ T5862] kernel read not supported for file /rfkill (pid: 5862 comm: kworker/1:5) [ 257.182094][ T6627] loop3: detected capacity change from 0 to 64 [ 257.320941][ T6627] BFS-fs: bfs_readdir(): Bad f_pos=00000329 for loop3:00000002 [ 257.989070][ T5862] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 258.190185][ T5862] usb 1-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 258.199654][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.251396][ T5862] usb 1-1: config 0 descriptor?? [ 258.313549][ T5802] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 258.343198][ T6651] loop2: detected capacity change from 0 to 8 [ 258.713012][ T5862] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 258.722837][ T5862] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 258.731625][ T5862] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 258.740061][ T5862] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 258.748681][ T5862] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 258.757017][ T5862] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 258.765554][ T5862] logitech-djreceiver 0003:046D:C70E.0003: item fetching failed at offset 6/7 [ 258.842333][ T5862] logitech-djreceiver 0003:046D:C70E.0003: logi_dj_probe: parse failed [ 258.851434][ T5862] logitech-djreceiver 0003:046D:C70E.0003: probe with driver logitech-djreceiver failed with error -22 [ 258.942605][ T5862] usb 1-1: USB disconnect, device number 2 [ 260.000815][ T6682] loop3: detected capacity change from 0 to 1024 [ 260.139614][ T6676] loop2: detected capacity change from 0 to 4096 [ 260.185328][ T6676] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 260.204261][ T6682] hfsplus: bad catalog file entry [ 260.411896][ T3820] hfsplus: b-tree write err: -5, ino 3 [ 260.417744][ T3820] hfsplus: bad catalog file entry [ 260.478431][ T6676] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 261.210331][ T6686] loop0: detected capacity change from 0 to 32768 [ 261.254038][ T6686] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 261.601017][ T6686] XFS (loop0): Ending clean mount [ 261.636475][ T6686] XFS (loop0): Quotacheck needed: Please wait. [ 261.734884][ T6706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.777762][ T6686] XFS (loop0): Quotacheck: Done. [ 261.931305][ T5807] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 261.954943][ T6710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.021273][ T6707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.123096][ T6728] loop2: detected capacity change from 0 to 1764 [ 263.215038][ T6728] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 263.487595][ T6736] loop1: detected capacity change from 0 to 256 [ 263.583297][ T6736] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 263.681448][ T6736] exFAT-fs (loop1): error, data valid size is invalid(-9223372036854774758) [ 263.690690][ T6736] exFAT-fs (loop1): Filesystem has been set read-only [ 263.694363][ T6741] loop0: detected capacity change from 0 to 512 [ 263.726174][ T6741] EXT4-fs: Ignoring removed orlov option [ 263.734679][ T6743] exFAT-fs (loop1): error, data valid size is invalid(-9223372036854774758) [ 263.749379][ T6741] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 263.762856][ T6741] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 263.800110][ T6742] loop2: detected capacity change from 0 to 1024 [ 263.809176][ T6742] EXT4-fs: inline encryption not supported [ 263.855832][ T6741] EXT4-fs (loop0): 1 orphan inode deleted [ 263.862684][ T6741] EXT4-fs (loop0): 1 truncate cleaned up [ 263.871157][ T6741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.932120][ T6742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.078890][ T6741] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 264.119215][ T6741] EXT4-fs (loop0): Remounting filesystem read-only [ 264.402369][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.417204][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.966572][ T6768] loop0: detected capacity change from 0 to 2048 [ 265.016748][ T6768] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.319: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 265.084887][ T6768] EXT4-fs (loop0): get root inode failed [ 265.091140][ T6768] EXT4-fs (loop0): mount failed [ 266.025182][ T6787] loop1: detected capacity change from 0 to 128 [ 266.134881][ T6787] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.248640][ T6787] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 266.436491][ T5801] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.540241][ T5862] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 266.715440][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 266.728522][ T5526] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 266.741752][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.780828][ T5862] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 266.790653][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.799071][ T5862] usb 3-1: Product: syz [ 266.803395][ T5862] usb 3-1: Manufacturer: syz [ 266.808298][ T5862] usb 3-1: SerialNumber: syz [ 266.835134][ T5862] usb 3-1: config 0 descriptor?? [ 266.932172][ T5526] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 266.941830][ T5526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.966006][ T5526] usb 5-1: config 0 descriptor?? [ 266.995021][ T5526] cp210x 5-1:0.0: cp210x converter detected [ 267.284389][ T5862] gs_usb 3-1:0.0: Configuring for 57 interfaces [ 267.407634][ T5526] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 267.439605][ T5526] usb 5-1: cp210x converter now attached to ttyUSB0 [ 267.643697][ T5859] usb 5-1: USB disconnect, device number 3 [ 267.678467][ T5859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 267.702519][ T5859] cp210x 5-1:0.0: device disconnected [ 267.704581][ T5862] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 267.718769][ T5862] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 267.788526][ T5862] usb 3-1: USB disconnect, device number 4 [ 267.923931][ T6819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.084469][ T6819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.192449][ T6819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.325368][ T6819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.711732][ T1150] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.751454][ T3820] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.780342][ T3820] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.803711][ T3820] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.377358][ T6843] loop2: detected capacity change from 0 to 1024 [ 269.665980][ T3820] hfsplus: b-tree write err: -5, ino 4 [ 270.302662][ T6858] loop1: detected capacity change from 0 to 1024 [ 270.901301][ T6876] loop3: detected capacity change from 0 to 64 [ 270.931787][ T5854] kernel write not supported for file bpf-prog (pid: 5854 comm: kworker/0:3) [ 270.982141][ T30] audit: type=1800 audit(1761994760.743:15): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.372" name="file2" dev="loop3" ino=22 res=0 errno=0 [ 271.821759][ T6889] loop1: detected capacity change from 0 to 512 [ 272.821714][ T6914] input: syz0 as /devices/virtual/input/input6 [ 272.848849][ T6906] loop1: detected capacity change from 0 to 1764 [ 272.982365][ T6906] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 273.563664][ T5859] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 273.758472][ T5859] usb 5-1: Using ep0 maxpacket: 8 [ 273.780545][ T5859] usb 5-1: config 0 has no interfaces? [ 273.805053][ T5859] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 273.814639][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.823050][ T5859] usb 5-1: Product: syz [ 273.827382][ T5859] usb 5-1: Manufacturer: syz [ 273.832344][ T5859] usb 5-1: SerialNumber: syz [ 273.852307][ T5862] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 273.856604][ T5859] usb 5-1: config 0 descriptor?? [ 274.038483][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 274.060954][ T5862] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.069326][ T5862] usb 4-1: config 0 has no interface number 0 [ 274.080249][ T5859] usb 5-1: USB disconnect, device number 4 [ 274.134233][ T5862] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 274.144029][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.152412][ T5862] usb 4-1: Product: syz [ 274.156747][ T5862] usb 4-1: Manufacturer: syz [ 274.161618][ T5862] usb 4-1: SerialNumber: syz [ 274.192410][ T5862] usb 4-1: config 0 descriptor?? [ 274.225971][ T5862] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 274.887388][ T6956] loop4: detected capacity change from 0 to 512 [ 274.928464][ T6956] EXT4-fs (loop4): Test dummy encryption mode enabled [ 274.935613][ T6956] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 274.956060][ T6957] mkiss: ax0: crc mode is auto. [ 275.002424][ T6956] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.410: corrupted xattr entries [ 275.031202][ T6956] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 275.045345][ T6956] EXT4-fs (loop4): 1 orphan inode deleted [ 275.051718][ T5862] gspca_spca1528: reg_w err -71 [ 275.053376][ T6956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.085891][ T5862] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 275.142372][ T5862] usb 4-1: USB disconnect, device number 4 [ 275.331165][ T6963] netlink: 'syz.1.412': attribute type 83 has an invalid length. [ 275.370724][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.454234][ T6965] loop0: detected capacity change from 0 to 256 [ 275.838894][ T6973] loop2: detected capacity change from 0 to 256 [ 275.848249][ T6973] exfat: Deprecated parameter 'utf8' [ 275.930463][ T30] audit: type=1326 audit(1761994765.683:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f158efc9 code=0x7ffc0000 [ 275.953424][ T30] audit: type=1326 audit(1761994765.703:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f158efc9 code=0x7ffc0000 [ 275.976042][ T30] audit: type=1326 audit(1761994765.703:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f48f158efc9 code=0x7ffc0000 [ 275.998670][ T30] audit: type=1326 audit(1761994765.703:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f158efc9 code=0x7ffc0000 [ 276.021156][ T30] audit: type=1326 audit(1761994765.703:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f158efc9 code=0x7ffc0000 [ 276.044513][ T30] audit: type=1326 audit(1761994765.703:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f48f158efc9 code=0x7ffc0000 [ 276.067423][ T30] audit: type=1326 audit(1761994765.703:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f158efc9 code=0x7ffc0000 [ 276.090390][ T30] audit: type=1326 audit(1761994765.703:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f158efc9 code=0x7ffc0000 [ 276.112878][ T30] audit: type=1326 audit(1761994765.703:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f48f158efc9 code=0x7ffc0000 [ 276.136198][ T30] audit: type=1326 audit(1761994765.703:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f158efc9 code=0x7ffc0000 [ 276.192068][ T6973] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 277.038434][ T5862] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 277.241874][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.252185][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 277.266210][ T5862] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 277.276022][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.490337][ T5862] usb 5-1: config 0 descriptor?? [ 277.614537][ T6988] loop2: detected capacity change from 0 to 32768 [ 277.680515][ T6988] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 277.798518][ T6988] XFS (loop2): Ending clean mount [ 277.830462][ T6988] XFS (loop2): Quotacheck needed: Please wait. [ 277.914905][ T6988] XFS (loop2): Quotacheck: Done. [ 277.921142][ T7011] loop3: detected capacity change from 0 to 256 [ 277.921265][ T6988] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 277.936681][ T5862] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 277.944552][ T5862] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 277.951827][ T5862] holtek 0003:1241:5015.0004: item fetching failed at offset 2/5 [ 278.050178][ T5862] holtek 0003:1241:5015.0004: parse failed [ 278.056430][ T5862] holtek 0003:1241:5015.0004: probe with driver holtek failed with error -22 [ 278.168524][ T5862] usb 5-1: USB disconnect, device number 5 [ 278.238932][ T7011] FAT-fs (loop3): Directory bread(block 64) failed [ 278.245908][ T7011] FAT-fs (loop3): Directory bread(block 65) failed [ 278.253066][ T7011] FAT-fs (loop3): Directory bread(block 66) failed [ 278.259909][ T7011] FAT-fs (loop3): Directory bread(block 67) failed [ 278.266750][ T7011] FAT-fs (loop3): Directory bread(block 68) failed [ 278.273584][ T7011] FAT-fs (loop3): Directory bread(block 69) failed [ 278.281561][ T7011] FAT-fs (loop3): Directory bread(block 70) failed [ 278.288760][ T7011] FAT-fs (loop3): Directory bread(block 71) failed [ 278.295617][ T7011] FAT-fs (loop3): Directory bread(block 72) failed [ 278.302447][ T7011] FAT-fs (loop3): Directory bread(block 73) failed [ 279.094771][ T7017] loop2: detected capacity change from 0 to 8192 [ 279.149472][ T7017] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.468875][ T7027] loop0: detected capacity change from 0 to 512 [ 279.479002][ T7027] EXT4-fs: Ignoring removed oldalloc option [ 279.517543][ T7027] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.437: Parent and EA inode have the same ino 15 [ 279.536016][ T7027] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.437: Parent and EA inode have the same ino 15 [ 279.563807][ T7027] EXT4-fs (loop0): 1 orphan inode deleted [ 279.573223][ T7027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.599455][ T7027] EXT4-fs error (device loop0): ext4_rename:3812: inode #15: comm syz.0.437: target of rename is already freed [ 279.800810][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.937155][ T7033] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 279.950411][ T7033] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 280.339013][ T7039] loop0: detected capacity change from 0 to 2048 [ 280.382674][ T7039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.476555][ T7044] program syz.1.445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.139268][ T7055] loop2: detected capacity change from 0 to 128 [ 281.180966][ T7055] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.203660][ T7057] loop1: detected capacity change from 0 to 128 [ 281.204371][ T7055] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 281.275582][ T30] audit: type=1800 audit(1761994771.033:26): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.451" name="file1" dev="loop1" ino=1048613 res=0 errno=0 [ 281.317738][ T7057] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 281.326538][ T7057] FAT-fs (loop1): Filesystem has been set read-only [ 281.334589][ T7057] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 281.629643][ T1150] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 281.862607][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 282.002857][ T7069] loop0: detected capacity change from 0 to 512 [ 282.051643][ T7069] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.456: inode has both inline data and extents flags [ 282.067419][ T7069] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.456: couldn't read orphan inode 15 (err -117) [ 282.085026][ T7069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.369571][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.525960][ T7082] loop4: detected capacity change from 0 to 1024 [ 282.557594][ T7082] EXT4-fs: Ignoring removed orlov option [ 282.563851][ T7082] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.597706][ T7082] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 282.648336][ T7082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.349377][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.711741][ T7108] loop3: detected capacity change from 0 to 128 [ 283.791320][ T7108] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 283.838780][ T7108] hpfs: filesystem error: improperly stopped [ 283.845013][ T7108] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 283.853230][ T7108] hpfs: You really don't want any checks? You are crazy... [ 283.868271][ T7109] loop4: detected capacity change from 0 to 2048 [ 283.891122][ T7108] hpfs: hpfs_map_sector(): read error [ 283.896669][ T7108] hpfs: code page support is disabled [ 283.929484][ T7108] hpfs: hpfs_map_4sectors(): unaligned read [ 283.938582][ T7108] hpfs: hpfs_map_4sectors(): unaligned read [ 283.944660][ T7108] hpfs: filesystem error: unable to find root dir [ 284.012324][ T7109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.158420][ T30] audit: type=1800 audit(1761994773.913:27): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.471" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 284.560833][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.766354][ T5859] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 284.774250][ T5859] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 284.782261][ T5859] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 284.814320][ T5859] hid-generic 0006:0004:0009.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 284.890496][ T7131] program syz.4.481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.369885][ T7138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.487'. [ 285.508396][ T7133] loop0: detected capacity change from 0 to 4096 [ 285.518626][ T7133] EXT4-fs: Ignoring removed bh option [ 285.535601][ T7133] EXT4-fs (loop0): Test dummy encryption mode enabled [ 285.565115][ T7133] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 285.574251][ T7133] System zones: 0-5 [ 285.619012][ T7133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.876982][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.929542][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.934558][ T5862] kernel read not supported for file /dsp (pid: 5862 comm: kworker/1:5) [ 285.936133][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.184961][ T7149] loop1: detected capacity change from 0 to 16 [ 286.440080][ T5862] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 286.643739][ T5862] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 286.655756][ T5862] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 286.667521][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.677839][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.703136][ T7158] loop3: detected capacity change from 0 to 16 [ 286.750159][ T7150] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.759633][ T7150] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.789721][ T5862] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.195897][ T5859] usb 1-1: USB disconnect, device number 3 [ 287.270276][ T7169] serio: Serial port ptm0 [ 287.395868][ T7174] loop2: detected capacity change from 0 to 256 [ 287.455943][ T7174] exfat: Deprecated parameter 'utf8' [ 287.461633][ T7174] exfat: Deprecated parameter 'utf8' [ 287.622824][ T7177] loop1: detected capacity change from 0 to 512 [ 287.649358][ T7174] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 287.725231][ T7177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.739006][ T7177] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.849117][ T7177] EXT4-fs (loop1): shut down requested (1) [ 288.175607][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.270941][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 288.879893][ T5859] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 289.059026][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 289.080227][ T5859] usb 5-1: config 0 has no interfaces? [ 289.095331][ T5859] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 289.105056][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.113559][ T5859] usb 5-1: Product: syz [ 289.117883][ T5859] usb 5-1: Manufacturer: syz [ 289.122764][ T5859] usb 5-1: SerialNumber: syz [ 289.355677][ T5859] r8152-cfgselector 5-1: Unknown version 0x0000 [ 289.362502][ T5859] r8152-cfgselector 5-1: config 0 descriptor?? [ 289.605914][ T5859] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 289.833203][ T7207] loop3: detected capacity change from 0 to 32768 [ 289.845212][ T7215] syz.2.520 uses obsolete (PF_INET,SOCK_PACKET) [ 289.869972][ T7207] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 290.078987][ T7207] XFS (loop3): Ending clean mount [ 290.098990][ T7207] XFS (loop3): Quotacheck needed: Please wait. [ 290.153569][ T7207] XFS (loop3): Quotacheck: Done. [ 290.281350][ T5810] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 290.792075][ T7240] loop2: detected capacity change from 0 to 128 [ 290.829286][ T7243] netlink: 104 bytes leftover after parsing attributes in process `syz.4.529'. [ 290.868968][ T7240] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.959237][ T7240] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 290.991593][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.128785][ T7249] loop1: detected capacity change from 0 to 512 [ 291.220277][ T7249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.234372][ T7249] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.324685][ T5805] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.716315][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.339688][ T7275] loop2: detected capacity change from 0 to 64 [ 292.912416][ T7286] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.545'. [ 293.110100][ T7284] loop2: detected capacity change from 0 to 4096 [ 293.157937][ T7284] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 293.497791][ T7284] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 293.585995][ T7292] loop0: detected capacity change from 0 to 4096 [ 293.740263][ T7300] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.824793][ T30] audit: type=1800 audit(1761994783.583:28): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.548" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 294.129829][ T7306] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 294.261439][ T7310] loop4: detected capacity change from 0 to 128 [ 294.310733][ T7310] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 294.358388][ T7310] hpfs: filesystem error: improperly stopped [ 294.364714][ T7310] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 294.375773][ T7310] hpfs: You really don't want any checks? You are crazy... [ 294.394785][ T7312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.558'. [ 294.404742][ T7312] dummy0: entered promiscuous mode [ 294.432631][ T7310] hpfs: hpfs_map_sector(): read error [ 294.438381][ T7310] hpfs: code page support is disabled [ 294.472627][ T7310] hpfs: hpfs_map_4sectors(): unaligned read [ 294.498485][ T7310] hpfs: hpfs_map_4sectors(): unaligned read [ 294.504545][ T7310] hpfs: filesystem error: unable to find root dir [ 294.569594][ T7310] hpfs: hpfs_map_4sectors(): unaligned read [ 296.215567][ T7334] loop3: detected capacity change from 0 to 2048 [ 296.254724][ T7317] loop2: detected capacity change from 0 to 65536 [ 296.278657][ T7317] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 296.325263][ T7334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.472578][ T7351] bpf: Bad value for 'uid' [ 296.540028][ T7334] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.568: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 296.696315][ T7334] EXT4-fs (loop3): Remounting filesystem read-only [ 296.812375][ T7317] XFS (loop2): Ending clean mount [ 296.913872][ T5805] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 297.108915][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.254629][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 297.473133][ T7362] loop1: detected capacity change from 0 to 16 [ 297.513076][ T7362] erofs (device loop1): mounted with root inode @ nid 36. [ 298.274401][ T7378] loop4: detected capacity change from 0 to 1024 [ 298.310848][ T7378] EXT4-fs: Ignoring removed oldalloc option [ 298.317250][ T7378] EXT4-fs: Ignoring removed bh option [ 298.410677][ T7378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.520034][ T30] audit: type=1804 audit(2000000003.139:29): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.583" name="/newroot/112/file1/cgroup.controllers" dev="loop4" ino=18 res=1 errno=0 [ 298.719175][ T7387] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 298.820498][ T7388] netlink: 64 bytes leftover after parsing attributes in process `syz.0.588'. [ 298.843949][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.290175][ T7393] loop1: detected capacity change from 0 to 1024 [ 299.364983][ T7393] EXT4-fs: Ignoring removed orlov option [ 299.456438][ T7393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.862362][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.071004][ T7414] netlink: 48 bytes leftover after parsing attributes in process `syz.2.596'. [ 300.639255][ T7428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.059354][ T7436] loop0: detected capacity change from 0 to 512 [ 301.094130][ T7438] loop1: detected capacity change from 0 to 512 [ 301.112420][ T7436] EXT4-fs: Ignoring removed orlov option [ 301.162057][ T7436] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 301.226058][ T7438] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.1.607: corrupted xattr block 95: invalid header [ 301.283682][ T7436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 301.328814][ T7438] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.607: bg 0: block 7: invalid block bitmap [ 301.345460][ T7436] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.609: corrupted in-inode xattr: e_value size too large [ 301.411831][ T7438] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 301.463072][ T7436] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.609: couldn't read orphan inode 15 (err -117) [ 301.494595][ T7438] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2967: inode #11: comm syz.1.607: corrupted xattr block 95: invalid header [ 301.543571][ T7436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.591449][ T7438] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 301.601168][ T7438] EXT4-fs (loop1): 1 orphan inode deleted [ 301.609244][ T7438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.744181][ T7435] loop3: detected capacity change from 0 to 32768 [ 301.756637][ T7435] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.608 (7435) [ 301.784510][ T7435] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 301.795325][ T7435] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 301.984176][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.004001][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.044629][ T7435] BTRFS info (device loop3): enabling ssd optimizations [ 302.055088][ T7435] BTRFS info (device loop3): turning on sync discard [ 302.062077][ T7435] BTRFS info (device loop3): enabling free space tree [ 302.154470][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 302.184252][ T5810] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 302.437356][ T7468] loop2: detected capacity change from 0 to 256 [ 302.478480][ T5859] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 302.501453][ T7466] loop0: detected capacity change from 0 to 2048 [ 302.512468][ T7470] loop4: detected capacity change from 0 to 65 [ 302.526543][ T7470] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 302.541877][ T7466] EXT4-fs: Ignoring removed i_version option [ 302.609796][ T7466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.627860][ T7468] FAT-fs (loop2): Directory bread(block 64) failed [ 302.634973][ T7468] FAT-fs (loop2): Directory bread(block 65) failed [ 302.642081][ T7468] FAT-fs (loop2): Directory bread(block 66) failed [ 302.648900][ T7468] FAT-fs (loop2): Directory bread(block 67) failed [ 302.656697][ T7468] FAT-fs (loop2): Directory bread(block 68) failed [ 302.663900][ T7468] FAT-fs (loop2): Directory bread(block 69) failed [ 302.669456][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 302.671147][ T7468] FAT-fs (loop2): Directory bread(block 70) failed [ 302.682455][ T7468] FAT-fs (loop2): Directory bread(block 71) failed [ 302.685950][ T5859] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 302.689363][ T7468] FAT-fs (loop2): Directory bread(block 72) failed [ 302.689477][ T7468] FAT-fs (loop2): Directory bread(block 73) failed [ 302.697632][ T5859] usb 2-1: config 0 has no interface number 0 [ 302.717228][ T5859] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.728562][ T5859] usb 2-1: config 0 interface 85 has no altsetting 0 [ 302.768916][ T5859] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 302.778706][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.786905][ T5859] usb 2-1: Product: syz [ 302.789540][ T7466] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.612: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 302.791930][ T5859] usb 2-1: Manufacturer: syz [ 302.812506][ T5859] usb 2-1: SerialNumber: syz [ 302.879147][ T7466] EXT4-fs (loop0): Remounting filesystem read-only [ 302.882381][ T5859] usb 2-1: config 0 descriptor?? [ 303.145963][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.520991][ T5859] appletouch 2-1:0.85: Geyser mode initialized. [ 303.531301][ T5859] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input8 [ 303.766775][ T5859] usb 2-1: USB disconnect, device number 3 [ 303.810880][ T5859] appletouch 2-1:0.85: input: appletouch disconnected [ 303.837656][ T7484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.620'. [ 304.111147][ T7491] loop3: detected capacity change from 0 to 512 [ 304.122804][ T7491] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 304.171591][ T7491] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.624: iget: bad extra_isize 5 (inode size 256) [ 304.195311][ T7491] EXT4-fs (loop3): Remounting filesystem read-only [ 304.205349][ T7491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.224416][ T7495] loop0: detected capacity change from 0 to 128 [ 304.251264][ T7495] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.270549][ T7495] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 304.423557][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.538757][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'. [ 304.548603][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.627'. [ 304.560572][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'. [ 304.570948][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.627'. [ 304.580286][ T7500] netlink: 'syz.1.627': attribute type 6 has an invalid length. [ 304.609148][ T5807] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.221653][ T7514] wg1: tun_chr_ioctl cmd 1074025681 [ 305.715915][ T7510] loop2: detected capacity change from 0 to 32768 [ 305.742272][ T7510] (syz.2.632,7510,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.757138][ T7510] (syz.2.632,7510,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.837439][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 305.881309][ T7510] JBD2: Ignoring recovery information on journal [ 306.038827][ T7510] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 306.221945][ T5805] ocfs2: Unmounting device (7,2) on (node local) [ 307.465416][ T5862] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 307.638300][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 307.664857][ T5862] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 307.677883][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.686785][ T5862] usb 5-1: Product: syz [ 307.691221][ T5862] usb 5-1: Manufacturer: syz [ 307.695984][ T5862] usb 5-1: SerialNumber: syz [ 307.712256][ T5862] usb 5-1: config 0 descriptor?? [ 308.127067][ T7559] Falling back ldisc for ptm0. [ 308.370508][ T5862] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 308.444759][ T5862] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 308.492409][ T5862] usb 5-1: USB disconnect, device number 7 [ 309.145487][ T7575] dvmrp0: entered allmulticast mode [ 309.291017][ T7572] loop2: detected capacity change from 0 to 4096 [ 309.291067][ T7579] support for the xor transformation has been removed. [ 310.188615][ T7586] loop1: detected capacity change from 0 to 4096 [ 310.223878][ T7586] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 310.992787][ T7605] loop3: detected capacity change from 0 to 128 [ 311.398276][ T7611] nbd0: detected capacity change from 0 to 127 [ 311.412829][ T5802] block nbd0: Receive control failed (result -32) [ 311.547043][ T7617] loop3: detected capacity change from 0 to 8 [ 312.209627][ T7613] loop0: detected capacity change from 0 to 32768 [ 312.249229][ T7613] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 312.388764][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'. [ 312.398304][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'. [ 312.407327][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.684'. [ 312.427117][ T7630] loop1: detected capacity change from 0 to 1024 [ 312.446231][ T7613] XFS (loop0): Ending clean mount [ 312.549399][ T5807] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 312.769486][ T4403] hfsplus: b-tree write err: -5, ino 4 [ 313.728297][ T5862] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 313.873906][ T7661] netlink: 56 bytes leftover after parsing attributes in process `syz.4.698'. [ 313.919660][ T5862] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 313.928214][ T5862] usb 4-1: config 1 has no interface number 0 [ 313.934493][ T5862] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 313.946295][ T5862] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 313.957496][ T5862] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 313.967588][ T5862] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.015655][ T5862] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 314.026023][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.034597][ T5862] usb 4-1: Product: syz [ 314.039045][ T5862] usb 4-1: Manufacturer: syz [ 314.043802][ T5862] usb 4-1: SerialNumber: syz [ 314.070243][ T7657] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 314.079803][ T7657] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 314.113998][ T7667] Zero length message leads to an empty skb [ 314.264268][ T5526] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 314.355963][ T7657] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 314.368994][ T7657] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 314.470521][ T5526] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 314.479513][ T5526] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 314.490946][ T5526] usb 3-1: config 220 has no interface number 2 [ 314.497411][ T5526] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 314.510906][ T5526] usb 3-1: config 220 interface 0 has no altsetting 0 [ 314.518143][ T5526] usb 3-1: config 220 interface 76 has no altsetting 0 [ 314.525311][ T5526] usb 3-1: config 220 interface 1 has no altsetting 0 [ 314.614955][ T5526] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 314.624648][ T5526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.637015][ T5526] usb 3-1: Product: syz [ 314.641761][ T5526] usb 3-1: Manufacturer: syz [ 314.646703][ T5526] usb 3-1: SerialNumber: syz [ 314.845975][ T5862] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 314.972067][ T5526] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 314.981214][ T5526] uvcvideo 3-1:220.0: No valid video chain found. [ 314.988153][ T5526] usb 3-1: selecting invalid altsetting 0 [ 315.055997][ T5862] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 315.064045][ T5862] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 315.100429][ T7680] loop1: detected capacity change from 0 to 512 [ 315.162845][ T7680] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 315.164893][ T5526] usb 3-1: selecting invalid altsetting 0 [ 315.181387][ T5526] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 315.210206][ T5862] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 315.217677][ T5862] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 315.284801][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 315.295797][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 315.307882][ T7680] EXT4-fs error (device loop1): __ext4_iget:5443: inode #15: block 1803188595: comm syz.1.707: invalid block [ 315.332266][ T7680] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.707: couldn't read orphan inode 15 (err -117) [ 315.351038][ T5862] usb 4-1: USB disconnect, device number 5 [ 315.360634][ T5862] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 315.379683][ T5526] usb 3-1: USB disconnect, device number 5 [ 315.413998][ T7680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.505100][ T5862] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 315.565971][ T3820] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.584517][ T7680] EXT4-fs (loop1): shut down requested (1) [ 315.650427][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 315.666440][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 315.793729][ T3820] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.887554][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.995421][ T3820] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.097590][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 316.107209][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 316.122817][ T3820] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.326392][ T3820] bridge_slave_1: left allmulticast mode [ 316.333601][ T3820] bridge_slave_1: left promiscuous mode [ 316.340513][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.354900][ T3820] bridge_slave_0: left allmulticast mode [ 316.361034][ T3820] bridge_slave_0: left promiscuous mode [ 316.367594][ T3820] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.833344][ T3820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.869785][ T3820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.896054][ T3820] bond0 (unregistering): Released all slaves [ 317.046875][ T3820] tipc: Disabling bearer [ 317.053880][ T3820] tipc: Left network mode [ 317.299004][ T11] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 317.514917][ T11] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 317.523734][ T11] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 317.532796][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 317.542095][ T11] usb 3-1: config 1 has no interface number 0 [ 317.548475][ T11] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 317.559810][ T11] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 317.573177][ T11] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 317.582533][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.674501][ T7700] loop0: detected capacity change from 0 to 16 [ 317.713522][ T11] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 317.724185][ T3820] hsr_slave_0: left promiscuous mode [ 317.733058][ T7700] erofs (device loop0): mounted with root inode @ nid 36. [ 317.748932][ T3820] hsr_slave_1: left promiscuous mode [ 317.758486][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.766153][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.784203][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.792317][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.801316][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.816618][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.842048][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.855891][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.867607][ T3820] veth1_macvtap: left promiscuous mode [ 317.873465][ T3820] veth0_macvtap: left promiscuous mode [ 317.879654][ T3820] veth1_vlan: left promiscuous mode [ 317.885155][ T3820] veth0_vlan: left promiscuous mode [ 317.995922][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.327112][ T11] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 318.592206][ T3820] team0 (unregistering): Port device team_slave_1 removed [ 318.594202][ T11] usb 3-1: USB disconnect, device number 6 [ 318.674609][ T11] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 318.689544][ T3820] team0 (unregistering): Port device team_slave_0 removed [ 319.185660][ T7711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.719'. [ 319.196351][ T7711] netlink: 32 bytes leftover after parsing attributes in process `syz.1.719'. [ 319.758963][ T1150] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.759427][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 319.777226][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 319.802193][ T7720] geneve2: entered promiscuous mode [ 319.807586][ T7720] geneve2: entered allmulticast mode [ 319.821543][ T3820] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 42491 - 0 [ 319.874753][ T3820] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 42491 - 0 [ 319.963563][ T3820] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 42491 - 0 [ 320.150146][ T5808] Bluetooth: hci4: command tx timeout [ 320.418996][ T7702] chnl_net:caif_netlink_parms(): no params data found [ 321.376571][ T7754] loop0: detected capacity change from 0 to 64 [ 321.385857][ T7753] netlink: 140 bytes leftover after parsing attributes in process `syz.1.735'. [ 321.430859][ T7702] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.438681][ T7702] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.446347][ T7702] bridge_slave_0: entered allmulticast mode [ 321.456037][ T7702] bridge_slave_0: entered promiscuous mode [ 321.520697][ T7702] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.528496][ T7702] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.536175][ T7702] bridge_slave_1: entered allmulticast mode [ 321.547581][ T7702] bridge_slave_1: entered promiscuous mode [ 321.805976][ T7702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.880777][ T7702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.198727][ T7702] team0: Port device team_slave_0 added [ 322.231067][ T5808] Bluetooth: hci4: command tx timeout [ 322.268253][ T7761] loop3: detected capacity change from 0 to 4096 [ 322.287879][ T7702] team0: Port device team_slave_1 added [ 322.408293][ T7769] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.575114][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.583022][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.610335][ T7702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.688858][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.696001][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.723607][ T7702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.090363][ T7702] hsr_slave_0: entered promiscuous mode [ 323.100501][ T7702] hsr_slave_1: entered promiscuous mode [ 323.109287][ T7702] debugfs: 'hsr0' already exists in 'hsr' [ 323.115180][ T7702] Cannot create hsr debugfs directory [ 323.399279][ T11] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 323.422783][ T7785] netlink: 27 bytes leftover after parsing attributes in process `syz.2.751'. [ 323.564742][ T11] usb 2-1: config 0 interface 0 has no altsetting 0 [ 323.571988][ T11] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 323.581474][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.624661][ T11] usb 2-1: config 0 descriptor?? [ 323.758842][ T7786] loop0: detected capacity change from 0 to 4096 [ 323.775306][ T7790] netlink: 774 bytes leftover after parsing attributes in process `syz.2.753'. [ 323.866240][ T7786] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 323.873177][ T7786] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 324.037009][ T7792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.138941][ T1150] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 324.185422][ T5807] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 324.192433][ T5807] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 324.199064][ T7702] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 324.199665][ T5807] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 324.239885][ T7702] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 324.262183][ T7794] loop2: detected capacity change from 0 to 128 [ 324.282751][ T3820] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 324.297305][ T7702] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 324.308446][ T5808] Bluetooth: hci4: command tx timeout [ 324.344153][ T7794] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.365304][ T7702] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 324.372568][ T7794] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 324.492778][ T5526] IPVS: starting estimator thread 0... [ 324.506591][ T7799] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 324.559492][ T11] video4linux radio48: keene_cmd_main failed (-71) [ 324.571458][ T11] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 324.583597][ T11] usb 2-1: USB disconnect, device number 4 [ 324.608758][ T7800] IPVS: using max 192 ests per chain, 9600 per kthread [ 324.630967][ T7802] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 324.718764][ T5805] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 325.157627][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.316799][ T7702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.475634][ T7702] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.542852][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.550430][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.640964][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.648533][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.208683][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 326.273038][ T7823] loop2: detected capacity change from 0 to 1024 [ 326.339016][ T7823] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 326.348570][ T7823] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 326.358384][ T7823] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.766: Failed to acquire dquot type 0 [ 326.388489][ T5808] Bluetooth: hci4: command tx timeout [ 326.444201][ T7823] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 326.461043][ T7823] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.766: corrupted inode contents [ 326.514718][ T7831] netlink: 1 bytes leftover after parsing attributes in process `syz.1.769'. [ 326.547400][ T7823] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.766: mark_inode_dirty error [ 326.578697][ T7823] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.766: corrupted inode contents [ 326.645597][ T7823] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.766: mark_inode_dirty error [ 326.666617][ T7823] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.766: corrupted inode contents [ 326.695723][ T7823] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 326.723799][ T7823] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.766: corrupted inode contents [ 326.768788][ T7823] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.766: mark_inode_dirty error [ 326.839906][ T7823] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 326.936677][ T7823] EXT4-fs (loop2): 1 truncate cleaned up [ 326.944757][ T7823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.060577][ T7823] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 327.070076][ T7823] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 327.079805][ T7823] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.766: Failed to acquire dquot type 0 [ 327.182268][ T7841] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 327.192370][ T7841] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 327.202059][ T7841] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.766: Failed to acquire dquot type 0 [ 327.246683][ T7842] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 327.256507][ T7842] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 327.266399][ T7842] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.766: Failed to acquire dquot type 0 [ 327.271170][ T7702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.614143][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.654330][ T7849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.738421][ T7875] netlink: 72 bytes leftover after parsing attributes in process `syz.1.786'. [ 328.747833][ T7875] netlink: 72 bytes leftover after parsing attributes in process `syz.1.786'. [ 328.894879][ T7873] loop0: detected capacity change from 0 to 2048 [ 329.022718][ T7881] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.077844][ T7702] veth0_vlan: entered promiscuous mode [ 329.109469][ T5862] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 329.129204][ T30] audit: type=1800 audit(2000000033.739:30): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.785" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 329.174467][ T7702] veth1_vlan: entered promiscuous mode [ 329.203139][ T7873] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 329.228583][ T7873] Remounting filesystem read-only [ 329.285662][ T5862] usb 3-1: config 0 has no interfaces? [ 329.339366][ T5862] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 329.349035][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.357288][ T5862] usb 3-1: Product: syz [ 329.361818][ T5862] usb 3-1: Manufacturer: syz [ 329.366601][ T5862] usb 3-1: SerialNumber: syz [ 329.410456][ T5862] usb 3-1: config 0 descriptor?? [ 329.432255][ T7702] veth0_macvtap: entered promiscuous mode [ 329.455129][ T7702] veth1_macvtap: entered promiscuous mode [ 329.585472][ T7702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.615161][ T7702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.709455][ T5526] usb 3-1: USB disconnect, device number 7 [ 329.782746][ T4305] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.829372][ T4305] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.935680][ T4305] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.995202][ T4305] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.435685][ T7889] loop1: detected capacity change from 0 to 40427 [ 330.448339][ T7889] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 330.455145][ T7889] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 330.871093][ T7901] loop3: detected capacity change from 0 to 256 [ 330.995731][ T7889] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 331.039634][ T7889] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 331.046907][ T7889] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 332.601468][ T7912] loop3: detected capacity change from 0 to 32768 [ 332.660540][ T7918] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 333.106180][ T7927] loop2: detected capacity change from 0 to 64 [ 333.204869][ T7927] gfs2: path_lookup on c::: returned error -2 [ 333.264133][ T5862] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 333.464783][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.475928][ T5862] usb 1-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 333.485722][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.555347][ T5862] usb 1-1: config 0 descriptor?? [ 333.573137][ T5862] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 333.582173][ T5862] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 333.590332][ T5862] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 333.600134][ T5862] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 333.608411][ T5862] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 333.619730][ T5862] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 333.630454][ T5862] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 333.638857][ T5862] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 333.650041][ T5862] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 333.660667][ T5862] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 333.668931][ T5862] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 333.680471][ T5862] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 333.690977][ T5862] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 333.699151][ T5862] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 333.709571][ T5862] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 333.802617][ T11] usb 1-1: USB disconnect, device number 4 [ 333.847761][ T11] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 333.911433][ T11] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 333.953259][ T11] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 333.978780][ T11] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 333.993571][ T11] keyspan 1-1:0.0: device disconnected [ 334.106303][ T7940] loop2: detected capacity change from 0 to 256 [ 334.116447][ T7940] exfat: Deprecated parameter 'utf8' [ 334.122248][ T7940] exfat: Deprecated parameter 'utf8' [ 334.128684][ T7940] exfat: Deprecated parameter 'utf8' [ 334.185886][ T7942] netlink: 'syz.1.808': attribute type 1 has an invalid length. [ 334.206443][ T7940] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 335.109358][ T7963] netlink: 'syz.2.815': attribute type 21 has an invalid length. [ 335.514809][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.525577][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.685253][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.694118][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.748510][ T7975] loop2: detected capacity change from 0 to 2048 [ 337.082709][ T7983] loop1: detected capacity change from 0 to 40427 [ 337.103205][ T7983] F2FS-fs (loop1): build fault injection rate: 14 [ 337.118859][ T7983] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 337.127284][ T5808] Bluetooth: hci4: command tx timeout [ 337.309161][ T7983] F2FS-fs (loop1): invalid crc value [ 337.902306][ T8003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.831'. [ 337.938998][ C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 337.959176][ C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 338.224752][ T7983] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 338.234094][ T7983] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 338.258708][ T7983] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 338.743623][ T8014] loop2: detected capacity change from 0 to 1024 [ 339.821136][ T8020] loop0: detected capacity change from 0 to 32768 [ 339.821465][ T8018] loop3: detected capacity change from 0 to 40427 [ 339.894528][ T8020] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 339.933009][ T8018] F2FS-fs (loop3): invalid crc value [ 340.194639][ T8020] XFS (loop0): Ending clean mount [ 340.207522][ T8020] XFS (loop0): Quotacheck needed: Please wait. [ 340.240491][ T8018] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 340.256017][ T8020] XFS (loop0): Quotacheck: Done. [ 340.257707][ T8018] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 340.491957][ T5807] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 340.555176][ T8036] Bluetooth: MGMT ver 1.23 [ 340.561059][ T8036] Bluetooth: hci1: too big key_count value 36317 [ 341.214870][ T8040] loop1: detected capacity change from 0 to 64 [ 341.496085][ T8044] loop2: detected capacity change from 0 to 128 [ 341.584439][ T8044] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.648912][ T8044] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.790912][ T8042] loop5: detected capacity change from 0 to 4096 [ 341.969848][ T5805] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.398624][ T5862] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 343.584941][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 343.615685][ T5862] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 343.624312][ T5862] usb 3-1: config 179 has no interface number 0 [ 343.630891][ T5862] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 343.642266][ T5862] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 343.653845][ T5862] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 343.665301][ T5862] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 343.677657][ T5862] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 343.691347][ T5862] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 343.700889][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.743649][ T8068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 344.023826][ T5862] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input9 [ 344.299982][ T11] usb 3-1: USB disconnect, device number 8 [ 344.300051][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 345.236707][ T8108] loop0: detected capacity change from 0 to 512 [ 345.594206][ T8115] loop3: detected capacity change from 0 to 512 [ 345.661146][ T8115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.136802][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.530222][ T8122] loop1: detected capacity change from 0 to 4096 [ 346.550742][ T8122] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 346.897297][ T8135] netlink: 64 bytes leftover after parsing attributes in process `syz.5.886'. [ 346.906727][ T8135] netlink: 64 bytes leftover after parsing attributes in process `syz.5.886'. [ 347.156881][ T8140] loop2: detected capacity change from 0 to 128 [ 347.181697][ T8140] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.244939][ T8140] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 347.369534][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.376346][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.495334][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 347.609739][ T3820] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 347.691459][ T8150] loop1: detected capacity change from 0 to 512 [ 347.751851][ T8150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.172273][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.272580][ T8160] loop2: detected capacity change from 0 to 512 [ 348.429413][ T8160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.442706][ T8160] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.680742][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.324362][ T8182] loop2: detected capacity change from 0 to 512 [ 349.356512][ T8184] loop0: detected capacity change from 0 to 512 [ 349.426642][ T8184] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.907: bad orphan inode 13 [ 349.453652][ T8184] ext4_test_bit(bit=12, block=4) = 1 [ 349.459357][ T8184] is_bad_inode(inode)=0 [ 349.463739][ T8184] NEXT_ORPHAN(inode)=0 [ 349.468045][ T8184] max_ino=32 [ 349.471364][ T8184] i_nlink=1 [ 349.476624][ T8184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.503675][ T8184] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.907: Unrecognised inode hash code 20 [ 349.516216][ T8184] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.907: Corrupt directory, running e2fsck is recommended [ 349.529964][ T8184] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.907: Unrecognised inode hash code 20 [ 349.543084][ T8184] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.907: Corrupt directory, running e2fsck is recommended [ 349.630785][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.175580][ T8228] loop1: detected capacity change from 0 to 256 [ 352.201626][ T5862] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 352.424698][ T5862] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 352.434106][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.442576][ T5862] usb 1-1: Product: syz [ 352.446923][ T5862] usb 1-1: Manufacturer: syz [ 352.451832][ T5862] usb 1-1: SerialNumber: syz [ 352.579623][ T8254] loop2: detected capacity change from 0 to 2048 [ 352.670636][ T8254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.384017][ T5862] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 353.396548][ T5862] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 353.407228][ T5862] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 353.460146][ T5862] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 353.552553][ T5862] usb 1-1: USB disconnect, device number 5 [ 353.709074][ T8274] netlink: 'syz.5.949': attribute type 6 has an invalid length. [ 353.787213][ T8274] netlink: 'syz.5.949': attribute type 6 has an invalid length. [ 354.804192][ T8283] loop2: detected capacity change from 0 to 32768 [ 354.842329][ T8283] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 354.981231][ T5805] ocfs2: Unmounting device (7,2) on (node local) [ 355.530561][ T8307] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.567407][ T8307] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.574774][ T8307] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.582068][ T8307] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.589371][ T8307] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.596569][ T8307] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.603927][ T8307] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.611200][ T8307] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.618453][ T8307] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.971819][ T8311] loop1: detected capacity change from 0 to 256 [ 356.004151][ T8314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.968'. [ 356.015877][ T8311] exfat: Deprecated parameter 'namecase' [ 356.155127][ T8311] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 357.668951][ T8340] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 357.722372][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.982'. [ 357.732842][ T8344] netlink: 3 bytes leftover after parsing attributes in process `syz.2.982'. [ 358.246337][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 358.520700][ T8362] loop0: detected capacity change from 0 to 64 [ 358.530355][ T8360] netem: change failed [ 359.124560][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.997'. [ 359.565156][ T8387] loop3: detected capacity change from 0 to 16 [ 359.584459][ T8387] erofs (device loop3): mounted with root inode @ nid 36. [ 359.763048][ T8392] loop2: detected capacity change from 0 to 512 [ 359.774792][ T8389] net_ratelimit: 504 callbacks suppressed [ 359.774873][ T8389] IPVS: rr: FWM 3 0x00000003 - no destination available [ 359.793116][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 359.807593][ T5854] IPVS: starting estimator thread 0... [ 359.910007][ T8393] IPVS: using max 192 ests per chain, 9600 per kthread [ 359.944693][ T8392] ------------[ cut here ]------------ [ 359.951852][ T8392] EA inode 11 i_nlink=2 [ 359.955194][ T8392] WARNING: CPU: 1 PID: 8392 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x711/0x900 [ 359.970447][ T8392] Modules linked in: [ 359.974578][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.2.1004 Not tainted syzkaller #0 PREEMPT(none) [ 359.985454][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 359.996160][ T8392] RIP: 0010:ext4_xattr_inode_update_ref+0x711/0x900 [ 360.003923][ T8392] Code: 00 00 00 00 4d 85 ed 0f 85 e6 01 00 00 45 85 ff 0f 85 ee 01 00 00 48 c7 c7 2d 72 ba 91 48 8b 75 d0 8b 55 c0 e8 b0 27 dd fd 90 <0f> 0b 90 90 4c 8b 6d a8 4c 8b 75 c8 4c 8b 7d b0 e9 6c fe ff ff e8 [ 360.024062][ T8392] RSP: 0018:ffff88804fcb2d80 EFLAGS: 00010287 [ 360.030488][ T8392] RAX: ffffffff8120833e RBX: ffff888109f94da0 RCX: 0000000000080000 [ 360.038794][ T8392] RDX: ffffc90009405000 RSI: 00000000000050b7 RDI: 00000000000050b8 [ 360.046946][ T8392] RBP: ffff88804fcb2e08 R08: ffffea000000000f R09: 0000000000000000 [ 360.055286][ T8392] R10: ffff888237aba028 R11: ffff88823f273c80 R12: 0000000000000000 [ 360.063686][ T8392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.072048][ T8392] FS: 00007fd2677806c0(0000) GS:ffff8881aae51000(0000) knlGS:0000000000000000 [ 360.081339][ T8392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.089415][ T8392] CR2: 00007f48f1518870 CR3: 0000000025e74000 CR4: 00000000003526f0 [ 360.098824][ T8392] Call Trace: [ 360.102251][ T8392] [ 360.105351][ T8392] ext4_xattr_set_entry+0x1169/0x3440 [ 360.111230][ T8392] ext4_xattr_ibody_set+0x437/0xa40 [ 360.116731][ T8392] ext4_expand_extra_isize_ea+0x2ea9/0x3bb0 [ 360.123641][ T8392] __ext4_expand_extra_isize+0x571/0x6f0 [ 360.130207][ T8392] __ext4_mark_inode_dirty+0x654/0x970 [ 360.135967][ T8392] ext4_evict_inode+0x171c/0x2480 [ 360.141397][ T8392] ? __pfx_ext4_evict_inode+0x10/0x10 [ 360.147019][ T8392] evict+0x700/0xd00 [ 360.152502][ T8392] ? kmsan_get_metadata+0xfb/0x160 [ 360.157900][ T8392] iput+0xba3/0xfa0 [ 360.163342][ T8392] ext4_process_orphan+0x49a/0x520 [ 360.168830][ T8392] ext4_orphan_cleanup+0x10a6/0x1e30 [ 360.174391][ T8392] ext4_fill_super+0xa788/0xb010 [ 360.179968][ T8392] get_tree_bdev_flags+0x6e6/0x920 [ 360.185310][ T8392] ? __pfx_ext4_fill_super+0x10/0x10 [ 360.192160][ T8392] ? __pfx_ext4_fill_super+0x10/0x10 [ 360.197722][ T8392] ? __pfx_ext4_get_tree+0x10/0x10 [ 360.204280][ T8392] get_tree_bdev+0x38/0x50 [ 360.209040][ T8392] ext4_get_tree+0x35/0x40 [ 360.213718][ T8392] vfs_get_tree+0xb3/0x5c0 [ 360.218477][ T8392] do_new_mount+0x839/0x15f0 [ 360.223342][ T8392] ? kmsan_get_metadata+0xfb/0x160 [ 360.228865][ T8392] path_mount+0x747/0x1fb0 [ 360.233589][ T8392] __se_sys_mount+0x6f7/0x7e0 [ 360.238744][ T8392] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 360.245138][ T8392] __x64_sys_mount+0xe4/0x150 [ 360.250303][ T8392] x64_sys_call+0x3604/0x3e30 [ 360.255249][ T8392] do_syscall_64+0xd9/0xfa0 [ 360.258770][ T8404] loop1: detected capacity change from 0 to 512 [ 360.260141][ T8392] ? irqentry_exit+0x16/0x60 [ 360.271079][ T8392] ? clear_bhb_loop+0x40/0x90 [ 360.275117][ T8404] EXT4-fs: Ignoring removed i_version option [ 360.275975][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.288224][ T8392] RIP: 0033:0x7fd26699076a [ 360.294137][ T8392] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.297164][ T8404] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 360.315453][ T8392] RSP: 002b:00007fd26777fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 360.315611][ T8392] RAX: ffffffffffffffda RBX: 00007fd26777fef0 RCX: 00007fd26699076a [ 360.315717][ T8392] RDX: 00002000000000c0 RSI: 00002000000001c0 RDI: 00007fd26777feb0 [ 360.315821][ T8392] RBP: 00002000000000c0 R08: 00007fd26777fef0 R09: 0000000000000012 [ 360.315920][ T8392] R10: 0000000000000012 R11: 0000000000000246 R12: 00002000000001c0 [ 360.316015][ T8392] R13: 00007fd26777feb0 R14: 000000000000046f R15: 0000200000000000 [ 360.316154][ T8392] [ 360.316216][ T8392] ---[ end trace 0000000000000000 ]--- [ 360.358561][ T8392] EXT4-fs (loop2): 1 orphan inode deleted [ 360.396333][ T8392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.456906][ T8399] block device autoloading is deprecated and will be removed. [ 360.482868][ T8404] EXT4-fs (loop1): 1 truncate cleaned up [ 360.491250][ T8404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.854776][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.043358][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.406181][ T8425] tap0: tun_chr_ioctl cmd 2148553947 [ 361.764394][ T8437] loop5: detected capacity change from 0 to 16 [ 361.774186][ T8436] loop2: detected capacity change from 0 to 128 [ 362.909683][ T8458] program syz.5.1028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.106392][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'. [ 363.119142][ T5854] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 363.309759][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 363.352086][ T5854] usb 2-1: config 0 interface 0 has no altsetting 0 [ 363.422020][ T5854] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 363.432020][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.440597][ T5854] usb 2-1: Product: syz [ 363.444943][ T5854] usb 2-1: Manufacturer: syz [ 363.449888][ T5854] usb 2-1: SerialNumber: syz [ 363.635067][ T5854] usb 2-1: config 0 descriptor?? [ 363.889272][ T8463] loop0: detected capacity change from 0 to 40427 [ 363.899617][ T8463] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 363.907561][ T8463] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 363.950233][ T8463] F2FS-fs (loop0): invalid crc value [ 364.151433][ T5854] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 364.251511][ T8463] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 364.270548][ T8463] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 364.277809][ T8463] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 364.347807][ T5854] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 364.381742][ T5854] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 364.414783][ T8479] loop5: detected capacity change from 0 to 1024 [ 364.429004][ T8479] EXT4-fs: Ignoring removed nobh option [ 364.434812][ T8479] EXT4-fs: Ignoring removed bh option [ 364.454514][ T8479] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 364.568164][ T5862] usb 2-1: USB disconnect, device number 5 [ 364.741420][ T8484] macvtap0: entered promiscuous mode [ 364.752716][ T8484] macvtap0: left promiscuous mode [ 364.776038][ T8479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.876856][ T7702] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.011901][ T8503] loop3: detected capacity change from 0 to 128 [ 366.063124][ T8503] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 366.117579][ T8503] hpfs: filesystem error: improperly stopped [ 366.124088][ T8503] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 366.133182][ T8503] hpfs: You really don't want any checks? You are crazy... [ 366.186669][ T8506] loop2: detected capacity change from 0 to 512 [ 366.189626][ T8503] hpfs: hpfs_map_sector(): read error [ 366.198990][ T8503] hpfs: code page support is disabled [ 366.227905][ T8503] hpfs: hpfs_map_4sectors(): unaligned read [ 366.259745][ T8503] hpfs: hpfs_map_4sectors(): unaligned read [ 366.265843][ T8503] hpfs: filesystem error: unable to find root dir [ 366.350981][ T8503] hpfs: hpfs_map_4sectors(): unaligned read [ 367.379890][ T8532] netlink: 'syz.3.1060': attribute type 39 has an invalid length. [ 367.394993][ T8533] binder: 8531:8533 ioctl c0306201 200000000640 returned -22 [ 367.407761][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.542760][ T8532] bridge_slave_0 (unregistering): left allmulticast mode [ 367.551524][ T8532] bridge_slave_0 (unregistering): left promiscuous mode [ 367.559248][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.298575][ T8544] loop1: detected capacity change from 0 to 1024 [ 368.594803][ T8546] loop0: detected capacity change from 0 to 1764 [ 368.641570][ T58] hfsplus: b-tree write err: -5, ino 4 [ 369.253646][ T8556] loop1: detected capacity change from 0 to 4096 [ 369.362692][ T8564] program syz.0.1074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.384461][ T8565] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 370.427516][ T8573] loop0: detected capacity change from 0 to 32768 [ 370.446173][ T8573] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1079 (8573) [ 370.479102][ T8573] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 370.489669][ T8573] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 370.839975][ T8573] BTRFS info (device loop0): enabling ssd optimizations [ 370.847243][ T8573] BTRFS info (device loop0): turning on async discard [ 370.857633][ T8573] BTRFS info (device loop0): enabling free space tree [ 370.971623][ T8573] BTRFS info (device loop0): balance: start -susage=34359738372,limit=3330..0 [ 370.981626][ T8573] BTRFS info (device loop0): balance: ended with status: 0 [ 371.104602][ T5807] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 371.458363][ T8602] loop5: detected capacity change from 0 to 128 [ 371.490907][ T8602] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 371.572789][ T8602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.925458][ T30] audit: type=1326 audit(2000000076.529:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.1087" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd26698efc9 code=0x0 [ 372.006636][ T5861] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 372.203265][ T5861] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.214048][ T5861] usb 2-1: config 0 has no interfaces? [ 372.245694][ T5861] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 372.255455][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.264278][ T5861] usb 2-1: Product: syz [ 372.268852][ T5861] usb 2-1: Manufacturer: syz [ 372.274491][ T5861] usb 2-1: SerialNumber: syz [ 372.325843][ T5861] usb 2-1: config 0 descriptor?? [ 372.569536][ T5862] usb 2-1: USB disconnect, device number 6 [ 372.793652][ T8619] loop5: detected capacity change from 0 to 2048 [ 372.849418][ T8619] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 372.860365][ T8619] NILFS (loop5): mounting unchecked fs [ 372.932272][ T8619] NILFS (loop5): recovery complete [ 372.954277][ T8624] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.693175][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1101'. [ 373.884862][ T8641] loop3: detected capacity change from 0 to 1024 [ 375.608559][ T5862] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 375.802181][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 375.827042][ T5862] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 375.839542][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.850031][ T5862] usb 1-1: config 0 has no interface number 0 [ 375.926699][ T5862] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 375.936232][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.945560][ T5862] usb 1-1: Product: syz [ 375.950018][ T5862] usb 1-1: Manufacturer: syz [ 375.954788][ T5862] usb 1-1: SerialNumber: syz [ 376.020957][ T5862] usb 1-1: config 0 descriptor?? [ 376.248305][ T5862] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 376.255873][ T5862] uvcvideo 1-1:0.105: No valid video chain found. [ 376.305384][ T5862] usb 1-1: USB disconnect, device number 6 [ 377.427607][ T8706] bond0: (slave gretap0): Opening slave failed [ 377.659336][ T5862] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 377.732168][ T8712] loop2: detected capacity change from 0 to 736 [ 377.868213][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 377.900370][ T5862] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 377.910892][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.964469][ T5862] usb 1-1: config 0 descriptor?? [ 378.220477][ T5862] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 378.271369][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 378.302155][ T5862] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 378.310665][ T5862] usb 1-1: media controller created [ 378.412708][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.435136][ T8704] ===================================================== [ 378.442937][ T8704] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 378.450363][ T8704] _copy_to_user+0xcc/0x120 [ 378.455021][ T8704] i2cdev_ioctl_smbus+0x586/0x660 [ 378.460503][ T8704] i2cdev_ioctl+0xa14/0xf40 [ 378.465576][ T8704] __se_sys_ioctl+0x23c/0x400 [ 378.470604][ T8704] __x64_sys_ioctl+0x97/0xe0 [ 378.475370][ T8704] x64_sys_call+0x1cbc/0x3e30 [ 378.480396][ T8704] do_syscall_64+0xd9/0xfa0 [ 378.485069][ T8704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.491302][ T8704] [ 378.493689][ T8704] Uninit was stored to memory at: [ 378.499196][ T8704] __i2c_smbus_xfer+0x254d/0x2f60 [ 378.504414][ T8704] i2c_smbus_xfer+0x31d/0x4d0 [ 378.509905][ T8704] i2cdev_ioctl_smbus+0x4a1/0x660 [ 378.515087][ T8704] i2cdev_ioctl+0xa14/0xf40 [ 378.521256][ T8704] __se_sys_ioctl+0x23c/0x400 [ 378.526129][ T8704] __x64_sys_ioctl+0x97/0xe0 [ 378.534139][ T8704] x64_sys_call+0x1cbc/0x3e30 [ 378.539768][ T8704] do_syscall_64+0xd9/0xfa0 [ 378.544451][ T8704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.550808][ T8704] [ 378.553202][ T8704] Local variable msgbuf1.i created at: [ 378.558919][ T8704] __i2c_smbus_xfer+0x86a/0x2f60 [ 378.564040][ T8704] i2c_smbus_xfer+0x31d/0x4d0 [ 378.569013][ T8704] [ 378.571399][ T8704] Bytes 0-1 of 2 are uninitialized [ 378.576593][ T8704] Memory access of size 2 starts at ffff888053977cf6 [ 378.583533][ T8704] Data copied to user address 0000200000000140 [ 378.589938][ T8704] [ 378.592370][ T8704] CPU: 0 UID: 0 PID: 8704 Comm: syz.0.1132 Tainted: G W syzkaller #0 PREEMPT(none) [ 378.603565][ T8704] Tainted: [W]=WARN [ 378.607459][ T8704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.618276][ T8704] ===================================================== [ 378.625440][ T8704] Disabling lock debugging due to kernel taint [ 378.635405][ T8704] Kernel panic - not syncing: kmsan.panic set ... [ 378.641963][ T8704] CPU: 0 UID: 0 PID: 8704 Comm: syz.0.1132 Tainted: G B W syzkaller #0 PREEMPT(none) [ 378.653034][ T8704] Tainted: [B]=BAD_PAGE, [W]=WARN [ 378.658152][ T8704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.668338][ T8704] Call Trace: [ 378.671718][ T8704] [ 378.674742][ T8704] __dump_stack+0x26/0x30 [ 378.679261][ T8704] dump_stack_lvl+0x53/0x270 [ 378.684035][ T8704] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 378.690040][ T8704] dump_stack+0x1e/0x25 [ 378.694367][ T8704] vpanic+0x435/0xd30 [ 378.698549][ T8704] panic+0x15d/0x160 [ 378.702673][ T8704] kmsan_report+0x31c/0x320 [ 378.707344][ T8704] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 378.713899][ T8704] ? kmsan_internal_check_memory+0x1e1/0x230 [ 378.720113][ T8704] ? kmsan_copy_to_user+0xf1/0x190 [ 378.725393][ T8704] ? _copy_to_user+0xcc/0x120 [ 378.730250][ T8704] ? i2cdev_ioctl_smbus+0x586/0x660 [ 378.735604][ T8704] ? i2cdev_ioctl+0xa14/0xf40 [ 378.740420][ T8704] ? __se_sys_ioctl+0x23c/0x400 [ 378.745452][ T8704] ? __x64_sys_ioctl+0x97/0xe0 [ 378.750382][ T8704] ? x64_sys_call+0x1cbc/0x3e30 [ 378.755415][ T8704] ? do_syscall_64+0xd9/0xfa0 [ 378.760261][ T8704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.766499][ T8704] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 378.771938][ T8704] ? __i2c_transfer+0x11cd/0x3110 [ 378.777103][ T8704] ? kmsan_get_metadata+0xfb/0x160 [ 378.782373][ T8704] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 378.788921][ T8704] ? kmsan_get_metadata+0xfb/0x160 [ 378.794188][ T8704] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 378.800165][ T8704] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 378.805550][ T8704] ? kmsan_get_metadata+0xfb/0x160 [ 378.810817][ T8704] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 378.816797][ T8704] kmsan_internal_check_memory+0x1e1/0x230 [ 378.822836][ T8704] kmsan_copy_to_user+0xf1/0x190 [ 378.827922][ T8704] _copy_to_user+0xcc/0x120 [ 378.832610][ T8704] i2cdev_ioctl_smbus+0x586/0x660 [ 378.837820][ T8704] i2cdev_ioctl+0xa14/0xf40 [ 378.842465][ T8704] ? kmsan_report+0x310/0x320 [ 378.847298][ T8704] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 378.852475][ T8704] __se_sys_ioctl+0x23c/0x400 [ 378.857354][ T8704] __x64_sys_ioctl+0x97/0xe0 [ 378.862131][ T8704] x64_sys_call+0x1cbc/0x3e30 [ 378.866987][ T8704] do_syscall_64+0xd9/0xfa0 [ 378.871660][ T8704] ? irqentry_exit+0x16/0x60 [ 378.876404][ T8704] ? clear_bhb_loop+0x40/0x90 [ 378.881243][ T8704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.887294][ T8704] RIP: 0033:0x7f84d678efc9 [ 378.891821][ T8704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.911583][ T8704] RSP: 002b:00007f84d760c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.920152][ T8704] RAX: ffffffffffffffda RBX: 00007f84d69e5fa0 RCX: 00007f84d678efc9 [ 378.928242][ T8704] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000004 [ 378.936325][ T8704] RBP: 00007f84d6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 378.944405][ T8704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.952483][ T8704] R13: 00007f84d69e6038 R14: 00007f84d69e5fa0 R15: 00007ffdafa7faa8 [ 378.960619][ T8704] [ 378.964008][ T8704] Kernel Offset: disabled [ 378.968377][ T8704] Rebooting in 86400 seconds..