last executing test programs: 12m27.344611691s ago: executing program 32 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000200ff0200000000b4abfb3300000000000114000380000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000000) 12m22.308470269s ago: executing program 33 (id=670): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x4}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) 12m7.877852541s ago: executing program 34 (id=718): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x58) 10m1.027992466s ago: executing program 6 (id=1541): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 10m0.583514297s ago: executing program 6 (id=1545): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x4, @dev={0xac, 0x14, 0x14, 0x45}, 0x4e22, 0x2, 'rr\x00', 0xc, 0x6, 0x27}, 0x2c) 10m0.217583025s ago: executing program 6 (id=1546): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000021c0)=0x95) ppoll(&(0x7f0000000040)=[{r1, 0x40d}], 0x1, 0x0, 0x0, 0x0) close(r0) 9m59.641836839s ago: executing program 6 (id=1552): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x171, &(0x7f0000000480)="$eJzs2rFKw0AYB/DParEUn8Cp0Ax1aJMmWgV3QXDyAcTQ3tXQxEgiSDsFX0BxiI/g6qqbj9DZzU1dXB0kkvRq2zsXCxLB/29o/vTLfXcJ4aarB77X5GGdaC262n8uBL5XaVmbbd7kNo3sElElDcMkuW6Q4vCrPkyihnJD9V5ca9147447LjPVHgAAAAAAAAAAAAAAAAAAAAAA/0T1RYTyUezfcMdlzalq2B/0bNdlQTj+RyNxRod47G9zR2PWTL/aO5GWnd9x4p3ztJ8xU9fSTqUk80byfPqpd6KH/UHd8ewu67Jj07RaxrphbJh61kuXO2qXYk1EpfRnQXo+7XZynujRUM8TUXl0WVp14ouzrHtRfv4CBZMX8YMQzTUKIcdAEdEfWIYIT69E35dK4gNlQVic/lYXR/dsHWSlnBb/keT/6n47yPsHdZat6kO6fzTavttR9k8pjEfPM3lBjO3ZK+kUyo4GkJPPAAAA///+VynD") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000380)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x31) 9m59.277545031s ago: executing program 6 (id=1557): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000180)='./file0\x00', 0x1600008, &(0x7f00000001c0)=ANY=[], 0x3, 0x632, &(0x7f0000000800)="$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") syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04030b00c800ce5dd37d19965fc01aff701b650101000000000000000000be0fd2b9228fdd729d2e844f66b0148e71729157fb7c50a2989575f160fc528c56d6af7f45ea4658fd464746dfe5480edb141a43f8e0cbf9424089c91e71b0eae1f058de8b8efa4cec9ca0"], 0xe) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 9m58.790038192s ago: executing program 6 (id=1559): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800) 9m56.944029677s ago: executing program 35 (id=1559): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800) 8m1.073755318s ago: executing program 7 (id=2342): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x2, @remote}}]}, 0x110) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r1, &(0x7f00000002c0)=""/189, 0xbd, 0x0) 8m0.660102879s ago: executing program 7 (id=2346): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xffffffff, @empty, 0x5b}}, 0x105, 0x6, 0xf05, 0xe0, 0xac, 0x5d, 0x1}, 0x9c) 8m0.007977062s ago: executing program 7 (id=2351): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 7m59.404427779s ago: executing program 7 (id=2357): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0xfc, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x86, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 7m58.963073266s ago: executing program 7 (id=2361): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 7m58.164388055s ago: executing program 7 (id=2368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x7f0, 0x0, 0xfffffffffffffd25) 7m57.205803097s ago: executing program 36 (id=2368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x7f0, 0x0, 0xfffffffffffffd25) 6m59.329694286s ago: executing program 1 (id=2739): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000200)={[], [], 0x2c}, 0x1, 0xef4, &(0x7f0000000f80)="$eJzs3UFsHNUZAOA3a6/txCZeAwUDJaTQikDBDkmkpjcjUI+IS++gkNAoJo0aeiAKxPSAqIQoUsSp4kDFhVIpRSoSqFIV9dT21Kq3HirUC5WqVArqoY2UuIr9Zr377GHXY3vWu/t90u+3b97s/P94o83MePZtAIZWbeXn0aOzWQjvfnbp6VdfyD65teyB5hoHVn5msdcIIdRb+lmyvc/jghvXLhzfqM3C4ZWfeT88c7X53MkQwlI4EK6ERvhofvHLD9976uDHb0zc9fb506/t0O43pfsBAACD6PKfFv/2yD//+NjM9cv7F8J4c3l+fN6I/cl43H8oHijnx8u10N7PWqLVWLLeSIxast5Ist5okme0IF892U69YL2xDvlGWpZttJ8AAADQj/Lz2kbIanNt/Vptbm71vP+Wz6fHsrkzpxZPnutRoQAAAEBp/7m4ctOtEEIIIYQQQgghBjiWp3t9BQIAAAAYNul8Yessbe9MXc2tNbrLf/XJ2sbPh21Q9b9/+fsr/weve8cBAKC8QT2azPcrP47O5zFI5xEcSZ63yeP/5sWAkWS73SqaV7Bf5hssqjP9ve5WRfVv9nXslaL60/kwd6ui+tN5OnerovrHK66jrKL6Jyquo6yi+vdUXEdZRfXvrbiOsorqn6y4jrKK6p+quI6yiuq/reI6yiqqf1/FdZRVVH+/3FZbVH+j4jrKKqp/puI6yiqq//aK6yirqP47Kq6jrKL676y4jl65P7b572F/Mt56/pye0/XLOR4AAAAMu/+Z/08IIYQQQgghehlrt5/2vhYxwHFx85cM+uXWUAAAAKBL+ecC8k+9L0f5+EiH8dHW8Ym1FfLxeofnj3UYH+8wDgAAAITw2zdP3vNOtvY5/y3Oh9e8OWBP+ORmKDGPUTof4Wbzb3Xes63m75d5ywAAABgu2feu3Hz06fdfnrl+ef9Cy9nvzXi+m88DOhqvDXwa+/l9AVNJP8vPoRfa89QK1kuvD9xWtL1nt7ijAAAAMMTy8/dGyGpzLefdjVCrzc2tnY/Phnp28tTiiUOxn38/yx+m6+O3lj9Rcd0AAABA99bO9zc+/8+/x3c2jGVzZ04tnjy32p9qLq/XWq8LTK8tz1qvCzSS5YcLlh+J/fz7O38wvWdl+dzxHy6+sN07DwAAAEPi3CvnTz+/uHjiRx544IEHzQe9fmcCAAC22xdfXKr/+MjU71Y//782/13++f8Dsd+Ic/v9Oa6Q3yeQfw5g3ef1n2vPM1203tn29RrJeiMxxpO6J1q2E1bmG2x/3kxRvkb7dsYK8k0m+aaSfOk8BaPJ+nm+fcnydH7CfL3pZHk6D+NokiNL8j8YAAAAoNj8yy+dnT/3yvnHT730/IsnXjxx5sjhY989duzQE995Yn7lvv751rv7AQAAgH60dtNv98/5+04WBAAAAAAAAAAAAAAAAAAAAEOoiq8T6/U+AgAAwLD798UQwpIQQpSO5fHe1yB2a0zsghqEEEIIIcRKLC+n3zQPAAAAsLNuXLtwvLVdZynb1nzNrTVWm5sxb95OPf7XmVuRr3b1yfbrJXu3tRqGXdX//uXvr/wfvL69+SfyB12//9XaN7BQLu/D87+cbc1/72iX+dP9f7Zc/oNJ/odDd/mX30/yP1cu/yNJ/r1d5l+3/2fL5X805p+N/YMPdZu//fUfj22+H3u6zP/tZP9fCN3mT/a/0WXCxGMxPwAMo1qvC9gh+VFCfhw9Gfv5/sbDzZDe/bDZ4/9asp3RLVfevt38OOju2M+Pl6aSvLnN1j+ZbO+2knWm+uWukqL6t+t13GlF9dcrrqOsovrHKq6jrKL6xyuuo6yi+icqrqOsovq7PQ/ttaL6++W6clH9kxXXUVZR/VMV11FWUf2b/X+8V4rq31dxHWUV1T9dcR1lFdVf8rJa5Yrqn6m4jrKK6r+94jrKKqr/jorrKKuo/jsrrqNX7ott0flwfv45HcfyfiPpj2/wuxzUawsAAADQb/612+b/e3YX1CCEEEIMd6z+WaD3dQghvjKWl5sH9duwvf8ur+r9fgmRxMIuqGFAouVdgyG0s59mBmC38v4/3Lz+w83rP9y8/nyV/B7+LOnnRjqMj3YYr3cYH0vG03+v4x3G70i2u5xf14zu7DD+tQ7j+zqM391hfLbD+D0dxu/tMH5fh3EAAACGw12xdX4IAAAAg+vVX3361m8efu7azPXL+xfC2Lp55w/F/nj82/qbsZ/Oe5+rx7/5/yT2fxHb38f2H8n67j8BAACAnZd/T4y//wMAAMDgyr+n1Pk/AAAADK6Z2Dr/BwAAgMF1e2yd/wMAAMAAyyY2Xhzb/LrAg7Htdl4/AGD3+3ps74/t/tg+ENtvxDY/Dngott+sqD4AYPv8/Ps/PfZOtjbf/5Fk/EZcnrfrLK1eKchq7TP574nt3th+q8t60u8D6DZ/bl+XeXYq//QW8wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg6O28vPo0dkshHc/u/T0z8be+sutZQ801ziw8jOLvUYIod58Xj661v91XPHGtQvHW9ubsc3C4ZCFrLk8PHO1mWkyhLAUDoQroRE+ml/88sP3njr48RsTd719/vRrO/graNs/AAAAGET/DwAA//+M3Sdg") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x9, 0x4, 0x1}) 6m58.046078602s ago: executing program 1 (id=2737): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000010640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0xfffffffffffffe8e) 6m57.595927427s ago: executing program 1 (id=2740): unshare(0x24020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x208500, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) 6m57.072186161s ago: executing program 1 (id=2743): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0xfc, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x86, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 6m56.585705791s ago: executing program 1 (id=2747): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x5, r1, 0x2e}, 0x10) 6m55.870372512s ago: executing program 1 (id=2750): unshare(0x28020480) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) 6m54.264351794s ago: executing program 37 (id=2750): unshare(0x28020480) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) 3m33.456095713s ago: executing program 8 (id=4168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)=ANY=[], 0x0) 3m32.642696527s ago: executing program 8 (id=4175): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x48, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "221941ea15b918e90a6327c696"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x48}}, 0x0) 3m31.856912542s ago: executing program 8 (id=4183): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x2e8200, 0x161) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) renameat2(0xffffffffffffff9c, &(0x7f0000000900)='./file6\x00', r0, &(0x7f0000000bc0)='./file7\x00', 0x0) 3m31.230350067s ago: executing program 8 (id=4187): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x579, &(0x7f0000000680)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x81, 0x633, &(0x7f0000000600)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3m29.865679232s ago: executing program 8 (id=4196): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000002c0)=[0x0, 0x7]) 3m25.094017428s ago: executing program 8 (id=4221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m23.082508781s ago: executing program 38 (id=4221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m10.833092115s ago: executing program 0 (id=4693): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) 2m10.324735006s ago: executing program 0 (id=4697): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2m9.843161009s ago: executing program 0 (id=4700): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001040)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) 2m8.520907463s ago: executing program 0 (id=4704): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2m7.844387789s ago: executing program 0 (id=4705): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 2m6.296327514s ago: executing program 0 (id=4713): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}}, 0x4000000) 1m51.129197936s ago: executing program 39 (id=4713): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}}, 0x4000000) 4.615723833s ago: executing program 5 (id=5411): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800010000000002000000000a00000002000000000000001400050000000000000000000000000000000001"], 0x30}}, 0x0) 4.073134046s ago: executing program 5 (id=5418): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a8, &(0x7f0000000500)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x42000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f0000000100)='./bus\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4.030468852s ago: executing program 2 (id=5419): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x78}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180"], 0x4c}}, 0x0) 3.58921797s ago: executing program 3 (id=5422): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.495748435s ago: executing program 5 (id=5423): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009c323f08a504033007c8d1b93c010902120011000200000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) 2.817867983s ago: executing program 2 (id=5435): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000a2f000/0x1000)=nil, 0x1000, 0x4) 2.730671989s ago: executing program 4 (id=5425): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1) 2.445181724s ago: executing program 3 (id=5426): unshare(0x4000400) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = dup3(r1, r0, 0x80000) io_submit(r2, 0x2, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x385d, r1, 0x0, 0x0, 0x10000, 0x0, 0x3, r0}]) 2.217434127s ago: executing program 9 (id=5427): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x5, &(0x7f0000000240)={[0x8]}, 0x8) 2.060006932s ago: executing program 4 (id=5428): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {}, {0xfff3, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf256800000008000300", @ANYRES32=r2, @ANYBLOB="1800c7"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc0) 1.94872363s ago: executing program 9 (id=5429): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f00000027c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100)={[], 0x6040000}, 0x0, 0x0) 1.920938645s ago: executing program 3 (id=5430): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800010000000002000000000a00000002000000000000001400050000000000000000000000000000000001"], 0x30}}, 0x0) 1.531013235s ago: executing program 2 (id=5431): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "c4ae92b1cc4bc421", "2cd39d65e0abdc121d7878df8c0a96e5", "674a9e39", "bb45394e79186b24"}, 0x3) 1.523336767s ago: executing program 4 (id=5432): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000200), 0x0, 0x0}) 1.477731849s ago: executing program 3 (id=5434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x84) 1.452556386s ago: executing program 9 (id=5436): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x78}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180"], 0x4c}}, 0x0) 1.121044621s ago: executing program 2 (id=5437): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\twr\n'], 0xa) 1.120840025s ago: executing program 3 (id=5438): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) 1.050042913s ago: executing program 9 (id=5439): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f"], 0x208}, 0x8040) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2000000, &(0x7f00000005c0)='trans=rdma,V\xab\xe0\v \x96\xfby\x98\x19\xbdl^\x14n\xcf>\xcd\v2\x01(\xc6\x14\x05\xba\xa3O,5\xbc\xe7\x1c)\xddA\x1f\xa0X\xbcQ\xe9\xae\xad\xf1\x978\xb0M\xac') 948.97188ms ago: executing program 5 (id=5440): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1) 948.824611ms ago: executing program 4 (id=5441): mkdir(0x0, 0x0) chdir(0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) statx(r0, 0x0, 0x1000, 0x6000, 0x0) 715.378727ms ago: executing program 2 (id=5442): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000000c0)="8d", 0x1}], 0x1}}], 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r2, 0x7}, 0xc) 673.979575ms ago: executing program 3 (id=5443): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3811809, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 509.776072ms ago: executing program 5 (id=5444): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {}, {0xfff3, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf256800000008000300", @ANYRES32=r2, @ANYBLOB="1800c7"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc0) 496.897332ms ago: executing program 4 (id=5445): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800010000000002000000000a00000002000000000000001400050000000000000000000000000000000001"], 0x30}}, 0x0) 409.772126ms ago: executing program 9 (id=5446): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) 107.492473ms ago: executing program 2 (id=5447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 104.712518ms ago: executing program 9 (id=5448): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) 79.757838ms ago: executing program 5 (id=5449): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x1, 0x7}, [], {}, [{0x8, 0x6}, {}], {0x10, 0x6}, {0x20, 0x4}}, 0x34, 0x3) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) 0s ago: executing program 4 (id=5450): r0 = socket(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000000, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) io_setup(0x101, &(0x7f0000000340)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) kernel console output (not intermixed with test programs): n mode enabled [ 855.298714][T16196] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 855.333418][T16196] ext4 filesystem being mounted at /705/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 855.756964][T11742] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 855.781786][T15135] batadv_slave_1: left promiscuous mode [ 855.812903][T15135] batadv0: left promiscuous mode [ 855.830373][ T7624] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 855.879574][T15135] hsr_slave_0: left promiscuous mode [ 855.926236][T15135] hsr_slave_1: left promiscuous mode [ 855.934155][T15135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.942078][T15135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.991403][T11742] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 856.001020][T11742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.038292][T15135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.046311][T15135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.068854][T11742] usb 5-1: config 0 descriptor?? [ 856.098956][T11742] cp210x 5-1:0.0: cp210x converter detected [ 856.143430][T15135] veth1_macvtap: left promiscuous mode [ 856.156603][T15135] veth0_macvtap: left promiscuous mode [ 856.162708][T15135] veth1_vlan: left promiscuous mode [ 856.168590][T15135] veth0_vlan: left promiscuous mode [ 856.637341][T16209] loop9: detected capacity change from 0 to 512 [ 856.652434][T16209] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 856.759311][T11742] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 856.777517][T16209] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.4219: corrupted in-inode xattr: overlapping e_value [ 856.916164][T16209] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.4219: couldn't read orphan inode 15 (err -117) [ 856.940290][T16209] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.019406][T11742] usb 5-1: cp210x converter now attached to ttyUSB0 [ 857.290475][T11742] usb 5-1: USB disconnect, device number 11 [ 857.303949][T11738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.330262][T15135] team0 (unregistering): Port device team_slave_1 removed [ 857.377025][T11742] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 857.388944][T15135] team0 (unregistering): Port device team_slave_0 removed [ 857.689492][T11742] cp210x 5-1:0.0: device disconnected [ 857.946885][T15135] IPVS: stop unused estimator thread 0... [ 858.522775][T16222] batadv_slave_0: entered promiscuous mode [ 858.551395][T16220] batadv_slave_0: left promiscuous mode [ 858.666766][T11742] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 858.842045][T11742] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 858.854243][T11742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 858.865751][T11742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 858.876738][T11742] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 858.890437][T11742] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 858.900486][T11742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.045606][T11742] usb 3-1: config 0 descriptor?? [ 859.290740][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 859.318679][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 859.330715][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 859.370628][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 859.382740][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 859.489467][T11742] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 859.652852][T11742] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 859.667820][ T30] audit: type=1326 audit(1754711707.392:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 859.694207][ T30] audit: type=1326 audit(1754711707.392:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 859.803852][ T11] usb 3-1: USB disconnect, device number 19 [ 859.843887][ T30] audit: type=1326 audit(1754711707.462:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 859.866869][ T30] audit: type=1326 audit(1754711707.482:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 859.889729][ T30] audit: type=1326 audit(1754711707.492:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 859.913115][ T30] audit: type=1326 audit(1754711707.492:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 859.936287][ T30] audit: type=1326 audit(1754711707.492:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 859.958856][ T30] audit: type=1326 audit(1754711707.492:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 859.981347][ T30] audit: type=1326 audit(1754711707.512:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 860.004185][ T30] audit: type=1326 audit(1754711707.512:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 860.530846][T16232] chnl_net:caif_netlink_parms(): no params data found [ 860.552099][T11742] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 860.719488][T11742] usb 5-1: Using ep0 maxpacket: 8 [ 860.757955][T11742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 860.769800][T11742] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 860.779224][T11742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.838034][T11742] usb 5-1: config 0 descriptor?? [ 861.149053][ T11] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 861.313773][T11742] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 861.326816][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 861.357636][ T11] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 861.367968][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.379095][ T11] usb 6-1: Product: syz [ 861.383630][ T11] usb 6-1: Manufacturer: syz [ 861.388790][ T11] usb 6-1: SerialNumber: syz [ 861.438941][ T11] usb 6-1: config 0 descriptor?? [ 861.474447][T16232] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.486255][T16232] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.494760][T16232] bridge_slave_0: entered allmulticast mode [ 861.501184][ T5818] Bluetooth: hci1: command tx timeout [ 861.515809][T16232] bridge_slave_0: entered promiscuous mode [ 861.540063][ T9] usb 5-1: USB disconnect, device number 12 [ 861.555991][T16232] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.564493][T16232] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.572515][T16232] bridge_slave_1: entered allmulticast mode [ 861.598421][T16232] bridge_slave_1: entered promiscuous mode [ 861.689306][ T11] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 861.741580][T16232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.768979][T16232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.992228][T16232] team0: Port device team_slave_0 added [ 862.021804][T16232] team0: Port device team_slave_1 added [ 862.296239][T16232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.303717][T16232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.331752][T16232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.479243][T16232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.487997][T16232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.517853][T16232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.562417][ T11] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 862.599046][ T11] usb 6-1: USB disconnect, device number 17 [ 862.827070][T16232] hsr_slave_0: entered promiscuous mode [ 862.837465][T16232] hsr_slave_1: entered promiscuous mode [ 862.849316][T16232] debugfs: 'hsr0' already exists in 'hsr' [ 862.855241][T16232] Cannot create hsr debugfs directory [ 863.570883][ T5818] Bluetooth: hci1: command tx timeout [ 863.682945][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4248'. [ 863.803956][T16282] netlink: 'syz.5.4248': attribute type 2 has an invalid length. [ 863.816248][T16282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4248'. [ 863.917107][T16232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 863.955104][T16232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 864.057090][T16232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 864.169750][T16232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 864.994183][T16232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.093265][T16308] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4259'. [ 865.103735][T16308] netlink: 'syz.5.4259': attribute type 7 has an invalid length. [ 865.114416][T16308] netlink: 'syz.5.4259': attribute type 8 has an invalid length. [ 865.123224][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4259'. [ 865.151874][T16308] gretap0: entered promiscuous mode [ 865.163254][T16308] batadv_slave_1: entered promiscuous mode [ 865.175037][T16308] erspan0: entered promiscuous mode [ 865.280522][T16232] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.388574][T15135] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.396168][T15135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.444845][T15135] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.452537][T15135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.646208][ T5818] Bluetooth: hci1: command tx timeout [ 865.736917][T16232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 866.369460][ T11] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 866.428955][T16232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.556193][ T11] usb 10-1: Using ep0 maxpacket: 32 [ 866.608522][ T11] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 866.617239][ T11] usb 10-1: config 0 has no interface number 0 [ 866.693743][ T11] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 866.703485][ T11] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.714522][ T11] usb 10-1: Product: syz [ 866.719368][ T11] usb 10-1: Manufacturer: syz [ 866.724446][ T11] usb 10-1: SerialNumber: syz [ 866.800941][T16333] loop4: detected capacity change from 0 to 1024 [ 866.819271][ T11] usb 10-1: config 0 descriptor?? [ 866.844620][T16333] EXT4-fs: Ignoring removed bh option [ 866.851159][T16333] EXT4-fs: inline encryption not supported [ 866.870863][ T11] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 866.918893][T16333] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 866.932592][T16232] veth0_vlan: entered promiscuous mode [ 866.988747][T16333] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 867.039839][T16333] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.4267: lblock 2 mapped to illegal pblock 2 (length 1) [ 867.067230][T16333] __quota_error: 26 callbacks suppressed [ 867.067316][T16333] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 867.081963][T16333] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.4267: lblock 0 mapped to illegal pblock 48 (length 1) [ 867.117021][T16232] veth1_vlan: entered promiscuous mode [ 867.171705][ T11] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 867.188942][ T11] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 867.207052][T16333] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 867.216577][T16333] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4267: Failed to acquire dquot type 0 [ 867.294562][T16333] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 867.348543][T16333] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4267: mark_inode_dirty error [ 867.431210][T16333] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 867.442721][T16333] EXT4-fs (loop4): 1 orphan inode deleted [ 867.450745][T16333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.451534][T16232] veth0_macvtap: entered promiscuous mode [ 867.487730][T15112] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 867.538169][T15112] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 867.547729][T15112] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 867.601848][T16232] veth1_macvtap: entered promiscuous mode [ 867.727189][ T5818] Bluetooth: hci1: command tx timeout [ 867.775824][T16232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.814037][T16333] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.4267: lblock 0 mapped to illegal pblock 48 (length 1) [ 867.856940][T16232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.866833][T16333] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 867.964887][T16333] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 867.972147][T15112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.047143][T15112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.100623][T15112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.154166][T15112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.318955][T12649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.183507][T16352] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4272'. [ 869.337121][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 869.366672][ T9] usb 10-1: USB disconnect, device number 12 [ 869.415562][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 869.489615][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 869.505063][ T9] quatech2 10-1:0.51: device disconnected [ 870.277169][ T5869] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 870.471670][ T5869] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 870.481586][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.512672][ T5869] usb 6-1: config 0 descriptor?? [ 870.568320][ T5869] cp210x 6-1:0.0: cp210x converter detected [ 870.996527][ T5869] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 871.251534][ T5869] usb 6-1: cp210x converter now attached to ttyUSB0 [ 871.447609][ T5869] usb 6-1: USB disconnect, device number 18 [ 871.502208][ T5869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 871.563796][ T5869] cp210x 6-1:0.0: device disconnected [ 872.111824][T16397] loop9: detected capacity change from 0 to 4096 [ 872.230106][T16404] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 872.316397][ T30] audit: type=1800 audit(1754711720.032:936): pid=16397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4289" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 873.036936][ T4747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.045139][ T4747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.278548][T15120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.288394][T15120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.601227][ T5869] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 874.852395][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4307'. [ 874.862152][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4307'. [ 874.938038][ T5869] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 874.949099][ T5869] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 875.003016][ T5869] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 875.012750][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.021882][ T5869] usb 6-1: Product: syz [ 875.026397][ T5869] usb 6-1: Manufacturer: syz [ 875.031186][ T5869] usb 6-1: SerialNumber: syz [ 875.100912][ T5869] usb 6-1: config 0 descriptor?? [ 875.109148][T16443] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 875.118677][T16443] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 875.429329][T16443] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 875.487886][T16443] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 875.819470][T16464] loop9: detected capacity change from 0 to 128 [ 875.862126][T16464] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 875.886667][T16464] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 876.128907][T15112] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 876.378358][ T5869] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 876.407845][ T5869] dm9601 6-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 876.650272][ T5869] usb 6-1: USB disconnect, device number 19 [ 876.661268][ T5869] dm9601 6-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 876.847968][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 877.528753][ T5818] block nbd5: Receive control failed (result -107) [ 877.559003][T16484] loop0: detected capacity change from 0 to 1024 [ 877.568362][T16480] block nbd5: shutting down sockets [ 878.062968][T16495] sctp: [Deprecated]: syz.4.4326 (pid 16495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 878.062968][T16495] Use struct sctp_sack_info instead [ 879.242551][T16522] loop9: detected capacity change from 0 to 128 [ 879.283359][T16522] EXT4-fs (loop9): Test dummy encryption mode enabled [ 879.362437][T16522] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 879.389625][T16522] ext4 filesystem being mounted at /367/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 879.618890][T11738] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 880.339058][T16545] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 880.345997][T16545] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 880.354312][T16545] vhci_hcd vhci_hcd.0: Device attached [ 880.381391][T16542] batadv_slave_0: entered promiscuous mode [ 880.428058][T16549] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 880.437639][T16539] batadv_slave_0: left promiscuous mode [ 880.493448][T16545] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 880.500327][T16545] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 880.509769][T16545] vhci_hcd vhci_hcd.0: Device attached [ 880.555897][ T5869] vhci_hcd: vhci_device speed not set [ 880.569849][T16549] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 880.576782][T16549] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 880.586738][T16549] vhci_hcd vhci_hcd.0: Device attached [ 880.623120][T16545] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(9) [ 880.629960][T16545] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 880.638753][T16545] vhci_hcd vhci_hcd.0: Device attached [ 880.677680][ T5869] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 880.702494][T16556] vhci_hcd: connection closed [ 880.705046][ T1148] vhci_hcd: stop threads [ 880.716347][ T1148] vhci_hcd: release socket [ 880.721026][ T1148] vhci_hcd: disconnect device [ 880.728697][T16550] vhci_hcd: connection closed [ 880.736947][T16552] vhci_hcd: connection closed [ 880.737907][T16546] vhci_hcd: connection reset by peer [ 880.766533][ T1148] vhci_hcd: stop threads [ 880.771078][ T1148] vhci_hcd: release socket [ 880.776278][ T1148] vhci_hcd: disconnect device [ 880.792134][ T1148] vhci_hcd: stop threads [ 880.798093][ T1148] vhci_hcd: release socket [ 880.802929][ T1148] vhci_hcd: disconnect device [ 880.848309][ T1148] vhci_hcd: stop threads [ 880.852930][ T1148] vhci_hcd: release socket [ 880.858702][ T1148] vhci_hcd: disconnect device [ 881.653104][T16579] loop4: detected capacity change from 0 to 128 [ 881.712832][T16579] EXT4-fs (loop4): Test dummy encryption mode enabled [ 881.749173][T16579] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 881.770667][T16579] ext4 filesystem being mounted at /303/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 881.965082][T12649] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 883.006388][T16601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4365'. [ 883.015823][T16601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4365'. [ 883.409820][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4372'. [ 883.419351][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4372'. [ 883.566391][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4373'. [ 883.611313][T16617] netlink: 452 bytes leftover after parsing attributes in process `syz.4.4373'. [ 883.623453][T16617] netlink: 452 bytes leftover after parsing attributes in process `syz.4.4373'. [ 884.035971][T11742] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 884.236631][T11742] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 884.249422][T11742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 884.261122][T11742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 884.272053][T11742] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 884.285679][T11742] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 884.296529][T11742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.311209][T11742] usb 1-1: config 0 descriptor?? [ 884.752678][T11742] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 884.796532][T11742] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 885.071421][ T9] usb 1-1: USB disconnect, device number 8 [ 885.796244][ T5869] vhci_hcd: vhci_device speed not set [ 885.825745][ T30] audit: type=1326 audit(1754711733.542:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.5.4385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 885.925582][ T30] audit: type=1326 audit(1754711733.582:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.5.4385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 885.949922][ T30] audit: type=1326 audit(1754711733.602:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.5.4385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 885.977597][ T30] audit: type=1326 audit(1754711733.602:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.5.4385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 886.001744][ T30] audit: type=1326 audit(1754711733.602:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.5.4385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 886.025091][ T30] audit: type=1326 audit(1754711733.602:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.5.4385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 886.049319][ T30] audit: type=1326 audit(1754711733.602:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.5.4385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 886.072286][ T30] audit: type=1326 audit(1754711733.602:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.5.4385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 886.095077][ T30] audit: type=1326 audit(1754711733.622:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.5.4385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 886.118677][ T30] audit: type=1326 audit(1754711733.622:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.5.4385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 887.403532][T16670] loop9: detected capacity change from 0 to 128 [ 887.481762][T16673] loop0: detected capacity change from 0 to 164 [ 887.499049][T16673] iso9660: Bad value for 'uid' [ 887.504281][T16673] iso9660: Bad value for 'uid' [ 887.718254][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 887.883942][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 887.898764][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 887.910317][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 887.920552][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 887.936523][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 887.946013][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.965108][T16681] netlink: 'syz.9.4403': attribute type 4 has an invalid length. [ 887.991352][ T9] usb 6-1: config 0 descriptor?? [ 888.264779][T16687] loop4: detected capacity change from 0 to 256 [ 888.406686][T16687] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 888.442679][ T9] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 888.530807][T16687] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 888.553695][ T9] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 888.741985][ T9] usb 6-1: USB disconnect, device number 20 [ 888.998360][T16700] netlink: 'syz.4.4412': attribute type 64 has an invalid length. [ 889.545658][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 889.764623][ T9] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.776473][ T9] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.789929][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 889.797416][ T9] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 889.806941][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.827101][ T5869] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 889.834845][ T9] usb 10-1: config 0 descriptor?? [ 890.016097][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 890.040174][ T5869] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 890.049989][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.112645][ T5869] usb 6-1: config 0 descriptor?? [ 890.367201][ T5869] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 890.408430][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 890.443574][ T5869] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 890.451425][ T5869] usb 6-1: media controller created [ 890.529168][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 890.755836][ T9] uclogic 0003:256C:006D.0025: failed retrieving Huion firmware version: -71 [ 890.765009][ T9] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 890.773503][ T9] uclogic 0003:256C:006D.0025: probe with driver uclogic failed with error -71 [ 890.873840][ T9] usb 10-1: USB disconnect, device number 13 [ 891.246614][ T5869] az6027: usb out operation failed. (-71) [ 891.252539][ T5869] stb0899_attach: Driver disabled by Kconfig [ 891.261057][ T5869] az6027: no front-end attached [ 891.261057][ T5869] [ 891.325947][ T5869] az6027: usb out operation failed. (-71) [ 891.332557][ T5869] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 891.342633][ T5869] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39 [ 891.399454][ T5869] dvb-usb: schedule remote query interval to 400 msecs. [ 891.407278][ T5869] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 891.474128][ T5869] usb 6-1: USB disconnect, device number 21 [ 891.762327][T16744] loop9: detected capacity change from 0 to 1024 [ 891.798259][ T5869] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 891.950585][T16744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.236928][T16753] input: syz1 as /devices/virtual/input/input40 [ 892.328484][T11738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.763243][T16766] loop0: detected capacity change from 0 to 256 [ 892.858883][T16768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4439'. [ 893.396160][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 893.604308][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.619357][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.683411][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 893.693860][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 893.702374][ T9] usb 6-1: SerialNumber: syz [ 894.038521][ T9] usb 6-1: 0:2 : does not exist [ 894.141115][ T9] usb 6-1: USB disconnect, device number 22 [ 894.556463][T16795] vxcan1: tx address claim with different name [ 894.980565][T16801] loop5: detected capacity change from 0 to 512 [ 895.026860][T16801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.532587][ T7624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.765997][T16818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 895.878337][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 895.992159][T16819] loop5: detected capacity change from 0 to 1024 [ 896.055520][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 896.059082][T16819] EXT4-fs: Ignoring removed bh option [ 896.068433][T16819] EXT4-fs: inline encryption not supported [ 896.072261][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.088319][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 896.144011][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 896.146996][T16819] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 896.156873][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.174193][ T9] usb 1-1: Product: syz [ 896.181638][ T9] usb 1-1: Manufacturer: syz [ 896.186575][ T9] usb 1-1: SerialNumber: syz [ 896.242645][T16825] loop4: detected capacity change from 0 to 512 [ 896.243974][T16819] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 896.290022][T16825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.303763][T16825] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 896.403741][T16819] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.4462: lblock 2 mapped to illegal pblock 2 (length 1) [ 896.441170][T16823] loop9: detected capacity change from 0 to 2048 [ 896.442435][ T9] usb 1-1: 0:2 : does not exist [ 896.463230][T16823] hpfs: Unknown parameter '00000000000000000003' [ 896.493052][T16819] __quota_error: 4 callbacks suppressed [ 896.493318][T16819] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 896.511936][T16819] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.4462: lblock 0 mapped to illegal pblock 48 (length 1) [ 896.558246][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 896.582714][T16819] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 896.591974][T16819] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4462: Failed to acquire dquot type 0 [ 896.680353][T16819] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 896.725270][ T9] usb 1-1: USB disconnect, device number 9 [ 896.775641][T16819] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.4462: mark_inode_dirty error [ 896.844126][T16819] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 896.857680][T16819] EXT4-fs (loop5): 1 orphan inode deleted [ 896.866284][T16819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.882435][ T3605] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 896.939757][ T3605] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 896.949239][ T3605] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 897.103768][T16819] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.4462: lblock 0 mapped to illegal pblock 48 (length 1) [ 897.160034][T16819] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 897.201767][T16819] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 897.256596][T12649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.540982][ T7624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.606617][T16838] loop4: detected capacity change from 0 to 1024 [ 897.915198][T16841] loop0: detected capacity change from 0 to 512 [ 897.968037][T16841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.004511][T16844] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4474'. [ 898.412005][T16232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.876085][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 899.050314][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 899.061686][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 899.074872][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 899.084390][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.168114][T16856] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 899.209561][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 899.461337][ T9] usb 5-1: USB disconnect, device number 13 [ 900.415269][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.422387][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.526744][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 900.876725][ T5869] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 901.047758][ T5869] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.058429][ T5869] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 901.112376][ T5869] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 901.122311][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.130867][ T5869] usb 6-1: Product: syz [ 901.135214][ T5869] usb 6-1: Manufacturer: syz [ 901.140238][ T5869] usb 6-1: SerialNumber: syz [ 901.397576][ T5869] usb 6-1: 0:2 : does not exist [ 901.451677][ T5869] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 901.546486][T16893] IPVS: Scheduler module ip_vs_sip not found [ 901.598511][ T5869] usb 6-1: USB disconnect, device number 23 [ 901.996830][T16906] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4498'. [ 902.265006][ T9] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 902.443094][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 902.455385][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.609914][ T9] usb 3-1: config 0 descriptor?? [ 903.680976][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 903.692509][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 903.718438][ T9] usb 3-1: USB disconnect, device number 20 [ 904.476807][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 904.527345][T16943] loop9: detected capacity change from 0 to 512 [ 904.571877][T16943] EXT4-fs: Ignoring removed mblk_io_submit option [ 904.579024][T16943] EXT4-fs: Ignoring removed mblk_io_submit option [ 904.586111][T16943] EXT4-fs: Ignoring removed mblk_io_submit option [ 904.625142][T16943] EXT4-fs (loop9): Test dummy encryption mode enabled [ 904.632373][T16943] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 904.646405][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 904.698044][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 904.701283][T16943] EXT4-fs (loop9): 1 truncate cleaned up [ 904.713541][T16943] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.733442][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 904.747421][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.755740][ T9] usb 1-1: Product: syz [ 904.760077][ T9] usb 1-1: Manufacturer: syz [ 904.764845][ T9] usb 1-1: SerialNumber: syz [ 904.930395][ T9] usb 1-1: config 0 descriptor?? [ 904.949169][T16950] overlay: filesystem on ./bus is read-only [ 905.100914][T11738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.359195][ T9] gs_usb 1-1:0.0: Configuring for 2 interfaces [ 905.464557][T16957] loop9: detected capacity change from 0 to 512 [ 905.545793][ T5869] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 905.605798][T16957] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.619252][T16957] ext4 filesystem being mounted at /399/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 905.683415][T16957] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #4: comm syz.9.4518: corrupted inode contents [ 905.748566][T16957] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #4: comm syz.9.4518: mark_inode_dirty error [ 905.777122][ T5869] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.787901][ T5869] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.852781][T16957] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #4: comm syz.9.4518: corrupted inode contents [ 905.886445][ T5869] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 905.898626][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 905.908399][ T5869] usb 6-1: SerialNumber: syz [ 905.934397][T16957] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #4: comm syz.9.4518: mark_inode_dirty error [ 905.983182][ T9] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 905.984174][T16957] Quota error (device loop9): write_blk: dquota write failed [ 906.002141][T16957] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 906.012319][T16957] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 906.022640][T16957] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4518: Failed to acquire dquot type 1 [ 906.095751][ T9] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 906.173610][ T9] usb 1-1: USB disconnect, device number 10 [ 906.276017][ T5869] usb 6-1: 0:2 : does not exist [ 906.347712][T16965] block nbd4: NBD_DISCONNECT [ 906.352782][T16965] block nbd4: Send disconnect failed -22 [ 906.377648][ T5869] usb 6-1: USB disconnect, device number 24 [ 906.399270][T11738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.419948][T16963] block nbd4: Disconnected due to user request. [ 906.426891][T16963] block nbd4: shutting down sockets [ 906.674501][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4524'. [ 907.160161][T16976] syzkaller1: entered promiscuous mode [ 907.169864][T16976] syzkaller1: entered allmulticast mode [ 908.058411][T16993] pimreg: entered allmulticast mode [ 909.300594][T17020] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 909.573417][T17023] loop5: detected capacity change from 0 to 512 [ 909.655707][T17023] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 909.754871][T17023] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 909.816111][T17023] EXT4-fs (loop5): 1 truncate cleaned up [ 909.824856][T17023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.158109][ T5869] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 910.201845][ T7624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.317243][ T5869] usb 10-1: Using ep0 maxpacket: 32 [ 910.386605][ T5869] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 910.395964][ T5869] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 910.406810][ T5869] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.417792][ T5869] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 910.429005][ T5869] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 910.448085][ T5869] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 910.457947][ T5869] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.514800][ T5869] usb 10-1: config 0 descriptor?? [ 910.822317][ T5869] usb 10-1: USB disconnect, device number 14 [ 910.910343][T17045] loop4: detected capacity change from 0 to 256 [ 911.214954][T17045] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 911.234355][T17045] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 911.372831][T17045] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 911.395783][ T30] audit: type=1800 audit(1754711759.102:951): pid=17045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4564" name="file1" dev="loop4" ino=1048724 res=0 errno=0 [ 911.652781][T17055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4558'. [ 913.519023][ T5869] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 913.675904][ T5869] usb 10-1: Using ep0 maxpacket: 32 [ 913.724836][ T5869] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.737114][ T5869] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.797123][ T5869] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 913.807798][ T5869] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 913.816670][ T5869] usb 10-1: Product: syz [ 913.821151][ T5869] usb 10-1: Manufacturer: syz [ 913.837691][ T5869] hub 10-1:4.0: USB hub found [ 914.066275][ T5869] hub 10-1:4.0: 2 ports detected [ 914.267565][ T5869] hub 10-1:4.0: hub_hub_status failed (err = -71) [ 914.275080][ T5869] hub 10-1:4.0: config failed, can't get hub status (err -71) [ 914.377942][ T5869] usb 10-1: USB disconnect, device number 15 [ 915.565914][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 915.690655][ T30] audit: type=1804 audit(1754711763.412:952): pid=17120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4587" name="/newroot/412/bus" dev="tmpfs" ino=2188 res=1 errno=0 [ 915.926940][ T5869] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 916.127778][ T5869] usb 6-1: too many configurations: 60, using maximum allowed: 8 [ 916.166706][ T5869] usb 6-1: config 0 has no interfaces? [ 916.200829][ T5869] usb 6-1: config 0 has no interfaces? [ 916.278246][ T5869] usb 6-1: config 0 has no interfaces? [ 916.292736][ T5869] usb 6-1: config 0 has no interfaces? [ 916.323022][ T5869] usb 6-1: config 0 has no interfaces? [ 916.344963][ T5869] usb 6-1: config 0 has no interfaces? [ 916.357719][ T5869] usb 6-1: config 0 has no interfaces? [ 916.382826][ T5869] usb 6-1: config 0 has no interfaces? [ 916.410709][ T5869] usb 6-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 916.421001][ T5869] usb 6-1: New USB device strings: Mfr=215, Product=67, SerialNumber=24 [ 916.429804][ T5869] usb 6-1: Product: syz [ 916.434140][ T5869] usb 6-1: Manufacturer: syz [ 916.439481][ T5869] usb 6-1: SerialNumber: syz [ 916.454149][ T5869] usb 6-1: config 0 descriptor?? [ 916.831170][ T5869] usb 6-1: USB disconnect, device number 25 [ 920.472812][T17189] loop5: detected capacity change from 0 to 512 [ 920.491489][T17189] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 920.593682][T17189] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4619: corrupted in-inode xattr: overlapping e_value [ 920.698740][T17189] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4619: couldn't read orphan inode 15 (err -117) [ 920.711760][ T9] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 920.778217][T17189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.934638][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 920.949299][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.962165][ T9] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 920.971702][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.995975][ T9] usb 10-1: config 0 descriptor?? [ 921.296684][ T7624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.333221][ T30] audit: type=1326 audit(1754711769.042:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17198 comm="syz.2.4623" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ae539 code=0x0 [ 921.479895][ T9] savu 0003:1E7D:2D5A.0026: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 921.764660][ T9] usb 10-1: USB disconnect, device number 16 [ 922.043446][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4628'. [ 923.207496][T17234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4635'. [ 923.551136][T17243] loop5: detected capacity change from 0 to 256 [ 923.801636][T17251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.809601][T17251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.854204][T17251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.862248][T17251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.345863][ T5869] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 924.575016][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 924.586646][ T5869] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 924.596161][ T5869] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.679676][ T5869] usb 10-1: config 0 descriptor?? [ 924.693259][T17256] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 925.218855][ T5869] elan 0003:04F3:0755.0027: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 925.404699][ T5869] usb 10-1: USB disconnect, device number 17 [ 925.834446][T17280] 9pnet: p9_errstr2errno: server reported unknown error @c75p壴, priority 10 [ 927.219837][T17298] overlayfs: invalid origin (0000) [ 927.562082][ T5869] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 927.711144][T17309] ip6gretap0: entered allmulticast mode [ 927.768015][T17309] ip6gretap0: left allmulticast mode [ 927.778941][ T5869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.791083][ T5869] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 927.838475][ T5869] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 927.848331][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 927.856693][ T5869] usb 1-1: SerialNumber: syz [ 928.211485][ T5869] usb 1-1: 0:2 : does not exist [ 928.291357][ T5869] usb 1-1: USB disconnect, device number 11 [ 928.308860][ T9] tipc: Node number set to 2886997162 [ 928.529522][T17322] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 928.644184][T17324] loop4: detected capacity change from 0 to 512 [ 928.751299][T17324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 929.041772][T17324] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.4675: invalid block [ 929.151508][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 929.160296][T17324] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4675: invalid indirect mapped block 4294967295 (level 1) [ 929.356536][T17324] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4675: invalid indirect mapped block 4294967295 (level 1) [ 929.451840][T17324] EXT4-fs (loop4): 2 truncates cleaned up [ 929.461042][T17324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.027993][T12649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.398052][ T5869] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 931.603643][ T5869] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 931.613814][ T5869] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 931.662485][ T5869] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 931.672291][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.681250][ T5869] usb 3-1: Product: syz [ 931.685851][ T5869] usb 3-1: Manufacturer: syz [ 931.690629][ T5869] usb 3-1: SerialNumber: syz [ 931.768455][ T5869] usb 3-1: config 0 descriptor?? [ 931.776808][T17369] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 931.801867][T17369] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 932.107201][T17374] loop5: detected capacity change from 0 to 4096 [ 932.121668][T17369] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 932.182516][T17369] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 932.194336][T17380] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 932.328093][ T30] audit: type=1800 audit(1754711780.052:954): pid=17374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4698" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 933.089061][T17386] loop9: detected capacity change from 0 to 512 [ 933.100882][ T5869] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 933.126753][ T5869] dm9601 3-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 933.132626][T17386] EXT4-fs: Ignoring removed mblk_io_submit option [ 933.206075][T17386] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 933.228558][ T5869] usb 3-1: USB disconnect, device number 21 [ 933.239087][ T5869] dm9601 3-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 933.308582][T17386] EXT4-fs (loop9): 1 truncate cleaned up [ 933.319632][T17386] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.396216][T17389] loop5: detected capacity change from 0 to 1024 [ 933.555155][ T30] audit: type=1800 audit(1754711781.272:955): pid=17386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4703" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 933.784056][T11738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.551075][T17393] loop0: detected capacity change from 0 to 8192 [ 936.760020][T17423] loop9: detected capacity change from 0 to 64 [ 938.826063][ T5869] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 938.986881][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 939.002353][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.014080][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.024240][ T5869] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 939.037948][ T5869] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 939.047353][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.204572][ T5869] usb 6-1: config 0 descriptor?? [ 939.377071][T17462] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 939.643832][T17455] random: crng reseeded on system resumption [ 939.789340][ T5869] input: HID 0955:7214 Haptics as /devices/virtual/input/input41 [ 939.807397][ T30] audit: type=1326 audit(1754711787.502:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17465 comm="syz.2.4738" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ae539 code=0x0 [ 939.855918][ T5869] shield 0003:0955:7214.0028: Registered Thunderstrike controller [ 939.865647][ T5869] shield 0003:0955:7214.0028: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 939.945924][T17471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4740'. [ 940.007435][ T1744] shield 0003:0955:7214.0028: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 940.020560][T11742] usb 6-1: USB disconnect, device number 26 [ 940.028780][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 940.036832][ T1744] shield 0003:0955:7214.0028: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 940.037133][ T1744] shield 0003:0955:7214.0028: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 940.037418][ T1744] shield 0003:0955:7214.0028: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 940.208736][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 940.249534][ T9] usb 10-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 940.259178][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.270128][ T9] usb 10-1: Product: syz [ 940.274590][ T9] usb 10-1: Manufacturer: syz [ 940.280258][ T9] usb 10-1: SerialNumber: syz [ 940.316137][ T9] usb 10-1: config 0 descriptor?? [ 940.361240][ T9] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 940.587373][ T9] gp8psk: usb in 128 operation failed. [ 940.616798][ T9] gp8psk: usb in 137 operation failed. [ 940.622451][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 940.657470][ T9] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 940.669779][ T9] usb 10-1: media controller created [ 940.774914][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 940.926620][ T9] gp8psk_fe: Frontend revision 1 attached [ 940.932656][ T9] usb 10-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 940.941773][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 941.026410][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 941.039324][ T9] gp8psk: found Genpix USB device pID = 201 (hex) [ 941.186676][ T1744] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 941.236826][ T11] usb 10-1: USB disconnect, device number 18 [ 941.370457][ T1744] usb 6-1: config 0 has no interfaces? [ 941.409082][ T1744] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 941.419472][ T1744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.428238][ T1744] usb 6-1: Product: syz [ 941.433874][ T1744] usb 6-1: Manufacturer: syz [ 941.439156][ T1744] usb 6-1: SerialNumber: syz [ 941.483909][ T1744] usb 6-1: config 0 descriptor?? [ 941.535251][ T11] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 941.551844][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 941.726131][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 941.730632][ T1744] usb 6-1: USB disconnect, device number 27 [ 941.744779][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.759494][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.769979][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 941.783237][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 941.795100][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.817249][ T9] usb 3-1: config 0 descriptor?? [ 942.216311][T17499] all (unregistering): Released all slaves [ 942.431483][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0029/input/input42 [ 942.463647][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0029/input/input43 [ 942.511212][ T9] kye 0003:0458:5011.0029: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 942.553930][ T9] usb 3-1: USB disconnect, device number 22 [ 942.610642][T17502] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 942.904818][T17508] loop5: detected capacity change from 0 to 256 [ 943.318537][T17515] loop5: detected capacity change from 0 to 512 [ 943.351613][T17515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 943.461599][T17515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.475076][T17515] ext4 filesystem being mounted at /818/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.804090][ T7624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.487735][T17529] loop9: detected capacity change from 0 to 4096 [ 944.895777][ T1744] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 945.096337][ T1744] usb 6-1: Using ep0 maxpacket: 16 [ 945.144129][ T1744] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 945.155103][ T1744] usb 6-1: config 0 has no interface number 0 [ 945.161795][ T1744] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 945.173820][ T1744] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 945.207731][ T1744] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 945.217480][ T1744] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 945.228197][ T1744] usb 6-1: Product: syz [ 945.232550][ T1744] usb 6-1: SerialNumber: syz [ 945.257880][ T1744] usb 6-1: config 0 descriptor?? [ 945.273736][ T1744] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 945.283185][ T1744] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input44 [ 945.537541][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 946.007587][ T1744] usb 6-1: USB disconnect, device number 28 [ 946.016288][ T1744] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 946.386547][T17564] loop9: detected capacity change from 0 to 512 [ 946.435252][T17564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 946.654977][T17564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.671963][T17564] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 947.129122][T11738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.662200][T17584] loop4: detected capacity change from 0 to 2048 [ 947.720049][T17584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.877967][T12649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.142040][T17597] loop4: detected capacity change from 0 to 256 [ 948.767709][T17607] sctp: [Deprecated]: syz.2.4796 (pid 17607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 948.767709][T17607] Use struct sctp_sack_info instead [ 949.015790][ T30] audit: type=1326 audit(1754711796.732:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.5.4799" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705e539 code=0x0 [ 949.564496][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4805'. [ 949.574223][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4805'. [ 950.219091][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 950.417255][ T9] usb 5-1: config 0 has no interfaces? [ 950.474286][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 950.484015][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.492696][ T9] usb 5-1: Product: syz [ 950.499868][ T9] usb 5-1: Manufacturer: syz [ 950.504673][ T9] usb 5-1: SerialNumber: syz [ 950.603302][ T9] usb 5-1: config 0 descriptor?? [ 950.840151][T17645] all (unregistering): Released all slaves [ 950.882302][ T9] usb 5-1: USB disconnect, device number 14 [ 951.444628][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 951.454898][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 951.464306][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 951.490567][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 951.508992][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 952.059210][T17657] loop5: detected capacity change from 0 to 2048 [ 952.240313][T17657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.292373][ T9] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 952.420883][ T7624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.499589][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 952.539988][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.551371][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.563996][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 952.578202][ T9] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 952.590354][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.728615][ T9] usb 10-1: config 0 descriptor?? [ 952.925937][T17675] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 953.002241][T17652] chnl_net:caif_netlink_parms(): no params data found [ 953.188240][T17661] random: crng reseeded on system resumption [ 953.290119][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input45 [ 953.418287][ T9] shield 0003:0955:7214.002A: Registered Thunderstrike controller [ 953.430704][ T9] shield 0003:0955:7214.002A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 953.499043][ T1744] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 953.532065][ T11] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 953.567684][ T5818] Bluetooth: hci5: command tx timeout [ 953.568677][ T9] usb 10-1: USB disconnect, device number 19 [ 953.592014][ T11] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 953.604224][ T11] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 953.620403][ T11] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 953.650256][T15135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.666294][ T1744] usb 3-1: Using ep0 maxpacket: 16 [ 953.706367][ T1744] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 953.714904][ T1744] usb 3-1: config 0 has no interface number 0 [ 953.722683][ T1744] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 953.734675][ T1744] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 953.796935][ T1744] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 953.807998][ T1744] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 953.816465][ T1744] usb 3-1: Product: syz [ 953.822126][ T1744] usb 3-1: SerialNumber: syz [ 953.845998][ T1744] usb 3-1: config 0 descriptor?? [ 953.878475][ T1744] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 953.881473][T15135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.887909][ T1744] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input46 [ 954.056976][T15135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.114954][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 954.241854][T15135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.646692][ T1744] usb 3-1: USB disconnect, device number 23 [ 954.654822][ T1744] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 954.803616][T15135] bridge_slave_1: left allmulticast mode [ 954.809801][T15135] bridge_slave_1: left promiscuous mode [ 954.818959][T15135] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.856288][T15135] bridge_slave_0: left allmulticast mode [ 954.862239][T15135] bridge_slave_0: left promiscuous mode [ 954.869459][T15135] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.221015][T17697] loop9: detected capacity change from 0 to 1764 [ 955.377631][T15135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.438532][T15135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.463398][T15135] bond0 (unregistering): Released all slaves [ 955.646566][ T5818] Bluetooth: hci5: command tx timeout [ 955.670938][T17652] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.679293][T17652] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.687376][T17652] bridge_slave_0: entered allmulticast mode [ 955.697276][T17652] bridge_slave_0: entered promiscuous mode [ 955.716306][T17652] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.724136][T17652] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.733284][T17652] bridge_slave_1: entered allmulticast mode [ 955.743670][T17652] bridge_slave_1: entered promiscuous mode [ 956.283974][T15135] hsr_slave_0: left promiscuous mode [ 956.375868][T15135] hsr_slave_1: left promiscuous mode [ 956.429382][T15135] veth1_macvtap: left promiscuous mode [ 956.435582][T15135] veth0_macvtap: left promiscuous mode [ 956.441541][T15135] veth1_vlan: left promiscuous mode [ 956.447683][T15135] veth0_vlan: left promiscuous mode [ 956.976038][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 957.189763][T15135] team0 (unregistering): Port device team_slave_1 removed [ 957.219502][T15135] team0 (unregistering): Port device team_slave_0 removed [ 957.246217][ T1744] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 957.406118][ T1744] usb 6-1: Using ep0 maxpacket: 32 [ 957.426754][ T1744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.438166][ T1744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.448444][ T1744] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 957.461745][ T1744] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 957.471362][ T1744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.474987][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 957.526725][ T1744] usb 6-1: config 0 descriptor?? [ 957.581658][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.593551][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.606481][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 957.621550][ T9] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 957.630941][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.657744][T17652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.727744][ T5818] Bluetooth: hci5: command tx timeout [ 957.765142][T17652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.931541][ T9] usb 3-1: config 0 descriptor?? [ 958.050399][T17652] team0: Port device team_slave_0 added [ 958.154644][T17652] team0: Port device team_slave_1 added [ 958.363524][ T1744] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.002B/input/input47 [ 958.403176][T17714] random: crng reseeded on system resumption [ 958.463045][ T1744] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.002B/input/input48 [ 958.544945][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input49 [ 958.561969][T17652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.569610][T17652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.597506][T17652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.636381][ T1744] kye 0003:0458:5011.002B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 958.650724][ T9] shield 0003:0955:7214.002C: Registered Thunderstrike controller [ 958.663449][ T9] shield 0003:0955:7214.002C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 958.672565][ T1744] usb 6-1: USB disconnect, device number 29 [ 958.719905][T17652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.728468][T17652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.756805][T17652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.820427][ T11] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 958.833287][ T11] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 958.867599][ T9] usb 3-1: USB disconnect, device number 24 [ 958.895805][ T11] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 958.907850][ T11] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 959.153731][T17652] hsr_slave_0: entered promiscuous mode [ 959.163951][T17652] hsr_slave_1: entered promiscuous mode [ 959.173540][T17652] debugfs: 'hsr0' already exists in 'hsr' [ 959.182029][T17652] Cannot create hsr debugfs directory [ 959.320596][T17732] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 959.549180][T17736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 959.806831][ T5818] Bluetooth: hci5: command tx timeout [ 959.875160][T17741] loop5: detected capacity change from 0 to 256 [ 960.467980][T17652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 960.481067][T17749] loop5: detected capacity change from 0 to 256 [ 960.504118][T17652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 960.531312][T17749] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 960.543057][T17749] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 960.555255][T17652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 960.605797][T17749] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 960.693731][T17652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 961.626408][T17652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.734351][T17652] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.819562][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.827116][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.842335][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.852579][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 961.939202][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.946861][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.006619][T14195] Bluetooth: hci1: command 0x1003 tx timeout [ 963.007170][ T5818] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 963.477684][T17652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.636273][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 963.848724][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 963.887493][ T9] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 963.897136][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.907915][ T9] usb 5-1: Product: syz [ 963.912276][ T9] usb 5-1: Manufacturer: syz [ 963.917384][ T9] usb 5-1: SerialNumber: syz [ 963.954824][T17652] veth0_vlan: entered promiscuous mode [ 963.981199][ T9] usb 5-1: config 0 descriptor?? [ 964.012145][ T9] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 964.078087][T17652] veth1_vlan: entered promiscuous mode [ 964.258633][ T9] gp8psk: usb in 128 operation failed. [ 964.279427][ T9] gp8psk: usb in 137 operation failed. [ 964.285171][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 964.310665][T17785] loop5: detected capacity change from 0 to 2048 [ 964.320160][ T9] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 964.329784][ T9] usb 5-1: media controller created [ 964.340547][T17785] hpfs: Unknown parameter '00000000000000000003' [ 964.420151][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 964.464884][T17652] veth0_macvtap: entered promiscuous mode [ 964.531765][T17652] veth1_macvtap: entered promiscuous mode [ 964.665256][T17652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.713358][ T9] gp8psk_fe: Frontend revision 1 attached [ 964.719687][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 964.728320][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 964.753416][T17652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.834900][ T4747] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.926986][ T4747] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.966208][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 964.979289][ T9] gp8psk: found Genpix USB device pID = 201 (hex) [ 965.017341][ T1148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.054147][ T1148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.235007][ T9] usb 5-1: USB disconnect, device number 15 [ 965.627788][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 966.448426][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4873'. [ 966.458029][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4873'. [ 966.726832][ T1744] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 966.886597][ T1744] usb 5-1: Using ep0 maxpacket: 32 [ 966.922436][ T1744] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 966.932915][ T1744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.977774][ T1744] usb 5-1: config 0 descriptor?? [ 967.211662][ T1744] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 967.249647][ T1744] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 967.288858][ T1744] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 967.299414][ T1744] usb 5-1: media controller created [ 967.384359][ T1744] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 968.046169][T14195] Bluetooth: hci4: command 0x0c1a tx timeout [ 968.141289][ T1744] az6027: usb out operation failed. (-71) [ 968.148171][ T1744] stb0899_attach: Driver disabled by Kconfig [ 968.154318][ T1744] az6027: no front-end attached [ 968.154318][ T1744] [ 968.227845][ T1744] az6027: usb out operation failed. (-71) [ 968.234050][ T1744] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 968.245841][ T1744] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 968.339396][ T1744] dvb-usb: schedule remote query interval to 400 msecs. [ 968.347291][ T1744] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 968.392798][ T1744] usb 5-1: USB disconnect, device number 16 [ 968.608969][ T1744] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 969.257193][T17846] syzkaller1: entered promiscuous mode [ 969.263606][T17846] syzkaller1: entered allmulticast mode [ 970.026770][T17855] IPVS: Scheduler module ip_vs_sip not found [ 970.198502][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.211510][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.405715][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.414459][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.512137][T17890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4903'. [ 974.936152][ T1744] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 975.095970][ T1744] usb 10-1: Using ep0 maxpacket: 32 [ 975.125479][ T1744] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.135941][ T1744] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 975.145661][ T1744] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.230356][ T1744] usb 10-1: config 0 descriptor?? [ 975.272602][ T1744] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 975.431878][T17952] netlink: 'syz.4.4926': attribute type 3 has an invalid length. [ 975.443257][T17952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4926'. [ 976.388649][T17971] syzkaller1: entered promiscuous mode [ 976.394440][T17971] syzkaller1: entered allmulticast mode [ 977.803778][ T1744] usb 10-1: USB disconnect, device number 20 [ 978.131035][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4940'. [ 979.389384][T17990] loop4: detected capacity change from 0 to 64 [ 980.828162][ T11] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 980.996375][ T11] usb 10-1: Using ep0 maxpacket: 8 [ 981.029598][ T11] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 981.041506][ T11] usb 10-1: config 179 has no interface number 0 [ 981.048264][ T11] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 981.061663][ T11] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 981.076403][ T11] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 981.088183][ T11] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 981.100070][ T11] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 981.116580][ T11] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 981.126081][ T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.848841][T17992] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 984.826748][T17986] Set syz1 is full, maxelem 65536 reached [ 984.877849][ T11] usb 10-1: USB disconnect, device number 21 [ 984.885551][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 984.894310][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 985.657185][T18022] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 985.669430][ T1744] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 985.695104][T18024] loop3: detected capacity change from 0 to 128 [ 985.728169][T18024] EXT4-fs: Ignoring removed nobh option [ 985.776438][T18024] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 985.802963][T18024] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 985.891809][ T1744] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 985.903669][ T1744] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 985.914883][ T1744] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 985.924514][ T1744] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.944749][T18017] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 985.969950][ T1744] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 985.994411][T18029] loop5: detected capacity change from 0 to 8 [ 986.151668][T17652] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 986.237552][ T1744] usb 10-1: USB disconnect, device number 22 [ 987.326125][ T1744] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 987.480589][T18047] loop9: detected capacity change from 0 to 512 [ 987.537745][ T1744] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 987.547526][ T1744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.594092][ T1744] usb 5-1: config 0 descriptor?? [ 987.601973][T18047] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 987.617424][T18047] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 987.631054][ T1744] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 987.706176][T18047] EXT4-fs (loop9): mount failed [ 988.038324][ T1744] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 988.666809][ T1744] gspca_cpia1: usb_control_msg 05, error -71 [ 988.673075][ T1744] cpia1 5-1:0.0: unexpected systemstate: 00 [ 988.726424][ T1744] usb 5-1: USB disconnect, device number 17 [ 990.225892][T18088] loop3: detected capacity change from 0 to 64 [ 991.667014][ T1744] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 991.835659][ T1744] usb 6-1: Using ep0 maxpacket: 16 [ 991.882918][ T1744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.899178][ T1744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.913575][ T1744] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 991.924545][ T1744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.970829][ T1744] usb 6-1: config 0 descriptor?? [ 992.078523][T18116] loop3: detected capacity change from 0 to 8 [ 992.820501][ T1744] letsketch 0003:6161:4D15.002D: Device info: ࠇ [ 993.119601][ T1744] usb 6-1: Max retries (5) exceeded reading string descriptor 201 [ 993.128339][ T1744] letsketch 0003:6161:4D15.002D: probe with driver letsketch failed with error -71 [ 993.274355][ T1744] usb 6-1: USB disconnect, device number 30 [ 994.104102][T18129] loop5: detected capacity change from 0 to 256 [ 994.263765][T18129] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 994.280266][T18129] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 994.404979][T18129] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 994.422306][ T30] audit: type=1800 audit(1754711842.142:958): pid=18129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4997" name="file1" dev="loop5" ino=1048738 res=0 errno=0 [ 994.463253][T18136] loop4: detected capacity change from 0 to 128 [ 994.501725][T18136] EXT4-fs: Ignoring removed nobh option [ 994.612360][T18136] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 994.680524][T18136] ext4 filesystem being mounted at /435/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 994.704131][T18142] loop9: detected capacity change from 0 to 128 [ 995.044359][T12649] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 997.090430][T18180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5015'. [ 997.131364][T18180] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5015'. [ 997.142482][T18180] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5015'. [ 998.711529][T18206] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 999.240448][T18216] loop3: detected capacity change from 0 to 64 [ 999.437412][T18210] loop9: detected capacity change from 0 to 4096 [ 999.476301][T18210] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 999.716268][T18218] 9pnet: p9_errstr2errno: server reported unknown error [ 999.902430][T18210] ntfs3(loop9): ino=19, mi_enum_attr [ 999.908337][T18210] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1001.241305][T18241] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1001.373745][T18243] netlink: 'syz.5.5047': attribute type 11 has an invalid length. [ 1002.080659][T18257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5053'. [ 1002.279928][T18263] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1002.772835][ T11] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1002.952223][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 1002.990684][ T11] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1002.999384][ T11] usb 4-1: config 179 has no interface number 0 [ 1003.008784][ T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1003.020301][ T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1003.031866][ T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1003.046075][ T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1003.059596][ T11] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1003.073349][ T11] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1003.087542][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.248281][T18268] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1003.875955][ T11] usb 4-1: USB disconnect, device number 6 [ 1003.887653][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1004.174780][T18285] loop5: detected capacity change from 0 to 512 [ 1004.264229][T18285] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1004.274941][T18285] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1004.332471][T18285] EXT4-fs (loop5): mount failed [ 1006.014597][T18308] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5076'. [ 1006.961157][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 1007.047149][T18328] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5083'. [ 1007.056783][T18328] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5083'. [ 1007.261425][T18332] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5084'. [ 1007.326783][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5086'. [ 1007.813212][T18343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.821592][T18343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.858836][T18343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.867740][T18343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.236986][T18351] loop4: detected capacity change from 0 to 256 [ 1009.165937][ T11] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1009.428889][ T11] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.439526][ T11] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1009.641793][ T11] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1009.651519][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1009.659995][ T11] usb 4-1: SerialNumber: syz [ 1010.229307][ T11] usb 4-1: 0:2 : does not exist [ 1010.234448][ T11] usb 4-1: unit 48 not found! [ 1010.433225][ T11] usb 4-1: USB disconnect, device number 7 [ 1011.306207][T18371] loop5: detected capacity change from 0 to 128 [ 1011.553825][T18371] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1011.587674][T18371] ext4 filesystem being mounted at /896/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.743286][ T1744] IPVS: starting estimator thread 0... [ 1011.789248][T18377] tipc: Started in network mode [ 1011.794488][T18377] tipc: Node identity ac1414aa, cluster identity 4711 [ 1011.804537][T18377] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1011.811804][T18377] tipc: Enabled bearer , priority 10 [ 1011.866869][T18378] IPVS: using max 240 ests per chain, 12000 per kthread [ 1011.936097][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1012.075566][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1012.215651][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1012.355503][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1012.497115][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1012.517096][ T7624] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1012.645667][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1012.785548][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1012.937750][ T1744] tipc: Node number set to 2886997162 [ 1013.075537][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1013.345587][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1013.697136][ T1744] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1013.715258][T18391] bridge0: entered promiscuous mode [ 1013.723459][T18391] macvlan0: entered promiscuous mode [ 1013.804156][T18391] macvlan1: entered promiscuous mode [ 1013.866212][ T1744] usb 4-1: Using ep0 maxpacket: 16 [ 1013.907477][ T1744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.918922][ T1744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.930464][ T1744] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1013.940558][ T1744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.117945][ T1744] usb 4-1: config 0 descriptor?? [ 1014.364035][T18397] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1014.604160][T18403] 9pnet: p9_errstr2errno: server reported unknown error [ 1015.045113][ T1744] letsketch 0003:6161:4D15.002E: Device info: ࠇ [ 1015.058723][T18401] loop9: detected capacity change from 0 to 4096 [ 1015.116192][T18401] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1015.307364][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.315831][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.352680][ T1744] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 1015.361148][ T1744] letsketch 0003:6161:4D15.002E: probe with driver letsketch failed with error -71 [ 1015.395074][T18401] ntfs3(loop9): ino=1a, mi_enum_attr [ 1015.400923][T18401] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1015.422135][T18401] ntfs3(loop9): ino=1a, mi_enum_attr [ 1015.429121][T18401] ntfs3(loop9): Failed to initialize $Extend/$Reparse. [ 1015.438554][ T1744] usb 4-1: USB disconnect, device number 8 [ 1015.440394][T18405] loop4: detected capacity change from 0 to 4096 [ 1015.510768][T18405] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1015.511939][T18401] ntfs3(loop9): ino=5, "/" ntfs_readdir [ 1015.594282][T18411] loop5: detected capacity change from 0 to 512 [ 1015.621849][T18411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1015.694792][T18411] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.5116: invalid block [ 1015.739240][T18411] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5116: invalid indirect mapped block 4294967295 (level 1) [ 1015.794059][T18405] ntfs3(loop4): ino=19, mi_enum_attr [ 1015.800015][T18405] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1015.816294][T18411] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5116: invalid indirect mapped block 4294967295 (level 1) [ 1015.882208][T18411] EXT4-fs (loop5): 2 truncates cleaned up [ 1015.890340][T18411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1016.504469][ T7624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.928458][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5121'. [ 1017.005476][ C1] net_ratelimit: 4 callbacks suppressed [ 1017.005553][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1017.948999][T18445] syz.2.5125 (18445) used greatest stack depth: 4088 bytes left [ 1018.045510][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1018.141954][T18458] tipc: Started in network mode [ 1018.147867][T18458] tipc: Node identity ac1414aa, cluster identity 4711 [ 1018.154946][T18458] tipc: Enabling of bearer rejected, failed to enable media [ 1018.517905][T18468] batadv_slave_1: entered promiscuous mode [ 1018.560556][T18467] batadv_slave_1: left promiscuous mode [ 1019.085510][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1020.125480][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1020.590995][T18500] loop9: detected capacity change from 0 to 128 [ 1020.714535][T18500] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1020.809332][T18500] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.079056][T18513] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5155'. [ 1021.157659][T18513] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5155'. [ 1021.167399][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1021.289203][T11738] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1022.215594][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1022.866707][T18547] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5170'. [ 1022.886800][T18548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5169'. [ 1022.907878][T18547] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5170'. [ 1022.968602][T18548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5169'. [ 1023.016938][ T1744] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1023.151411][T18550] loop5: detected capacity change from 0 to 256 [ 1023.221882][ T1744] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.233606][ T1744] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1023.266679][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1023.267369][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.280751][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.294390][T18550] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1023.294467][T18550] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1023.401121][ T1744] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1023.401284][ T1744] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1023.401407][ T1744] usb 10-1: SerialNumber: syz [ 1023.420578][T18550] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1023.676169][ T1744] usb 10-1: 0:2 : does not exist [ 1023.676330][ T1744] usb 10-1: unit 48 not found! [ 1023.781408][ T1744] usb 10-1: USB disconnect, device number 23 [ 1024.285504][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1024.450304][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.459490][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.325546][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1026.351183][T18599] sctp: [Deprecated]: syz.9.5192 (pid 18599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1026.351183][T18599] Use struct sctp_sack_info instead [ 1026.375578][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1026.956568][ T1744] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1026.981257][T18615] loop3: detected capacity change from 0 to 512 [ 1027.057885][T18615] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.5198: iget: bad extended attribute block 1 [ 1027.091039][T18615] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5198: couldn't read orphan inode 15 (err -117) [ 1027.146106][ T1744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1027.157524][ T1744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.168602][ T1744] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1027.170952][T18615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.177985][ T1744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.298064][ T1744] usb 6-1: config 0 descriptor?? [ 1027.406830][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1027.451840][T17652] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.715042][T18628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5204'. [ 1027.788692][ T1744] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 1027.797753][ T1744] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 1027.804827][ T1744] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 1027.813650][ T1744] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 1027.822422][ T1744] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 1027.832170][ T1744] savu 0003:1E7D:2D5A.002F: unbalanced collection at end of report description [ 1027.897371][T18628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5204'. [ 1027.954500][ T1744] savu 0003:1E7D:2D5A.002F: parse failed [ 1027.964854][ T1744] savu 0003:1E7D:2D5A.002F: probe with driver savu failed with error -22 [ 1028.037841][ T1744] usb 6-1: USB disconnect, device number 31 [ 1028.455559][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1029.257746][T18657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5214'. [ 1029.485514][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1029.521699][T18661] bridge0: entered allmulticast mode [ 1029.865067][T18667] loop4: detected capacity change from 0 to 128 [ 1029.907280][T18667] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1029.943291][T18667] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1030.020479][T18667] ext2 filesystem being mounted at /487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.508696][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5231'. [ 1030.525496][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1030.682877][T12649] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1031.398712][T18685] loop4: detected capacity change from 0 to 4096 [ 1031.425112][T18685] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1031.565604][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1031.743285][T18685] ntfs3(loop4): ino=1a, mi_enum_attr [ 1031.752852][T18685] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1031.836866][T18685] ntfs3(loop4): ino=1a, mi_enum_attr [ 1031.842469][T18685] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1031.960277][T18685] ntfs3(loop4): ino=5, "/" ntfs_readdir [ 1032.605566][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1032.751659][T18713] loop4: detected capacity change from 0 to 512 [ 1032.793864][T18713] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1032.879805][T18713] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 1032.898281][T18713] System zones: 1-12 [ 1032.946154][T18713] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.5237: corrupted in-inode xattr: e_value size too large [ 1033.007930][T18721] bond0: option mode: unable to set because the bond device has slaves [ 1033.048946][T18713] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5237: couldn't read orphan inode 15 (err -117) [ 1033.098511][T18713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1033.530155][T12649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.645514][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1033.681044][T18731] unknown channel width for channel at 909000KHz? [ 1034.685524][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1035.038432][ T11] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1035.196263][ T11] usb 10-1: Using ep0 maxpacket: 32 [ 1035.300921][ T11] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1035.369899][ T11] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1035.379546][ T11] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1035.388474][ T11] usb 10-1: Product: syz [ 1035.392962][ T11] usb 10-1: Manufacturer: syz [ 1035.400585][ T11] usb 10-1: SerialNumber: syz [ 1035.424658][ T11] usb 10-1: config 0 descriptor?? [ 1035.441956][T18756] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1035.543995][T18768] loop3: detected capacity change from 0 to 256 [ 1035.582776][T18768] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1035.594069][T18768] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1035.662034][T18768] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1035.725479][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1035.743150][ T11] usb 10-1: USB disconnect, device number 24 [ 1036.448720][ T1744] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1036.585928][T18787] sctp: [Deprecated]: syz.4.5266 (pid 18787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1036.585928][T18787] Use struct sctp_sack_info instead [ 1036.633271][ T1744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1036.645664][ T1744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.656226][ T1744] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1036.668157][ T1744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.683136][ T1744] usb 3-1: config 0 descriptor?? [ 1036.714679][T18792] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5267'. [ 1036.760252][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5267'. [ 1036.770176][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1037.160739][ T1744] savu 0003:1E7D:2D5A.0030: unknown main item tag 0x0 [ 1037.168258][ T1744] savu 0003:1E7D:2D5A.0030: unknown main item tag 0x0 [ 1037.179408][ T1744] savu 0003:1E7D:2D5A.0030: unknown main item tag 0x0 [ 1037.187548][ T1744] savu 0003:1E7D:2D5A.0030: unknown main item tag 0x0 [ 1037.194769][ T1744] savu 0003:1E7D:2D5A.0030: unknown main item tag 0x0 [ 1037.201925][ T1744] savu 0003:1E7D:2D5A.0030: unbalanced collection at end of report description [ 1037.620081][ T1744] savu 0003:1E7D:2D5A.0030: parse failed [ 1037.626315][ T1744] savu 0003:1E7D:2D5A.0030: probe with driver savu failed with error -22 [ 1037.742161][ T1744] usb 3-1: USB disconnect, device number 25 [ 1037.768603][T18804] bridge0: entered allmulticast mode [ 1037.805533][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1038.531182][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5279'. [ 1038.845681][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1038.905959][T18828] loop4: detected capacity change from 0 to 512 [ 1039.008663][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5282'. [ 1039.021861][T18829] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 1039.031660][T18829] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 1039.043157][T18828] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.5281: iget: bad extended attribute block 1 [ 1039.096128][T18828] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5281: couldn't read orphan inode 15 (err -117) [ 1039.170297][T18828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1039.516139][T18831] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 1039.651613][T12649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.885682][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1040.248833][ T1744] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1040.445909][ T1744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1040.460090][ T1744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.471068][ T1744] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1040.480571][ T1744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.544146][ T1744] usb 5-1: config 0 descriptor?? [ 1040.925511][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1041.006140][ T1744] savu 0003:1E7D:2D5A.0031: unknown main item tag 0x0 [ 1041.013485][ T1744] savu 0003:1E7D:2D5A.0031: unknown main item tag 0x0 [ 1041.020847][ T1744] savu 0003:1E7D:2D5A.0031: unknown main item tag 0x0 [ 1041.028766][ T1744] savu 0003:1E7D:2D5A.0031: unknown main item tag 0x0 [ 1041.036022][ T1744] savu 0003:1E7D:2D5A.0031: unknown main item tag 0x0 [ 1041.043903][ T1744] savu 0003:1E7D:2D5A.0031: unbalanced collection at end of report description [ 1041.182035][ T1744] savu 0003:1E7D:2D5A.0031: parse failed [ 1041.188536][ T1744] savu 0003:1E7D:2D5A.0031: probe with driver savu failed with error -22 [ 1041.252479][ T1744] usb 5-1: USB disconnect, device number 18 [ 1041.826718][ T1744] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1041.877964][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5303'. [ 1041.965487][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1042.005801][ T1744] usb 3-1: Using ep0 maxpacket: 8 [ 1042.022959][ T1744] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1042.055754][ T1744] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1042.067981][ T1744] usb 3-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1042.076747][ T1744] usb 3-1: Product: syz [ 1042.081095][ T1744] usb 3-1: Manufacturer: syz [ 1042.086004][ T1744] usb 3-1: SerialNumber: syz [ 1042.101156][ T1744] usb 3-1: config 0 descriptor?? [ 1042.253169][T18880] loop4: detected capacity change from 0 to 1024 [ 1042.339056][ T1744] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1042.939557][ T1744] gspca_sunplus: reg_w_riv err -71 [ 1042.945537][ T1744] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1042.967181][ T1744] usb 3-1: USB disconnect, device number 26 [ 1043.005653][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1044.045508][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1044.513880][T18915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1044.996248][T18923] loop5: detected capacity change from 0 to 128 [ 1045.056984][T18923] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1045.096532][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1045.133747][T18923] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1045.211471][T18923] ext2 filesystem being mounted at /941/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.804411][ T7624] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1046.125501][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1046.585046][T18947] loop9: detected capacity change from 0 to 512 [ 1046.726580][T18947] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.5331: invalid block [ 1046.792144][T18947] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5331: invalid indirect mapped block 4294967295 (level 1) [ 1046.874163][T18947] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5331: invalid indirect mapped block 4294967295 (level 1) [ 1046.921743][T18947] EXT4-fs (loop9): 2 truncates cleaned up [ 1046.933366][T18947] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.062195][T18947] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.5331: bg 0: block 5: invalid block bitmap [ 1047.165511][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1047.215575][T18962] loop3: detected capacity change from 0 to 128 [ 1047.238479][T18962] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1047.248029][T11738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.289947][T18962] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1047.381567][T18962] ext2 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.965888][T17652] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1048.200712][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5345'. [ 1048.215553][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1048.742184][ T30] audit: type=1326 audit(1754711896.462:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18989 comm="syz.5.5351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1048.768062][ T30] audit: type=1326 audit(1754711896.462:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18989 comm="syz.5.5351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1048.793777][ T30] audit: type=1326 audit(1754711896.472:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18989 comm="syz.5.5351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1048.817663][ T30] audit: type=1326 audit(1754711896.472:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18989 comm="syz.5.5351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1048.841023][ T30] audit: type=1326 audit(1754711896.472:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18989 comm="syz.5.5351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1048.866605][ T30] audit: type=1326 audit(1754711896.482:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18989 comm="syz.5.5351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1048.890407][ T30] audit: type=1326 audit(1754711896.482:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18989 comm="syz.5.5351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1048.913002][ T30] audit: type=1326 audit(1754711896.482:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18989 comm="syz.5.5351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1049.255510][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1050.285482][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1051.335529][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1051.532486][T19040] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5373'. [ 1051.873791][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5374'. [ 1052.365596][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1052.428064][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5378'. [ 1053.405527][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1053.701542][T19084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5390'. [ 1053.972653][T19086] netlink: 'syz.3.5391': attribute type 1 has an invalid length. [ 1053.982328][T19086] netlink: 'syz.3.5391': attribute type 2 has an invalid length. [ 1054.019828][T19086] netlink: 'syz.3.5391': attribute type 1 has an invalid length. [ 1054.030856][T19086] netlink: 'syz.3.5391': attribute type 2 has an invalid length. [ 1054.445686][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1054.878979][ T11] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1055.058679][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 1055.072957][ T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1055.140629][ T11] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1055.152802][ T11] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1055.161612][ T11] usb 5-1: Product: syz [ 1055.166210][ T11] usb 5-1: Manufacturer: syz [ 1055.170977][ T11] usb 5-1: SerialNumber: syz [ 1055.216879][ T11] usb 5-1: config 0 descriptor?? [ 1055.485526][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1055.487646][ T11] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1056.001617][T19114] loop5: detected capacity change from 0 to 1024 [ 1056.023172][T19118] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5405'. [ 1056.089094][ T11] gspca_sunplus: reg_w_riv err -71 [ 1056.095966][ T11] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1056.134049][ T11] usb 5-1: USB disconnect, device number 19 [ 1056.525496][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1056.994940][T19130] IPv6: NLM_F_CREATE should be specified when creating new route [ 1057.223713][T19138] loop9: detected capacity change from 0 to 512 [ 1057.504349][T19143] loop5: detected capacity change from 0 to 256 [ 1057.565720][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1057.638302][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5419'. [ 1058.195034][T19154] loop4: detected capacity change from 0 to 2048 [ 1058.275715][T19154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1058.367137][ T1744] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1058.409631][ T30] audit: type=1800 audit(1754711906.132:967): pid=19154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5433" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1058.583894][ T1744] usb 6-1: Using ep0 maxpacket: 8 [ 1058.605472][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1058.625168][ T1744] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1058.660391][T12649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.687810][ T1744] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1058.697426][ T1744] usb 6-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1058.706333][ T1744] usb 6-1: Product: syz [ 1058.710776][ T1744] usb 6-1: Manufacturer: syz [ 1058.715837][ T1744] usb 6-1: SerialNumber: syz [ 1058.751614][ T1744] usb 6-1: config 0 descriptor?? [ 1058.997630][ T1744] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1059.607820][ T1744] gspca_sunplus: reg_w_riv err -71 [ 1059.613433][ T1744] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1059.634357][ T1744] usb 6-1: USB disconnect, device number 32 [ 1059.645486][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1059.679518][T19177] IPv6: NLM_F_CREATE should be specified when creating new route [ 1060.082996][T19187] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5436'. [ 1060.685494][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1060.968991][T19203] loop3: detected capacity change from 0 to 1024 [ 1061.008035][T19203] EXT4-fs: Ignoring removed bh option [ 1061.035722][T19203] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1061.088001][T19207] IPv6: NLM_F_CREATE should be specified when creating new route [ 1061.121051][T19203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1061.294218][T19203] EXT4-fs (loop3): shut down requested (1) [ 1061.313719][T19203] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 1061.324845][T19203] overlayfs: failed to get uuid (/file0, err=-5); falling back to uuid=null. [ 1061.578722][ C1] ===================================================== [ 1061.586102][ C1] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 1061.594509][ C1] bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 1061.600555][ C1] do_xdp_generic+0xd52/0x1690 [ 1061.605533][ C1] __netif_receive_skb_core+0x2524/0x6df0 [ 1061.611583][ C1] __netif_receive_skb+0xcc/0xac0 [ 1061.616961][ C1] process_backlog+0x485/0xa00 [ 1061.621981][ C1] __napi_poll+0xdd/0x8a0 [ 1061.626541][ C1] net_rx_action+0xa59/0x1ac0 [ 1061.631466][ C1] handle_softirqs+0x166/0x6e0 [ 1061.636455][ C1] __do_softirq+0x14/0x1b [ 1061.640999][ C1] do_softirq+0x99/0x100 [ 1061.645759][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 1061.650923][ C1] tun_rx_batched+0x889/0x980 [ 1061.655857][ C1] tun_get_user+0x5028/0x6ca0 [ 1061.660719][ C1] tun_chr_write_iter+0x3e9/0x5c0 [ 1061.666216][ C1] vfs_write+0xb4b/0x1580 [ 1061.670709][ C1] __ia32_sys_write+0x1f9/0x4d0 [ 1061.675907][ C1] ia32_sys_call+0x35bc/0x4310 [ 1061.680874][ C1] __do_fast_syscall_32+0xb0/0x150 [ 1061.686248][ C1] do_fast_syscall_32+0x38/0x80 [ 1061.691253][ C1] do_SYSENTER_32+0x1f/0x30 [ 1061.696007][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1061.702508][ C1] [ 1061.704892][ C1] Uninit was created at: [ 1061.709466][ C1] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1061.716259][ C1] kmalloc_reserve+0x22f/0x4b0 [ 1061.721381][ C1] pskb_expand_head+0x1fc/0x1610 [ 1061.726529][ C1] do_xdp_generic+0xa79/0x1690 [ 1061.731487][ C1] __netif_receive_skb_core+0x2524/0x6df0 [ 1061.737481][ C1] __netif_receive_skb+0xcc/0xac0 [ 1061.742742][ C1] process_backlog+0x485/0xa00 [ 1061.747771][ C1] __napi_poll+0xdd/0x8a0 [ 1061.752242][ C1] net_rx_action+0xa59/0x1ac0 [ 1061.757178][ C1] handle_softirqs+0x166/0x6e0 [ 1061.762131][ C1] __do_softirq+0x14/0x1b [ 1061.766668][ C1] [ 1061.769121][ C1] CPU: 1 UID: 0 PID: 19215 Comm: syz.2.5447 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) [ 1061.781193][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1061.791434][ C1] ===================================================== [ 1061.798564][ C1] Disabling lock debugging due to kernel taint [ 1061.804904][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 1061.811465][ C1] CPU: 1 UID: 0 PID: 19215 Comm: syz.2.5447 Tainted: G B 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) [ 1061.825284][ C1] Tainted: [B]=BAD_PAGE [ 1061.829610][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1061.839796][ C1] Call Trace: [ 1061.843171][ C1] [ 1061.846082][ C1] __dump_stack+0x26/0x30 [ 1061.850576][ C1] dump_stack_lvl+0x53/0x270 [ 1061.855316][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1061.861286][ C1] dump_stack+0x1e/0x25 [ 1061.865584][ C1] vpanic+0x361/0xc50 [ 1061.869725][ C1] panic+0x15d/0x160 [ 1061.873794][ C1] kmsan_report+0x31c/0x320 [ 1061.878438][ C1] ? __msan_warning+0x1b/0x30 [ 1061.883232][ C1] ? bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 1061.889254][ C1] ? do_xdp_generic+0xd52/0x1690 [ 1061.894306][ C1] ? __netif_receive_skb_core+0x2524/0x6df0 [ 1061.900335][ C1] ? __netif_receive_skb+0xcc/0xac0 [ 1061.905654][ C1] ? process_backlog+0x485/0xa00 [ 1061.910917][ C1] ? __napi_poll+0xdd/0x8a0 [ 1061.915551][ C1] ? net_rx_action+0xa59/0x1ac0 [ 1061.920531][ C1] ? handle_softirqs+0x166/0x6e0 [ 1061.925587][ C1] ? __do_softirq+0x14/0x1b [ 1061.930199][ C1] ? do_softirq+0x99/0x100 [ 1061.934738][ C1] ? __local_bh_enable_ip+0xa1/0xb0 [ 1061.940062][ C1] ? tun_rx_batched+0x889/0x980 [ 1061.945093][ C1] ? tun_get_user+0x5028/0x6ca0 [ 1061.950100][ C1] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1061.955453][ C1] ? vfs_write+0xb4b/0x1580 [ 1061.960188][ C1] ? __ia32_sys_write+0x1f9/0x4d0 [ 1061.965352][ C1] ? ia32_sys_call+0x35bc/0x4310 [ 1061.970412][ C1] ? __do_fast_syscall_32+0xb0/0x150 [ 1061.975840][ C1] ? do_fast_syscall_32+0x38/0x80 [ 1061.981007][ C1] ? do_SYSENTER_32+0x1f/0x30 [ 1061.985812][ C1] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1061.992719][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1061.997969][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1062.003237][ C1] ? __bpf_prog_run32+0xc2/0xf0 [ 1062.008213][ C1] ? kmem_cache_free+0x3ef/0xec0 [ 1062.013488][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1062.018740][ C1] __msan_warning+0x1b/0x30 [ 1062.023362][ C1] bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 1062.029314][ C1] ? kmsan_report+0x2e1/0x320 [ 1062.034175][ C1] do_xdp_generic+0xd52/0x1690 [ 1062.039152][ C1] ? __netif_receive_skb_core+0x21/0x6df0 [ 1062.045017][ C1] ? filter_irq_stacks+0x49/0x190 [ 1062.050276][ C1] __netif_receive_skb_core+0x2524/0x6df0 [ 1062.056232][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1062.061493][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1062.067455][ C1] ? filter_irq_stacks+0x49/0x190 [ 1062.072679][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1062.077929][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1062.083897][ C1] __netif_receive_skb+0xcc/0xac0 [ 1062.089144][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1062.094417][ C1] process_backlog+0x485/0xa00 [ 1062.099350][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1062.104771][ C1] __napi_poll+0xdd/0x8a0 [ 1062.109233][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1062.114484][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1062.120531][ C1] net_rx_action+0xa59/0x1ac0 [ 1062.125348][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1062.130689][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1062.136704][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1062.141957][ C1] handle_softirqs+0x166/0x6e0 [ 1062.147138][ C1] __do_softirq+0x14/0x1b [ 1062.151591][ C1] do_softirq+0x99/0x100 [ 1062.155960][ C1] [ 1062.158973][ C1] [ 1062.161992][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 1062.167160][ C1] ? tun_rx_batched+0x16c/0x980 [ 1062.172443][ C1] tun_rx_batched+0x889/0x980 [ 1062.177281][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1062.182567][ C1] tun_get_user+0x5028/0x6ca0 [ 1062.187597][ C1] ? stack_depot_save_flags+0x35/0x7b0 [ 1062.193209][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1062.198468][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1062.203712][ C1] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1062.210317][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1062.216642][ C1] tun_chr_write_iter+0x3e9/0x5c0 [ 1062.221861][ C1] vfs_write+0xb4b/0x1580 [ 1062.226417][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1062.232133][ C1] __ia32_sys_write+0x1f9/0x4d0 [ 1062.237164][ C1] ia32_sys_call+0x35bc/0x4310 [ 1062.242058][ C1] __do_fast_syscall_32+0xb0/0x150 [ 1062.247420][ C1] do_fast_syscall_32+0x38/0x80 [ 1062.252415][ C1] do_SYSENTER_32+0x1f/0x30 [ 1062.257046][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1062.263537][ C1] RIP: 0023:0xf70ae539 [ 1062.267695][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1062.287635][ C1] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1062.296195][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1062.304278][ C1] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 1062.312346][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1062.320688][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1062.328759][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1062.336854][ C1] [ 1062.340330][ C1] Kernel Offset: disabled [ 1062.344701][ C1] Rebooting in 86400 seconds..