last executing test programs: 14.569582059s ago: executing program 3 (id=14479): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20) 14.307640405s ago: executing program 3 (id=14473): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0xfffffffc, [[0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0x2b0, 0xffffffff, 0xffffffff, 0xffffffff], [0x4, 0x6, 0xffffffff, 0xffffffff, 0x2, 0x5, 0xffffffff, 0xfffffff0], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x10, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x101, 0x989684}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) 13.872321556s ago: executing program 3 (id=14478): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, 0x0, 0x0) 13.637717402s ago: executing program 3 (id=14481): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) 13.448022967s ago: executing program 3 (id=14484): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/pids.max\x00', 0x2, 0x54) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) 13.119651305s ago: executing program 3 (id=14489): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x8}, 0x18) 12.726645246s ago: executing program 1 (id=14492): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 12.349184395s ago: executing program 2 (id=14493): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) 12.283995777s ago: executing program 2 (id=14494): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x34324152, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) 12.14896947s ago: executing program 2 (id=14495): sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rus\x97\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 3.53690295s ago: executing program 1 (id=14497): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={0x0}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4000) 3.53684931s ago: executing program 2 (id=14498): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0xfffffffc, [[0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0x2b0, 0xffffffff, 0xffffffff, 0xffffffff], [0x4, 0x6, 0xffffffff, 0xffffffff, 0x2, 0x5, 0xffffffff, 0xfffffff0], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x10, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x101, 0x989684}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) 3.412970843s ago: executing program 1 (id=14500): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) 3.279276416s ago: executing program 0 (id=14501): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@getpolicy={0x70, 0x15, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @mark={0xc}, @policy_type={0xa}]}, 0x70}}, 0x0) 3.111601511s ago: executing program 0 (id=14502): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) 587.235845ms ago: executing program 0 (id=14503): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x34324152, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) 587.182855ms ago: executing program 2 (id=14504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 586.219635ms ago: executing program 1 (id=14505): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, 0x0, 0x0) 404.16916ms ago: executing program 0 (id=14506): set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) 347.759281ms ago: executing program 2 (id=14507): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000300)={[{@force}, {@nls={'nls', 0x3d, 'cp855'}}, {}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0'}, &(0x7f0000000080)='./file1\x00', 0x0, 0x12010, 0x0) 291.274032ms ago: executing program 1 (id=14508): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x24, 0x3e, 0x107, 0x70bd27, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x117}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x440) 182.292895ms ago: executing program 0 (id=14509): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0xfffffffc, [[0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0x2b0, 0xffffffff, 0xffffffff, 0xffffffff], [0x4, 0x6, 0xffffffff, 0xffffffff, 0x2, 0x5, 0xffffffff, 0xfffffff0], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x10, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x101, 0x989684}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) 98µs ago: executing program 0 (id=14510): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) 0s ago: executing program 1 (id=14511): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@getpolicy={0x70, 0x15, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @mark={0xc}, @policy_type={0xa}]}, 0x70}}, 0x0) kernel console output (not intermixed with test programs): r=3 [ 861.303555][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 861.305854][ T5810] usb 2-1: Product: syz [ 861.321499][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.323111][ T5810] usb 2-1: Manufacturer: syz [ 861.336753][ T5810] usb 2-1: SerialNumber: syz [ 861.337685][ T9] usb 1-1: Product: syz [ 861.356266][ T9] usb 1-1: Manufacturer: syz [ 861.363987][ T9] usb 1-1: SerialNumber: syz [ 861.369095][ T789] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 861.615038][ T9] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 861.636341][ T9] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 861.708692][ T9] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 861.731898][ T9] usb 1-1: USB disconnect, device number 76 [ 861.794169][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.027979][ T5810] usb 2-1: USB disconnect, device number 69 [ 862.257934][T11448] netlink: 'syz.2.12814': attribute type 5 has an invalid length. [ 862.390435][ T5812] usb 4-1: USB disconnect, device number 68 [ 862.461929][ T789] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 862.469708][ T789] ath9k_htc: Failed to initialize the device [ 862.488776][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12817'. [ 862.500329][ T5810] usb 2-1: ath9k_htc: USB layer deinitialized [ 862.674975][T11471] loop2: detected capacity change from 0 to 256 [ 863.211375][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 863.271340][ T789] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 863.401318][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 863.419652][ T9] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 863.449240][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.469995][ T9] usb 2-1: config 0 has no interface number 0 [ 863.484507][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 863.496299][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.496651][ T9] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 863.515551][ T789] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 863.515580][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.518433][ T789] usb 4-1: config 0 descriptor?? [ 863.565952][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.567990][ T789] xbox_remote_probe: endpoint_in message size==0? [ 863.584227][T11525] loop2: detected capacity change from 0 to 1024 [ 863.612832][T11525] EXT4-fs: inline encryption not supported [ 863.624949][ T9] usb 2-1: config 0 descriptor?? [ 863.649970][T11525] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 863.702151][T11525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.814327][T11540] netlink: 'syz.0.12838': attribute type 6 has an invalid length. [ 863.815707][ T789] usbhid 4-1:0.0: can't add hid device: -71 [ 863.849949][ T9] usb 2-1: USB disconnect, device number 70 [ 863.857693][ T789] usbhid: probe of 4-1:0.0 failed with error -71 [ 863.913366][ T789] usb 4-1: USB disconnect, device number 69 [ 863.928073][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.331329][ T5810] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 864.361272][ T8] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 864.523982][ T5810] usb 3-1: config 0 has an invalid interface number: 13 but max is 0 [ 864.541910][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 864.543652][ T5810] usb 3-1: config 0 has no interface number 0 [ 864.557665][ T5810] usb 3-1: config 0 interface 13 has no altsetting 0 [ 864.567353][ T5810] usb 3-1: Dual-Role OTG device on HNP port [ 864.567824][ T8] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 864.574875][ T5810] usb 3-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice=1e.7a [ 864.598647][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.607989][ T8] usb 1-1: config 0 has no interface number 0 [ 864.617310][ T5810] usb 3-1: Product: syz [ 864.626264][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 864.631130][ T5810] usb 3-1: Manufacturer: syz [ 864.646518][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.651450][ T5810] usb 3-1: SerialNumber: syz [ 864.660766][ T8] usb 1-1: Product: syz [ 864.669076][ T8] usb 1-1: Manufacturer: syz [ 864.676438][ T5810] usb 3-1: config 0 descriptor?? [ 864.682416][ T8] usb 1-1: SerialNumber: syz [ 864.703921][ T8] usb 1-1: config 0 descriptor?? [ 864.764798][T11586] netlink: 'syz.3.12847': attribute type 3 has an invalid length. [ 864.921891][ T8] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 864.935215][ T5810] snd-usb-caiaq 3-1:0.13: can't set alt interface. [ 864.947603][ T8] usb 1-1: No valid video chain found. [ 864.962473][ T5810] usb 3-1: unable to init card! (ret=-5) [ 864.968808][ T5810] snd-usb-caiaq: probe of 3-1:0.13 failed with error -5 [ 864.975687][ T8] usb 1-1: USB disconnect, device number 77 [ 865.058251][ T5810] usb 3-1: USB disconnect, device number 76 [ 865.060654][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12852'. [ 865.345320][T11629] netlink: 532 bytes leftover after parsing attributes in process `syz.1.12857'. [ 865.690587][T11649] Cannot find del_set index 6 as target [ 865.901137][ T5810] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 866.121421][ T5810] usb 3-1: Using ep0 maxpacket: 32 [ 866.143988][ T5810] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 866.169162][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.190275][ T5810] usb 3-1: Product: syz [ 866.201078][ T5810] usb 3-1: Manufacturer: syz [ 866.212194][ T5810] usb 3-1: SerialNumber: syz [ 866.227966][ T5810] empeg 3-1:1.0: empeg converter detected [ 866.465570][ T5810] usb 3-1: empeg converter now attached to ttyUSB0 [ 866.565949][T11673] loop1: detected capacity change from 0 to 32768 [ 866.581440][T11673] (syz.1.12871,11673,1):ocfs2_verify_volume:2368 ERROR: bad root_blkno: 0 [ 866.611122][T11673] (syz.1.12871,11673,1):ocfs2_verify_volume:2385 ERROR: status = -22 [ 866.624625][T11673] (syz.1.12871,11673,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 866.636985][T11673] (syz.1.12871,11673,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 866.677965][ T5810] usb 3-1: USB disconnect, device number 77 [ 866.688295][ T5810] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0 [ 866.721230][ T5810] empeg 3-1:1.0: device disconnected [ 866.728110][T11673] (syz.1.12871,11673,0):ocfs2_verify_volume:2368 ERROR: bad root_blkno: 0 [ 866.761249][T11673] (syz.1.12871,11673,1):ocfs2_verify_volume:2385 ERROR: status = -22 [ 866.785853][T11673] (syz.1.12871,11673,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 866.822343][T11673] (syz.1.12871,11673,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 867.025621][T11737] netlink: 'syz.3.12887': attribute type 2 has an invalid length. [ 867.151212][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 867.355477][ T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 867.373885][ T9] usb 1-1: config 0 has no interface number 0 [ 867.382149][T11755] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12893'. [ 867.398648][ T9] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 867.444275][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 867.460197][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.484709][ T9] usb 1-1: Product: syz [ 867.488937][ T9] usb 1-1: Manufacturer: syz [ 867.512512][ T9] usb 1-1: SerialNumber: syz [ 867.528668][ T9] usb 1-1: config 0 descriptor?? [ 867.557986][ T9] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 867.791424][ T5760] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 867.996523][ T5760] usb 2-1: unable to get BOS descriptor or descriptor too short [ 868.005960][T11758] loop2: detected capacity change from 0 to 32768 [ 868.016406][ T5760] usb 2-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 868.023156][T11758] (syz.2.12894,11758,1):ocfs2_verify_volume:2368 ERROR: bad root_blkno: 0 [ 868.033673][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.043292][T11758] (syz.2.12894,11758,1):ocfs2_verify_volume:2385 ERROR: status = -22 [ 868.049408][ T9] usb 1-1: USB disconnect, device number 78 [ 868.063204][T11758] (syz.2.12894,11758,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 868.070456][ T5760] usb 2-1: Product: syz [ 868.074834][T11758] (syz.2.12894,11758,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 868.082489][ T9] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 868.104265][ T5760] usb 2-1: Manufacturer: syz [ 868.108944][ T5760] usb 2-1: SerialNumber: syz [ 868.109387][T11758] (syz.2.12894,11758,1):ocfs2_verify_volume:2368 ERROR: bad root_blkno: 0 [ 868.132603][T11758] (syz.2.12894,11758,0):ocfs2_verify_volume:2385 ERROR: status = -22 [ 868.164422][T11758] (syz.2.12894,11758,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 868.178917][T11758] (syz.2.12894,11758,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 868.368366][ T5760] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 868.447066][ T5760] usb 2-1: USB disconnect, device number 71 [ 868.610517][T11830] loop3: detected capacity change from 0 to 512 [ 868.639986][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 868.674370][T11830] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 868.692856][T11830] EXT4-fs (loop3): orphan cleanup on readonly fs [ 868.704498][T11830] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.12907: EA inode hash validation failed [ 868.718483][T11830] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 868.734156][T11830] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.12907: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 868.760284][T11830] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.12907: ea_inode dec ref err=-117 [ 868.779931][T11830] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.12907: bit already cleared for inode 11 [ 868.803324][T11830] EXT4-fs (loop3): 1 orphan inode deleted [ 868.810633][T11830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 868.844079][T11830] EXT4-fs error (device loop3): __ext4_iget:5079: inode #14: block 1886221359: comm syz.3.12907: invalid block [ 868.905947][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.948770][ T5810] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 869.163614][ T5810] usb 3-1: config 0 has an invalid interface number: 3 but max is 2 [ 869.176386][ T5810] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 869.201125][ T5810] usb 3-1: config 0 has no interface number 1 [ 869.201198][ T5760] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 869.217707][ T5810] usb 3-1: config 0 has no interface number 2 [ 869.226529][ T5810] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 869.246709][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.271659][ T5810] usb 3-1: config 0 descriptor?? [ 869.401061][ T5760] usb 1-1: Using ep0 maxpacket: 8 [ 869.408848][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 869.450465][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 869.510478][ T5760] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 869.530869][ T5810] qcserial 3-1:0.3: Qualcomm USB modem converter detected [ 869.532901][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 869.571870][ T5760] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 869.614520][ T5760] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 869.639486][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.669217][ T5760] usb 1-1: config 0 descriptor?? [ 869.711706][T11854] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 869.844688][ T5760] usb 3-1: USB disconnect, device number 78 [ 869.881190][ T5760] qcserial 3-1:0.3: device disconnected [ 870.308091][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.315930][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.363519][T11965] loop3: detected capacity change from 0 to 16 [ 870.384398][T11965] erofs: (device loop3): mounted with root inode @ nid 36. [ 870.568007][ T5760] usb 1-1: USB disconnect, device number 79 [ 870.570880][T22239] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 870.885808][T11998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12930'. [ 871.206981][T12019] loop1: detected capacity change from 0 to 2048 [ 871.299923][T12031] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 871.347855][T12019] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 871.386352][T12019] Remounting filesystem read-only [ 871.565869][ T5760] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 871.796231][ T5760] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 871.831080][ T5760] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 871.858015][ T5760] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 871.877939][ T5760] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 871.908391][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 871.934908][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 871.981099][ T5760] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 872.026396][ T5760] usb 1-1: string descriptor 0 read error: -22 [ 872.038049][ T5760] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 872.070782][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.106705][ T5760] usb 1-1: config 0 descriptor?? [ 872.129447][ T5760] hub 1-1:0.0: bad descriptor, ignoring hub [ 872.151124][ T5760] hub: probe of 1-1:0.0 failed with error -5 [ 872.187976][ T5760] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input60 [ 872.362885][T12090] loop3: detected capacity change from 0 to 2048 [ 872.373801][ T9] usb 1-1: USB disconnect, device number 80 [ 872.403909][T12090] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 872.489979][T12108] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 872.518271][T12110] loop1: detected capacity change from 0 to 16 [ 872.544284][T12090] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 872.562240][T12090] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 872.581899][T12110] erofs: (device loop1): mounted with root inode @ nid 36. [ 872.652853][T12090] Remounting filesystem read-only [ 872.692634][T12090] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 872.750514][T12090] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 872.801411][T12090] NILFS (loop3): error -5 truncating bmap (ino=16) [ 872.848873][ T5777] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 872.857069][ T5777] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 872.872422][ T5777] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 872.882539][ T5777] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 872.891861][ T5777] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 872.901844][ T5777] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 873.174007][T12146] netlink: 'syz.3.12960': attribute type 49 has an invalid length. [ 873.269043][T12152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12962'. [ 873.471641][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12965'. [ 873.679296][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 873.679311][ T28] audit: type=1326 audit(2000000216.670:9199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12178 comm="syz.0.12970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 873.711164][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.796912][ T28] audit: type=1326 audit(2000000216.670:9200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12178 comm="syz.0.12970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 873.871050][ T28] audit: type=1326 audit(2000000216.690:9201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12178 comm="syz.0.12970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 873.896195][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.015960][ T28] audit: type=1326 audit(2000000216.690:9202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12178 comm="syz.0.12970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 874.041567][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.198922][T12211] loop2: detected capacity change from 0 to 1024 [ 874.623352][T12236] loop2: detected capacity change from 0 to 16 [ 874.678095][T12236] erofs: (device loop2): mounted with root inode @ nid 36. [ 874.901520][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 874.971776][T12257] netlink: 'syz.2.12989': attribute type 21 has an invalid length. [ 875.004399][T12210] loop1: detected capacity change from 0 to 32768 [ 875.085662][T12210] JBD2: Ignoring recovery information on journal [ 875.112936][ T9] usb 1-1: config index 0 descriptor too short (expected 57635, got 36) [ 875.124506][ T9] usb 1-1: config 1 has an invalid interface number: 188 but max is 0 [ 875.133335][T12210] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 875.141087][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.153210][ T9] usb 1-1: config 1 has no interface number 0 [ 875.159506][ T9] usb 1-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 875.180105][ T9] usb 1-1: config 1 interface 188 has no altsetting 0 [ 875.192591][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 875.204656][T12210] JBD2: bad block at offset 32 [ 875.204776][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.222646][ T9] usb 1-1: Product: syz [ 875.227064][ T9] usb 1-1: Manufacturer: syz [ 875.241441][ T9] usb 1-1: SerialNumber: syz [ 875.255037][T12210] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 875.302524][T12210] (syz.1.12979,12210,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0 [ 875.339436][T12276] netlink: 'syz.2.12993': attribute type 5 has an invalid length. [ 875.363895][T12210] (syz.1.12979,12210,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 875.403998][T12210] (syz.1.12979,12210,1):ocfs2_mknod:298 ERROR: status = -2 [ 875.452141][T12210] (syz.1.12979,12210,0):ocfs2_mknod:502 ERROR: status = -2 [ 875.522914][ T9] usb 1-1: unknown interface protocol 0xc1, assuming v1 [ 875.563231][ T9] usb 1-1: 188:0 : does not exist [ 875.693257][ T9] usb 1-1: USB disconnect, device number 81 [ 875.749133][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 875.777254][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.038848][T12318] cgroup: release_agent respecified [ 876.388747][T12331] loop1: detected capacity change from 0 to 16 [ 876.444014][T12331] erofs: (device loop1): mounted with root inode @ nid 36. [ 876.579147][T12343] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 876.845832][T12359] netlink: 'syz.2.13010': attribute type 29 has an invalid length. [ 876.878414][T12363] tmpfs: Bad value for 'mpol' [ 876.882917][T12359] netlink: 'syz.2.13010': attribute type 29 has an invalid length. [ 876.941478][T12364] netlink: 'syz.3.13011': attribute type 1 has an invalid length. [ 876.949627][T12364] netlink: 244 bytes leftover after parsing attributes in process `syz.3.13011'. [ 877.246515][T12382] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13016'. [ 877.271902][T12382] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 877.368305][T12392] autofs4:pid:12392:autofs_fill_super: called with bogus options [ 877.902469][ T789] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 878.113349][ T789] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 878.125718][ T789] usb 3-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 878.141124][ T789] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 878.150241][ T789] usb 3-1: config 1 has no interface number 1 [ 878.156841][ T789] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 878.202600][ T789] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 878.217721][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.234171][ T789] usb 3-1: Product: syz [ 878.241267][ T789] usb 3-1: Manufacturer: syz [ 878.246054][ T789] usb 3-1: SerialNumber: syz [ 878.251172][ T8] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 878.296378][T12459] dlm: Unknown command passed to DLM device : 11 [ 878.296378][T12459] [ 878.446481][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 878.455975][ T8] usb 1-1: config 4 has an invalid interface number: 138 but max is 0 [ 878.474752][ T8] usb 1-1: config 4 has no interface number 0 [ 878.498199][ T8] usb 1-1: config 4 interface 138 has no altsetting 0 [ 878.516965][ T789] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 878.518957][ T8] usb 1-1: string descriptor 0 read error: -22 [ 878.534712][ T789] usb 3-1: MIDIStreaming interface descriptor not found [ 878.551484][ T8] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 878.583798][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.618788][ T789] usb 3-1: USB disconnect, device number 79 [ 878.857548][ T8] catc 1-1:4.138: Missing or invalid endpoints [ 879.101642][ T8] usb 1-1: USB disconnect, device number 82 [ 879.375047][T12555] ipt_ECN: cannot use operation on non-tcp rule [ 879.858866][T12586] binder: BC_ATTEMPT_ACQUIRE not supported [ 879.878386][T12586] binder: 12585:12586 ioctl c0306201 200000004a40 returned -22 [ 880.074254][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13076'. [ 880.266625][T12614] bridge9: entered promiscuous mode [ 880.436573][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13085'. [ 880.461173][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13085'. [ 880.639766][T12639] [U] v3f"S/4:XTzWtlW= [ 880.664774][T12639] [U] J"e:" [ 880.674542][T12642] loop2: detected capacity change from 0 to 256 [ 881.064075][T12664] loop1: detected capacity change from 0 to 1024 [ 881.111664][T12664] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 881.343842][T12682] netlink: 'syz.2.13103': attribute type 1 has an invalid length. [ 881.480164][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13107'. [ 882.041187][ T789] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 882.243205][ T789] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 882.252614][ T789] usb 2-1: config 0 has no interface number 0 [ 882.258801][ T789] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 882.269797][ T789] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 882.285089][ T789] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 882.294505][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.305678][ T789] usb 2-1: Product: syz [ 882.309874][ T789] usb 2-1: Manufacturer: syz [ 882.314812][ T789] usb 2-1: SerialNumber: syz [ 882.321275][ T789] usb 2-1: config 0 descriptor?? [ 882.328252][T12711] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 882.337352][ T789] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 882.349619][ T789] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 882.393088][ T9] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 882.481224][ T8] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 882.545085][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 882.583421][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.597226][ T9] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 882.606978][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.615509][ T9] usb 1-1: Product: syz [ 882.619885][ T9] usb 1-1: Manufacturer: syz [ 882.624692][ T9] usb 1-1: SerialNumber: syz [ 882.633753][ T9] usb 1-1: config 0 descriptor?? [ 882.643022][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 882.665322][ T8] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 882.675302][ T8] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 882.684005][ T8] usb 3-1: Product: syz [ 882.688338][ T8] usb 3-1: SerialNumber: syz [ 882.696974][ T8] usb 3-1: config 0 descriptor?? [ 882.746099][ T5760] usb 2-1: USB disconnect, device number 72 [ 882.775609][ T5760] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 882.804909][ T5760] cyberjack 2-1:0.69: device disconnected [ 882.918230][ T8] hso 3-1:0.0: Failed to find BULK IN ep [ 883.063409][ T9] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 883.075448][ T9] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 883.096690][ T9] usb 1-1: USB disconnect, device number 83 [ 883.120411][ T789] usb 3-1: USB disconnect, device number 80 [ 883.387616][T12824] rtc_cmos 00:00: Alarms can be up to one day in the future [ 883.894210][T12860] --map-set only usable from mangle table [ 883.962467][T12865] loop3: detected capacity change from 0 to 64 [ 883.971209][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 884.145832][T12875] loop2: detected capacity change from 0 to 256 [ 884.196558][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 884.222507][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.265397][T12875] FAT-fs (loop2): Directory bread(block 64) failed [ 884.273325][ T9] usb 2-1: config 0 descriptor?? [ 884.293995][ T9] cp210x 2-1:0.0: cp210x converter detected [ 884.302740][T12875] FAT-fs (loop2): Directory bread(block 65) failed [ 884.309543][T12875] FAT-fs (loop2): Directory bread(block 66) failed [ 884.341825][T12875] FAT-fs (loop2): Directory bread(block 67) failed [ 884.359532][T12875] FAT-fs (loop2): Directory bread(block 68) failed [ 884.383636][T12875] FAT-fs (loop2): Directory bread(block 69) failed [ 884.414831][T12875] FAT-fs (loop2): Directory bread(block 70) failed [ 884.431796][T12875] FAT-fs (loop2): Directory bread(block 71) failed [ 884.450783][T12875] FAT-fs (loop2): Directory bread(block 72) failed [ 884.458049][T12875] FAT-fs (loop2): Directory bread(block 73) failed [ 884.545316][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 884.558255][ T28] audit: type=1800 audit(2000000227.550:9203): pid=12875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13152" name="file1" dev="loop2" ino=1048686 res=0 errno=0 [ 884.623216][T12903] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13158'. [ 884.650443][T12903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13158'. [ 884.651398][T12905] loop3: detected capacity change from 0 to 64 [ 884.707140][T12905] hfs: unable to locate alternate MDB [ 884.717936][ T9] usb 2-1: USB disconnect, device number 73 [ 884.721048][T12905] hfs: continuing without an alternate MDB [ 884.744303][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 884.786676][ T9] cp210x 2-1:0.0: device disconnected [ 885.364576][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13170'. [ 885.383163][T12951] batadv0: entered promiscuous mode [ 885.390873][T12951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.474872][T12958] loop2: detected capacity change from 0 to 256 [ 885.508538][T12958] FAT-fs (loop2): Directory bread(block 64) failed [ 885.516685][T12958] FAT-fs (loop2): Directory bread(block 65) failed [ 885.529212][T12958] FAT-fs (loop2): Directory bread(block 66) failed [ 885.556583][T12958] FAT-fs (loop2): Directory bread(block 67) failed [ 885.590828][T12958] FAT-fs (loop2): Directory bread(block 68) failed [ 885.607771][T12958] FAT-fs (loop2): Directory bread(block 69) failed [ 885.616976][T12958] FAT-fs (loop2): Directory bread(block 70) failed [ 885.628506][T12958] FAT-fs (loop2): Directory bread(block 71) failed [ 885.638331][T12958] FAT-fs (loop2): Directory bread(block 72) failed [ 885.648512][T12958] FAT-fs (loop2): Directory bread(block 73) failed [ 885.676714][T12970] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13174'. [ 885.870812][T12986] loop1: detected capacity change from 0 to 64 [ 886.784010][T13047] loop1: detected capacity change from 0 to 256 [ 886.884218][T13047] FAT-fs (loop1): Directory bread(block 64) failed [ 886.913987][T13047] FAT-fs (loop1): Directory bread(block 65) failed [ 886.935692][T13047] FAT-fs (loop1): Directory bread(block 66) failed [ 886.942938][T13047] FAT-fs (loop1): Directory bread(block 67) failed [ 886.949770][T13047] FAT-fs (loop1): Directory bread(block 68) failed [ 886.957408][T13047] FAT-fs (loop1): Directory bread(block 69) failed [ 886.964958][T13047] FAT-fs (loop1): Directory bread(block 70) failed [ 886.972332][T13047] FAT-fs (loop1): Directory bread(block 71) failed [ 886.979139][T13047] FAT-fs (loop1): Directory bread(block 72) failed [ 886.986502][T13047] FAT-fs (loop1): Directory bread(block 73) failed [ 887.061136][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 887.102203][T13067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 887.104628][T13066] netlink: 'syz.3.13204': attribute type 1 has an invalid length. [ 887.131958][T13066] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.13204'. [ 887.261462][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 887.283820][ T9] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 887.306617][ T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 887.330317][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 887.356215][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 887.365678][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.393640][ T9] usb 1-1: Product: syz [ 887.400610][ T9] usb 1-1: Manufacturer: syz [ 887.431944][ T9] usb 1-1: SerialNumber: syz [ 887.439969][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 887.558400][T13095] netlink: 'syz.3.13212': attribute type 3 has an invalid length. [ 887.865530][ T28] audit: type=1326 audit(2000000230.850:9204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13112 comm="syz.1.13218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 887.902002][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 887.925422][ T28] audit: type=1326 audit(2000000230.850:9205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13112 comm="syz.1.13218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 887.936615][ T9] r8152-cfgselector 1-1: USB disconnect, device number 84 [ 888.000639][ T28] audit: type=1326 audit(2000000230.860:9206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13112 comm="syz.1.13218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 888.036127][ T28] audit: type=1326 audit(2000000230.970:9207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13112 comm="syz.1.13218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 888.110750][ T28] audit: type=1326 audit(2000000230.970:9208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13112 comm="syz.1.13218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 888.112418][ T8] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 888.351187][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 888.365517][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.394356][ T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 888.404847][T13146] netlink: 'syz.3.13226': attribute type 1 has an invalid length. [ 888.421161][ T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 888.438202][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 888.461508][T13146] netlink: 'syz.3.13226': attribute type 2 has an invalid length. [ 888.492228][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 888.507556][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 888.525811][ T8] usb 3-1: SerialNumber: syz [ 888.536990][T13152] netlink: 88 bytes leftover after parsing attributes in process `syz.0.13228'. [ 888.559590][T13111] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 888.590848][T13111] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 888.608688][ T8] hub 3-1:1.0: bad descriptor, ignoring hub [ 888.641031][ T8] hub: probe of 3-1:1.0 failed with error -5 [ 888.828545][T13111] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 888.868664][T13111] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 888.896003][T13174] loop3: detected capacity change from 0 to 8 [ 888.954611][T13174] SQUASHFS error: zstd decompression error: 10 [ 888.981121][T13174] SQUASHFS error: zstd decompression failed, data probably corrupt [ 889.022773][T13174] SQUASHFS error: Failed to read block 0x62b: -5 [ 889.029178][T13174] SQUASHFS error: Unable to read metadata cache entry [629] [ 889.064226][T13174] SQUASHFS error: Unable to read directory block [629:ff26] [ 889.093704][ T8] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 889.163517][ T8] usb 3-1: USB disconnect, device number 81 [ 889.307626][T13202] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 889.570215][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13250'. [ 889.607964][T13223] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13249'. [ 889.658661][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13249'. [ 890.217882][ T28] audit: type=1326 audit(2000000233.180:9209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.0.13264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 890.314913][T13261] bond6: option xmit_hash_policy: invalid value (8) [ 890.359969][ T28] audit: type=1326 audit(2000000233.180:9210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.0.13264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 890.385135][ C1] vkms_vblank_simulate: vblank timer overrun [ 890.392456][ T28] audit: type=1326 audit(2000000233.190:9211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.0.13264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 890.417734][ C1] vkms_vblank_simulate: vblank timer overrun [ 890.432969][T13261] bond6 (unregistering): Released all slaves [ 890.516042][ T28] audit: type=1326 audit(2000000233.190:9212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.0.13264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 890.593824][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13272'. [ 890.597005][T13347] loop2: detected capacity change from 0 to 512 [ 890.609613][ T28] audit: type=1326 audit(2000000233.190:9213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.0.13264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 890.617296][T13347] EXT4-fs: inline encryption not supported [ 890.674504][ T28] audit: type=1326 audit(2000000233.190:9214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.0.13264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 890.684208][ C1] vkms_vblank_simulate: vblank timer overrun [ 890.729767][ T28] audit: type=1326 audit(2000000233.190:9215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.0.13264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 890.754294][ C1] vkms_vblank_simulate: vblank timer overrun [ 890.762678][T13347] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 890.776968][ T28] audit: type=1326 audit(2000000233.190:9216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.0.13264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 890.791129][T13347] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 890.801405][ C1] vkms_vblank_simulate: vblank timer overrun [ 890.802714][ T28] audit: type=1326 audit(2000000233.190:9217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.0.13264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f79b1f9e019 code=0x7ffc0000 [ 890.857572][T13356] loop3: detected capacity change from 0 to 512 [ 890.869225][T13358] netlink: 'syz.0.13274': attribute type 15 has an invalid length. [ 890.878777][T13356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 890.898649][T13347] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 890.932819][T13347] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.13270: bg 0: block 248: padding at end of block bitmap is not set [ 890.948853][T13347] Quota error (device loop2): write_blk: dquota write failed [ 890.965599][T13347] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.13270: Failed to acquire dquot type 1 [ 890.989460][T13356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.000473][T13369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13276'. [ 891.020582][T13347] EXT4-fs (loop2): 1 truncate cleaned up [ 891.032909][T13356] ext4 filesystem being mounted at /3310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 891.062373][T13347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 891.203577][T13347] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.13270: Failed to acquire dquot type 1 [ 891.221898][T13356] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.13273: Failed to acquire dquot type 1 [ 891.357995][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.385319][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 891.627544][T13403] netlink: 'syz.0.13288': attribute type 30 has an invalid length. [ 892.035245][T13432] overlayfs: missing 'lowerdir' [ 892.906335][T13492] netlink: 'syz.1.13319': attribute type 21 has an invalid length. [ 893.367062][T13524] loop2: detected capacity change from 0 to 8 [ 893.412637][T13524] SQUASHFS error: Unable to read inode 0xa7 [ 893.512301][T13533] loop1: detected capacity change from 0 to 512 [ 893.546637][T13533] EXT4-fs (loop1): orphan cleanup on readonly fs [ 893.587863][T13533] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.13333: Failed to acquire dquot type 1 [ 893.609422][T13533] EXT4-fs (loop1): 1 truncate cleaned up [ 893.625582][T13533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 893.693049][T13547] loop3: detected capacity change from 0 to 1024 [ 893.720728][T13547] hfsplus: extend alloc file! (8192,512,17039360) [ 893.810112][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13339'. [ 893.829481][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.112326][T13575] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13346'. [ 894.334512][T13587] netlink: 'syz.1.13350': attribute type 4 has an invalid length. [ 894.361542][T13587] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13350'. [ 894.825134][T13612] loop2: detected capacity change from 0 to 4096 [ 894.852316][T13612] EXT4-fs: inline encryption not supported [ 894.858683][T13612] EXT4-fs: inline encryption not supported [ 894.900475][T13612] ext4: Unknown parameter 'fowner' [ 894.944599][T13612] exfat: Deprecated parameter 'debug' [ 894.985531][T13612] exFAT-fs (loop2): invalid boot record signature [ 895.003086][T13612] exFAT-fs (loop2): failed to read boot sector [ 895.022581][T13612] exFAT-fs (loop2): failed to recognize exfat type [ 895.242404][T13639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 895.723761][T13663] delete_channel: no stack [ 895.931705][T13675] loop3: detected capacity change from 0 to 512 [ 895.995850][T13675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.102047][T13675] ext4 filesystem being mounted at /3337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 896.279647][T13690] loop1: detected capacity change from 0 to 4096 [ 896.291963][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.298631][T13690] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 896.419510][T13690] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 896.832683][T13718] loop2: detected capacity change from 0 to 4096 [ 896.855239][T13718] __ntfs_error: 7 callbacks suppressed [ 896.855256][T13718] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 896.893682][T13718] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 896.927850][T13718] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 896.978714][T13718] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 897.041318][T13718] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 897.061072][T13718] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 897.119578][T13718] ntfs: volume version 3.1. [ 897.146563][T13718] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 897.199299][T13718] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 897.237779][T13718] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 897.280118][T13718] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 897.300929][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.079537][T13743] loop1: detected capacity change from 0 to 32768 [ 898.108675][T13743] [ 898.108675][T13743] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 898.108675][T13743] [ 898.151135][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13417'. [ 898.165728][T13743] jfs_lookup: dtSearch returned -5 [ 898.298648][ T5770] [ 898.298648][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 898.298648][ T5770] [ 898.346892][ T5770] [ 898.346892][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 898.346892][ T5770] [ 898.629119][T13822] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13426'. [ 898.751148][ T5810] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 898.964185][ T5810] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 898.977317][ T5810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.019454][ T5810] usb 2-1: config 0 has no interface number 0 [ 899.030121][ T5810] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 899.043478][ T5810] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.076153][ T5810] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 899.086413][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.095256][ T5810] usb 2-1: Product: syz [ 899.099761][ T5810] usb 2-1: Manufacturer: syz [ 899.108370][ T5810] usb 2-1: SerialNumber: syz [ 899.116746][ T5810] usb 2-1: config 0 descriptor?? [ 899.511161][ T8] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 899.535684][ T5810] usbtouchscreen: probe of 2-1:0.117 failed with error -71 [ 899.572067][ T5810] usb 2-1: USB disconnect, device number 74 [ 899.711139][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 899.728838][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 899.755256][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13449'. [ 899.758867][ T8] usb 1-1: config 8 has an invalid interface number: 61 but max is 2 [ 899.764967][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13449'. [ 899.796024][ T8] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 899.809535][ T8] usb 1-1: config 8 has no interface number 0 [ 899.816878][ T8] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 899.836864][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13450'. [ 899.840242][ T8] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 899.862303][ T8] usb 1-1: config 8 interface 61 has no altsetting 0 [ 899.870059][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13450'. [ 899.880171][T13900] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13450'. [ 899.891612][ T8] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 899.911263][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.930664][ T8] usb 1-1: Product: syz [ 899.935113][ T8] usb 1-1: Manufacturer: syz [ 899.940781][ T8] usb 1-1: SerialNumber: syz [ 900.177254][ T8] bfusb: probe of 1-1:8.61 failed with error -5 [ 900.186591][T13920] netlink: 'syz.1.13456': attribute type 1 has an invalid length. [ 900.214252][ T8] usb 1-1: USB disconnect, device number 85 [ 900.221212][T13920] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.13456'. [ 900.656625][T13956] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13464'. [ 900.821645][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13467'. [ 900.848741][T13973] overlay: Unknown parameter '\' [ 901.282906][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 901.492052][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.504783][T14018] loop1: detected capacity change from 0 to 1024 [ 901.514039][T14018] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 901.518270][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 901.572051][ T9] usb 4-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 901.581496][T14018] hfsplus: filesystem is marked journaled, leaving read-only. [ 901.606176][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.871822][ T9] usb 4-1: USB disconnect, device number 70 [ 902.539036][T14090] netlink: 'syz.0.13503': attribute type 1 has an invalid length. [ 902.639454][T14096] loop3: detected capacity change from 0 to 764 [ 902.801125][ T5810] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 902.999214][T14120] netlink: 'syz.0.13514': attribute type 49 has an invalid length. [ 903.009011][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 903.030273][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 903.073337][ T5810] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 903.099429][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.111103][ T5810] usb 3-1: Product: syz [ 903.115362][ T5810] usb 3-1: Manufacturer: syz [ 903.120592][T14122] loop3: detected capacity change from 0 to 2048 [ 903.128790][ T5810] usb 3-1: SerialNumber: syz [ 903.167527][ T5810] usb 3-1: config 0 descriptor?? [ 903.182895][T14130] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 903.191749][ T5810] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 903.224938][ T5810] usb 3-1: No valid video chain found. [ 903.277504][T14122] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 903.307632][T14122] Remounting filesystem read-only [ 903.407329][ T5810] usb 3-1: USB disconnect, device number 82 [ 903.480705][T14153] tmpfs: Bad value for 'mpol' [ 903.487578][T14156] loop3: detected capacity change from 0 to 8 [ 903.567976][T14156] SQUASHFS error: Failed to read block 0x6de: -5 [ 903.589916][T14156] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 903.597864][T14156] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 904.021078][ T5810] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 904.211281][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 904.219628][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 904.232582][ T5810] usb 4-1: config 8 has an invalid interface number: 254 but max is 0 [ 904.251155][ T5810] usb 4-1: config 8 has no interface number 0 [ 904.257481][ T5810] usb 4-1: config 8 interface 254 has no altsetting 0 [ 904.273673][ T5810] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5 [ 904.291324][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.309786][ T5810] usb 4-1: Product: syz [ 904.314374][ T5810] usb 4-1: Manufacturer: syz [ 904.319123][ T5810] usb 4-1: SerialNumber: syz [ 904.325145][T14176] loop1: detected capacity change from 0 to 32768 [ 904.388789][T14176] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 904.449256][T14176] XFS (loop1): Ending clean mount [ 904.560360][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 904.587700][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 904.595494][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 904.603195][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 904.621338][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 904.626731][T14218] __nla_validate_parse: 6 callbacks suppressed [ 904.626749][T14218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13542'. [ 904.638509][ T5810] usb 4-1: USB disconnect, device number 71 [ 904.672791][ T5770] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 904.766304][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13544'. [ 905.374441][T14264] loop3: detected capacity change from 0 to 16 [ 905.408746][T14264] erofs: (device loop3): mounted with root inode @ nid 36. [ 905.431524][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 905.642309][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.663161][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 905.682077][ T9] usb 1-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 905.697569][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.833692][T14265] loop1: detected capacity change from 0 to 32768 [ 905.848571][T14265] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.13552 (14265) [ 905.866840][T14265] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 905.890805][T14265] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 905.921295][T14265] BTRFS info (device loop1): force zlib compression, level 3 [ 905.928887][T14265] BTRFS info (device loop1): force clearing of disk cache [ 905.951105][T14265] BTRFS info (device loop1): setting nodatasum [ 905.957392][T14265] BTRFS info (device loop1): use zlib compression, level 3 [ 905.975107][ T9] usb 1-1: USB disconnect, device number 86 [ 905.987834][T14265] BTRFS info (device loop1): allowing degraded mounts [ 905.996439][T14265] BTRFS info (device loop1): enabling disk space caching [ 906.006514][T14265] BTRFS info (device loop1): disk space caching is enabled [ 906.113148][T14316] tmpfs: Bad value for 'mpol' [ 906.165962][T14265] BTRFS info (device loop1): enabling ssd optimizations [ 906.199721][T14265] BTRFS info (device loop1): auto enabling async discard [ 906.235752][T14265] BTRFS info (device loop1): rebuilding free space tree [ 906.303842][T14265] BTRFS info (device loop1): disabling free space tree [ 906.314904][T14265] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 906.351048][T14265] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 906.388571][T14329] netlink: 'syz.3.13566': attribute type 5 has an invalid length. [ 906.474961][T14331] loop2: detected capacity change from 0 to 2048 [ 906.489007][T14265] BTRFS info (device loop1): balance: start -f -susage=12,usage=12..0,limit=6 [ 906.526482][T14331] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 906.552015][T14265] BTRFS info (device loop1): balance: ended with status: 0 [ 906.583225][T14336] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 906.677923][T14331] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 906.712850][T14331] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 906.751367][ T5770] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 906.782101][T14331] Remounting filesystem read-only [ 906.816615][T14331] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 906.891868][T14331] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 906.971896][T14331] NILFS (loop2): error -5 truncating bmap (ino=16) [ 907.080657][ T5778] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 907.101554][ T5778] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 907.109006][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 907.151000][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 907.160741][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 907.189436][ T5778] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 907.289643][T14362] netlink: 'syz.0.13577': attribute type 29 has an invalid length. [ 907.347430][T14362] netlink: 'syz.0.13577': attribute type 29 has an invalid length. [ 907.720004][T14385] cgroup: release_agent respecified [ 907.998054][T14405] netlink: 'syz.0.13590': attribute type 5 has an invalid length. [ 908.029372][T14399] loop3: detected capacity change from 0 to 1024 [ 908.253181][T14422] netlink: 'syz.0.13595': attribute type 1 has an invalid length. [ 908.271858][T14422] netlink: 244 bytes leftover after parsing attributes in process `syz.0.13595'. [ 908.461304][ T8] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 908.643415][ T8] usb 3-1: config index 0 descriptor too short (expected 57635, got 36) [ 908.651989][ T8] usb 3-1: config 1 has an invalid interface number: 188 but max is 0 [ 908.660430][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.670699][ T8] usb 3-1: config 1 has no interface number 0 [ 908.678023][ T8] usb 3-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 908.691594][ T8] usb 3-1: config 1 interface 188 has no altsetting 0 [ 908.700396][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 908.709815][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.718047][ T8] usb 3-1: Product: syz [ 908.722399][ T8] usb 3-1: Manufacturer: syz [ 908.727075][ T8] usb 3-1: SerialNumber: syz [ 908.952373][ T8] usb 3-1: unknown interface protocol 0xc1, assuming v1 [ 908.960333][ T8] usb 3-1: 188:0 : does not exist [ 908.979205][ T8] usb 3-1: USB disconnect, device number 83 [ 909.013633][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 909.569496][T14458] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 909.763124][T14469] autofs4:pid:14469:autofs_fill_super: called with bogus options [ 909.938139][T14482] netlink: 'syz.1.13608': attribute type 29 has an invalid length. [ 909.963374][T14482] netlink: 'syz.1.13608': attribute type 29 has an invalid length. [ 910.308997][T14476] loop2: detected capacity change from 0 to 32768 [ 910.330211][T14476] JBD2: Ignoring recovery information on journal [ 910.349528][T14476] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 910.360545][T14476] JBD2: bad block at offset 32 [ 910.370525][T14476] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 910.386459][ T5812] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 910.406941][T14476] (syz.2.13606,14476,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0 [ 910.426996][T14476] (syz.2.13606,14476,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 910.436093][T14476] (syz.2.13606,14476,0):ocfs2_mknod:298 ERROR: status = -2 [ 910.443733][T14476] (syz.2.13606,14476,0):ocfs2_mknod:502 ERROR: status = -2 [ 910.471759][ T5810] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 910.525239][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 910.592843][ T5812] usb 2-1: config index 0 descriptor too short (expected 57635, got 36) [ 910.615366][ T5812] usb 2-1: config 1 has an invalid interface number: 188 but max is 0 [ 910.645925][ T5812] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.657368][ T5812] usb 2-1: config 1 has no interface number 0 [ 910.664038][ T5812] usb 2-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 910.682810][ T5812] usb 2-1: config 1 interface 188 has no altsetting 0 [ 910.691491][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 910.703242][ T5810] usb 4-1: config 4 has an invalid interface number: 138 but max is 0 [ 910.713901][ T5810] usb 4-1: config 4 has no interface number 0 [ 910.723760][ T5812] usb 2-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 910.743226][ T5810] usb 4-1: config 4 interface 138 has no altsetting 0 [ 910.756521][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.765325][ T5812] usb 2-1: Product: syz [ 910.769962][ T5812] usb 2-1: Manufacturer: syz [ 910.778252][ T5812] usb 2-1: SerialNumber: syz [ 910.787434][ T5810] usb 4-1: string descriptor 0 read error: -22 [ 910.794226][ T5810] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 910.804637][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.038551][ T5812] usb 2-1: unknown interface protocol 0xc1, assuming v1 [ 911.047513][ T5810] catc 4-1:4.138: Missing or invalid endpoints [ 911.056085][ T5812] usb 2-1: 188:0 : does not exist [ 911.076127][ T5812] usb 2-1: USB disconnect, device number 75 [ 911.114247][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.260277][ T8] usb 4-1: USB disconnect, device number 72 [ 911.648829][T14553] cgroup: release_agent respecified [ 911.656105][T14555] bridge7: entered promiscuous mode [ 911.785508][T14564] ipt_ECN: cannot use operation on non-tcp rule [ 911.821907][T14565] tmpfs: Bad value for 'mpol' [ 912.424783][T14612] dlm: Unknown command passed to DLM device : 11 [ 912.424783][T14612] [ 912.491334][ T8] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 912.631058][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 912.682975][ T8] usb 4-1: config index 0 descriptor too short (expected 57635, got 36) [ 912.694759][ T8] usb 4-1: config 1 has an invalid interface number: 188 but max is 0 [ 912.704554][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.720261][ T8] usb 4-1: config 1 has no interface number 0 [ 912.727475][ T8] usb 4-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 912.746660][ T8] usb 4-1: config 1 interface 188 has no altsetting 0 [ 912.756652][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 912.781158][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.789225][ T8] usb 4-1: Product: syz [ 912.805606][ T8] usb 4-1: Manufacturer: syz [ 912.810369][ T8] usb 4-1: SerialNumber: syz [ 912.841548][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 912.857668][ T9] usb 2-1: config 4 has an invalid interface number: 138 but max is 0 [ 912.875248][ T9] usb 2-1: config 4 has no interface number 0 [ 912.891083][ T9] usb 2-1: config 4 interface 138 has no altsetting 0 [ 912.904580][ T9] usb 2-1: string descriptor 0 read error: -22 [ 912.911219][ T9] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 912.920355][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.076186][ T8] usb 4-1: unknown interface protocol 0xc1, assuming v1 [ 913.097634][ T8] usb 4-1: 188:0 : does not exist [ 913.152346][ T8] usb 4-1: USB disconnect, device number 73 [ 913.210078][ T9] catc 2-1:4.138: Missing or invalid endpoints [ 913.438153][ T5812] usb 2-1: USB disconnect, device number 76 [ 913.508930][T14692] ipt_ECN: cannot use operation on non-tcp rule [ 913.673464][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13663'. [ 913.818874][T14710] binder: BC_ATTEMPT_ACQUIRE not supported [ 913.828294][T14710] binder: 14709:14710 ioctl c0306201 200000004a40 returned -22 [ 914.372128][T14747] [U] v3f"S/4:XTzWtlW= [ 914.378219][T14747] [U] J"e:" [ 914.856177][T14779] rtc_cmos 00:00: Alarms can be up to one day in the future [ 914.866315][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13692'. [ 914.874533][T14783] binder: BC_ATTEMPT_ACQUIRE not supported [ 914.899155][T14783] binder: 14781:14783 ioctl c0306201 200000004a40 returned -22 [ 915.087140][T14792] bridge10: entered promiscuous mode [ 915.374000][T14813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13703'. [ 915.411179][T14813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13703'. [ 915.478901][T14821] netlink: 'syz.0.13713': attribute type 1 has an invalid length. [ 915.603856][T14826] loop2: detected capacity change from 0 to 64 [ 915.996176][T14857] loop2: detected capacity change from 0 to 1024 [ 916.007743][T14857] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 916.063339][ T8] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 916.176541][T14872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13721'. [ 916.188429][T14872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13721'. [ 916.263079][ T8] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 916.281142][ T8] usb 1-1: config 0 has no interface number 0 [ 916.300448][ T8] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 916.316772][ T8] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 916.327131][T14881] netlink: 'syz.1.13724': attribute type 1 has an invalid length. [ 916.339947][ T8] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 916.365277][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.381518][ T9] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 916.391240][ T8] usb 1-1: Product: syz [ 916.395659][ T8] usb 1-1: Manufacturer: syz [ 916.404168][ T8] usb 1-1: SerialNumber: syz [ 916.431491][ T8] usb 1-1: config 0 descriptor?? [ 916.439935][T14839] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 916.480094][ T8] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 916.513896][ T8] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 916.583302][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.614751][ T9] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 916.630275][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.669578][ T9] usb 4-1: Product: syz [ 916.687238][ T9] usb 4-1: Manufacturer: syz [ 916.721108][ T9] usb 4-1: SerialNumber: syz [ 916.763049][ T9] usb 4-1: config 0 descriptor?? [ 916.794135][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 916.814364][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 916.903691][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13730'. [ 916.933659][T14911] batadv2: entered promiscuous mode [ 916.946800][T14911] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 917.027384][ T8] usb 1-1: USB disconnect, device number 87 [ 917.066588][ T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 917.093443][ T8] cyberjack 1-1:0.69: device disconnected [ 917.199473][ T9] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 917.227860][ T9] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 917.269257][ T9] usb 4-1: USB disconnect, device number 74 [ 918.371162][ T5810] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 918.553726][ T5810] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 918.562744][ T5810] usb 4-1: config 0 has no interface number 0 [ 918.569360][ T5810] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 918.582709][ T5810] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 918.597028][ T5810] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 918.606484][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.614795][ T5810] usb 4-1: Product: syz [ 918.619162][ T5810] usb 4-1: Manufacturer: syz [ 918.624135][ T5810] usb 4-1: SerialNumber: syz [ 918.631291][ T5810] usb 4-1: config 0 descriptor?? [ 918.638223][T14987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 918.648204][ T5810] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 918.660443][ T5810] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 918.876909][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 919.090432][ T9] usb 4-1: USB disconnect, device number 75 [ 919.104393][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 919.116189][ T9] cyberjack 4-1:0.69: device disconnected [ 919.891593][T15034] netlink: 'syz.1.13755': attribute type 1 has an invalid length. [ 919.924799][T15034] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.13755'. [ 919.932607][T15038] --map-set only usable from mangle table [ 919.961100][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 920.077528][T15043] netlink: 'syz.1.13760': attribute type 3 has an invalid length. [ 920.086751][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 920.086766][ T28] audit: type=1326 audit(2000000263.090:9218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15044 comm="syz.2.13769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb1d9e019 code=0x7ffc0000 [ 920.123932][ T28] audit: type=1326 audit(2000000263.090:9219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15044 comm="syz.2.13769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb1d9e019 code=0x7ffc0000 [ 920.155129][ T28] audit: type=1326 audit(2000000263.090:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15044 comm="syz.2.13769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7febb1d9e019 code=0x7ffc0000 [ 920.187348][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 920.202717][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.242929][ T9] usb 1-1: config 0 descriptor?? [ 920.256805][ T28] audit: type=1326 audit(2000000263.120:9221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15044 comm="syz.2.13769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb1d9e019 code=0x7ffc0000 [ 920.276940][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13762'. [ 920.294148][ T9] cp210x 1-1:0.0: cp210x converter detected [ 920.305402][ T28] audit: type=1326 audit(2000000263.120:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15044 comm="syz.2.13769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb1d9e019 code=0x7ffc0000 [ 920.383742][T15051] batadv0: entered promiscuous mode [ 920.396670][T15051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.498871][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 920.545833][T15065] loop3: detected capacity change from 0 to 256 [ 920.685386][T15065] FAT-fs (loop3): Directory bread(block 64) failed [ 920.727654][T15065] FAT-fs (loop3): Directory bread(block 65) failed [ 920.735131][ T9] usb 1-1: USB disconnect, device number 88 [ 920.755140][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 920.773292][T15065] FAT-fs (loop3): Directory bread(block 66) failed [ 920.778591][T15078] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13767'. [ 920.784361][ T9] cp210x 1-1:0.0: device disconnected [ 920.803850][T15065] FAT-fs (loop3): Directory bread(block 67) failed [ 920.819329][T15065] FAT-fs (loop3): Directory bread(block 68) failed [ 920.843973][T15065] FAT-fs (loop3): Directory bread(block 69) failed [ 920.852467][T15065] FAT-fs (loop3): Directory bread(block 70) failed [ 920.859235][T15065] FAT-fs (loop3): Directory bread(block 71) failed [ 920.866380][T15065] FAT-fs (loop3): Directory bread(block 72) failed [ 920.876528][T15065] FAT-fs (loop3): Directory bread(block 73) failed [ 921.404274][T15122] loop2: detected capacity change from 0 to 256 [ 921.486409][T15122] FAT-fs (loop2): Directory bread(block 64) failed [ 921.504710][T15122] FAT-fs (loop2): Directory bread(block 65) failed [ 921.571283][T15122] FAT-fs (loop2): Directory bread(block 66) failed [ 921.578083][T15122] FAT-fs (loop2): Directory bread(block 67) failed [ 921.596973][T15122] FAT-fs (loop2): Directory bread(block 68) failed [ 921.606975][T15122] FAT-fs (loop2): Directory bread(block 69) failed [ 921.621970][T15122] FAT-fs (loop2): Directory bread(block 70) failed [ 921.628891][T15122] FAT-fs (loop2): Directory bread(block 71) failed [ 921.643482][T15122] FAT-fs (loop2): Directory bread(block 72) failed [ 921.650352][T15122] FAT-fs (loop2): Directory bread(block 73) failed [ 921.974167][T15149] netlink: 'syz.0.13788': attribute type 3 has an invalid length. [ 922.226315][ T28] audit: type=1326 audit(2000000265.220:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7179e019 code=0x7ffc0000 [ 922.278076][ T28] audit: type=1326 audit(2000000265.220:9224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7179e019 code=0x7ffc0000 [ 922.351351][ T28] audit: type=1326 audit(2000000265.250:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f9a7179e019 code=0x7ffc0000 [ 922.421132][ T28] audit: type=1326 audit(2000000265.350:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7179e019 code=0x7ffc0000 [ 922.491157][ T28] audit: type=1326 audit(2000000265.350:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7179e019 code=0x7ffc0000 [ 922.579681][T15183] loop1: detected capacity change from 0 to 256 [ 922.695315][T15183] FAT-fs (loop1): Directory bread(block 64) failed [ 922.716284][T15183] FAT-fs (loop1): Directory bread(block 65) failed [ 922.728510][T15189] netlink: 'syz.3.13810': attribute type 15 has an invalid length. [ 922.731370][T15183] FAT-fs (loop1): Directory bread(block 66) failed [ 922.758765][T15183] FAT-fs (loop1): Directory bread(block 67) failed [ 922.786856][T15183] FAT-fs (loop1): Directory bread(block 68) failed [ 922.804873][T15183] FAT-fs (loop1): Directory bread(block 69) failed [ 922.821157][T15183] FAT-fs (loop1): Directory bread(block 70) failed [ 922.827763][T15183] FAT-fs (loop1): Directory bread(block 71) failed [ 922.892710][T15183] FAT-fs (loop1): Directory bread(block 72) failed [ 922.899813][T15183] FAT-fs (loop1): Directory bread(block 73) failed [ 922.909321][T15201] netlink: 'syz.2.13806': attribute type 1 has an invalid length. [ 922.959126][T15201] netlink: 'syz.2.13806': attribute type 2 has an invalid length. [ 923.145245][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13811'. [ 924.017969][T15270] bond8: option xmit_hash_policy: invalid value (8) [ 924.060181][T15270] bond8 (unregistering): Released all slaves [ 924.359803][T15353] netlink: 'syz.2.13844': attribute type 15 has an invalid length. [ 924.717923][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13843'. [ 925.381093][ T8] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 925.585698][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 925.612978][ T8] usb 2-1: config index 0 descriptor too short (expected 65532, got 18) [ 925.626206][ T8] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 925.657157][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 925.702505][ T8] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 925.725306][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.753859][ T8] usb 2-1: Product: syz [ 925.758103][ T8] usb 2-1: Manufacturer: syz [ 925.771058][ T8] usb 2-1: SerialNumber: syz [ 925.791964][ T8] r8152-cfgselector 2-1: config 0 descriptor?? [ 925.921292][T15467] netlink: 'syz.3.13867': attribute type 21 has an invalid length. [ 926.257891][ T8] r8152-cfgselector 2-1: Unknown version 0x0000 [ 926.267218][T15511] overlayfs: missing 'lowerdir' [ 926.273981][ T8] r8152-cfgselector 2-1: USB disconnect, device number 77 [ 926.286397][T15478] bond6: option xmit_hash_policy: invalid value (8) [ 926.318377][T15478] bond6 (unregistering): Released all slaves [ 926.847748][T15580] loop2: detected capacity change from 0 to 1024 [ 926.896650][T15580] hfsplus: extend alloc file! (8192,512,17039360) [ 926.989459][T15587] overlayfs: missing 'lowerdir' [ 927.894826][T15647] netlink: 'syz.0.13910': attribute type 21 has an invalid length. [ 928.225571][T15665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 928.267960][T15669] delete_channel: no stack [ 928.711246][T15698] netlink: 88 bytes leftover after parsing attributes in process `syz.3.13927'. [ 928.854404][T15706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 929.015895][T15718] loop3: detected capacity change from 0 to 8 [ 929.067762][T15718] SQUASHFS error: Unable to read inode 0xa7 [ 929.724225][T15758] loop1: detected capacity change from 0 to 1024 [ 929.736868][T15762] loop2: detected capacity change from 0 to 8 [ 929.782566][T15758] hfsplus: extend alloc file! (8192,512,17039360) [ 929.820339][T15762] SQUASHFS error: zstd decompression error: 10 [ 929.862725][T15762] SQUASHFS error: zstd decompression failed, data probably corrupt [ 929.898924][T15771] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13953'. [ 929.908582][T15762] SQUASHFS error: Failed to read block 0x62b: -5 [ 929.908670][T15762] SQUASHFS error: Unable to read metadata cache entry [629] [ 929.908685][T15762] SQUASHFS error: Unable to read directory block [629:ff26] [ 929.977344][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13951'. [ 930.586596][T15816] loop1: detected capacity change from 0 to 8 [ 930.654115][T15816] SQUASHFS error: Unable to read inode 0xa7 [ 930.929159][T15837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13971'. [ 931.124409][T15849] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 931.645315][T15885] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13990'. [ 931.658780][T15885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13990'. [ 931.752984][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.759362][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.829271][T15892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13996'. [ 931.863660][T15892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13996'. [ 932.185333][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14001'. [ 932.218550][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14001'. [ 932.436912][T15928] netlink: 'syz.2.14008': attribute type 1 has an invalid length. [ 932.985700][T15960] loop1: detected capacity change from 0 to 512 [ 933.086866][T15960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.133932][T15960] ext4 filesystem being mounted at /3530/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.212423][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.552674][T15999] loop3: detected capacity change from 0 to 4096 [ 933.591819][T15999] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 933.724084][T15999] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 933.911063][ T5812] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 934.104097][ T5812] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 934.120439][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.150417][ T5812] usb 3-1: config 0 has no interface number 0 [ 934.163082][ T5812] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 934.195035][ T5812] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.233081][ T5812] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 934.258604][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.281017][ T5812] usb 3-1: Product: syz [ 934.285259][ T5812] usb 3-1: Manufacturer: syz [ 934.304716][ T5812] usb 3-1: SerialNumber: syz [ 934.325946][ T5812] usb 3-1: config 0 descriptor?? [ 934.506205][ T28] audit: type=1326 audit(2000000277.500:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.1.14044" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 934.530654][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.546337][ T28] audit: type=1326 audit(2000000277.500:9229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.1.14044" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 934.584021][ T28] audit: type=1326 audit(2000000277.540:9230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.1.14044" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 934.608817][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.665803][ T28] audit: type=1326 audit(2000000277.540:9231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.1.14044" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 934.691458][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.698342][ T28] audit: type=1326 audit(2000000277.540:9232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.1.14044" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 934.724013][ T28] audit: type=1326 audit(2000000277.540:9233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.1.14044" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 934.748349][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.785145][ T5812] usbtouchscreen: probe of 3-1:0.117 failed with error -71 [ 934.797542][ T5812] usb 3-1: USB disconnect, device number 84 [ 934.806571][ T28] audit: type=1326 audit(2000000277.540:9234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.1.14044" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 934.831106][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.875738][ T28] audit: type=1326 audit(2000000277.540:9235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.1.14044" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 934.951360][ T28] audit: type=1326 audit(2000000277.540:9236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.1.14044" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f01f059e019 code=0x7ffc0000 [ 934.985843][T16086] __nla_validate_parse: 2 callbacks suppressed [ 934.985863][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14051'. [ 935.018559][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14051'. [ 935.031118][T16086] netlink: 17 bytes leftover after parsing attributes in process `syz.1.14051'. [ 935.616883][T16114] netlink: 'syz.2.14060': attribute type 30 has an invalid length. [ 936.316677][T16120] loop3: detected capacity change from 0 to 32768 [ 936.343283][T16120] [ 936.343283][T16120] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 936.343283][T16120] [ 936.378598][T16120] jfs_lookup: dtSearch returned -5 [ 936.446700][ T5777] [ 936.446700][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 936.446700][ T5777] [ 936.491145][ T5777] [ 936.491145][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 936.491145][ T5777] [ 936.617349][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14090'. [ 936.637151][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14090'. [ 936.664148][T16161] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14090'. [ 936.695924][T16165] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14076'. [ 937.400642][T16158] loop2: detected capacity change from 0 to 32768 [ 937.499890][T16158] [ 937.499890][T16158] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 937.499890][T16158] [ 937.604707][T16158] jfs_lookup: dtSearch returned -5 [ 937.612250][T16198] netlink: 'syz.3.14092': attribute type 1 has an invalid length. [ 937.620812][T16198] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.14092'. [ 937.719146][ T5778] [ 937.719146][ T5778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 937.719146][ T5778] [ 937.801093][ T5778] [ 937.801093][ T5778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 937.801093][ T5778] [ 938.048782][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14099'. [ 939.103656][T16278] loop3: detected capacity change from 0 to 1024 [ 939.121685][T16278] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 939.156922][T16280] overlay: Unknown parameter '\' [ 939.181944][T16278] hfsplus: filesystem is marked journaled, leaving read-only. [ 939.484733][T16295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14128'. [ 939.807650][T16319] loop2: detected capacity change from 0 to 764 [ 939.947976][ T5810] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 940.148237][T16339] __nla_validate_parse: 3 callbacks suppressed [ 940.148256][T16339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14133'. [ 940.166939][ T5810] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.178593][ T5810] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 940.188379][ T5810] usb 2-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 940.220851][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.522680][ T5810] usb 2-1: USB disconnect, device number 78 [ 941.239178][T16408] loop3: detected capacity change from 0 to 128 [ 941.275013][T16408] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 941.375003][T16408] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 942.846563][T16468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14175'. [ 943.067881][T16474] loop1: detected capacity change from 0 to 4096 [ 943.081578][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 943.096140][T16474] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 943.185916][T16474] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 943.282118][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 943.311096][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 943.344638][ T9] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 943.350712][T16462] loop3: detected capacity change from 0 to 32768 [ 943.360999][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.361026][ T9] usb 1-1: Product: syz [ 943.361040][ T9] usb 1-1: Manufacturer: syz [ 943.361053][ T9] usb 1-1: SerialNumber: syz [ 943.385924][ T9] usb 1-1: config 0 descriptor?? [ 943.426826][ T9] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 943.446456][ T9] usb 1-1: No valid video chain found. [ 943.453498][T16462] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 943.471299][ T8] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 943.539290][T16462] XFS (loop3): Ending clean mount [ 943.609275][ T5777] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 943.639122][ T9] usb 1-1: USB disconnect, device number 89 [ 943.671396][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 943.680115][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 943.707658][ T8] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 943.737975][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 943.782981][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 943.792465][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.841114][ T8] usb 3-1: Product: syz [ 943.852077][ T8] usb 3-1: Manufacturer: syz [ 943.861399][ T8] usb 3-1: SerialNumber: syz [ 944.110124][T16482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.143293][T16482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.206934][ T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input63 [ 944.240590][ T5126] bcm5974 3-1:1.0: could not read from device [ 944.260302][ T5126] bcm5974 3-1:1.0: could not read from device [ 944.278482][T16537] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC [ 944.278482][T16537] SȘȞZ6' [ 944.320871][ T8] usb 3-1: USB disconnect, device number 85 [ 944.415276][ T5763] udevd[5763]: Error opening device "/dev/input/event4": No such file or directory [ 944.447928][ T5763] udevd[5763]: Unable to EVIOCGABS device "/dev/input/event4" [ 944.465952][ T5763] udevd[5763]: Unable to EVIOCGABS device "/dev/input/event4" [ 944.481871][ T5763] udevd[5763]: Unable to EVIOCGABS device "/dev/input/event4" [ 944.501412][ T5763] udevd[5763]: Unable to EVIOCGABS device "/dev/input/event4" [ 944.509143][ T5763] udevd[5763]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 944.590673][ T5141] udevd[5141]: worker [5763] terminated by signal 6 (Aborted) [ 944.608750][ T5141] udevd[5141]: worker [5763] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input63/event4' [ 944.841266][ T5810] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 945.021241][ T5810] usb 2-1: Using ep0 maxpacket: 16 [ 945.028861][ T5810] usb 2-1: unable to get BOS descriptor or descriptor too short [ 945.043862][ T5810] usb 2-1: config 8 has an invalid interface number: 254 but max is 0 [ 945.052843][ T5810] usb 2-1: config 8 has no interface number 0 [ 945.062794][ T5810] usb 2-1: config 8 interface 254 has no altsetting 0 [ 945.079944][ T5810] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5 [ 945.097904][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.116319][ T5810] usb 2-1: Product: syz [ 945.120620][ T5810] usb 2-1: Manufacturer: syz [ 945.130091][ T5810] usb 2-1: SerialNumber: syz [ 945.401219][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 945.431744][ T5810] usb 2-1: USB disconnect, device number 79 [ 945.522301][T16583] loop3: detected capacity change from 0 to 32768 [ 945.568466][T16583] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 945.568466][T16583] [ 945.579844][T16583] ERROR: (device loop3): remounting filesystem as read-only [ 946.097251][T16618] lo speed is unknown, defaulting to 1000 [ 946.223903][T16619] loop3: detected capacity change from 0 to 4096 [ 946.261793][T16619] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 946.347485][T16619] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 946.542155][T16633] bond6: entered allmulticast mode [ 946.576180][T16633] 8021q: adding VLAN 0 to HW filter on device bond6 [ 946.779226][T16687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14220'. [ 946.821073][ T5812] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 946.864360][T16692] team0: left promiscuous mode [ 946.870136][T16692] C: left promiscuous mode [ 946.880133][T16692] : left promiscuous mode [ 946.954514][T16692] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 946.985825][T16692] bond1: left promiscuous mode [ 946.993718][T16692] geneve3: left promiscuous mode [ 947.001894][T16692] geneve4: left promiscuous mode [ 947.007946][T16692] bond5: left promiscuous mode [ 947.021522][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 947.024688][T16692] bridge6: left promiscuous mode [ 947.034196][T16692] bridge7: left promiscuous mode [ 947.054870][ T5812] usb 3-1: unable to get BOS descriptor or descriptor too short [ 947.080428][ T5812] usb 3-1: config 8 has an invalid interface number: 254 but max is 0 [ 947.119587][ T5812] usb 3-1: config 8 has no interface number 0 [ 947.126266][ T5812] usb 3-1: config 8 interface 254 has no altsetting 0 [ 947.136018][ T5812] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5 [ 947.146351][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.154735][ T5812] usb 3-1: Product: syz [ 947.159084][ T5812] usb 3-1: Manufacturer: syz [ 947.178156][T16704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 947.207430][ T5812] usb 3-1: SerialNumber: syz [ 947.247274][T16709] binfmt_misc: register: failed to install interpreter file ./file0 [ 947.468028][ T5812] usb 3-1: USB disconnect, device number 86 [ 948.139490][T16728] loop1: detected capacity change from 0 to 32768 [ 948.183499][T16728] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.14229 (16728) [ 948.265027][T16728] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 948.310561][T16728] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 948.336421][T16728] BTRFS info (device loop1): enabling ssd optimizations [ 948.382041][T16728] BTRFS info (device loop1): not using ssd optimizations [ 948.389243][T16728] BTRFS info (device loop1): turning off barriers [ 948.428619][T16748] lo speed is unknown, defaulting to 1000 [ 948.442812][T16728] BTRFS info (device loop1): using free space tree [ 948.816669][ T5770] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 949.073535][T16779] loop2: detected capacity change from 0 to 4096 [ 949.084377][T16787] lo speed is unknown, defaulting to 1000 [ 949.093624][T16779] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 949.195508][T16779] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 949.240854][ T5812] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 949.458669][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 949.488595][ T5812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.502876][T16800] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC [ 949.502876][T16800] SȘȞZ6' [ 949.508239][ T5812] usb 4-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 949.564622][ T5812] usb 4-1: config 1 interface 0 has no altsetting 0 [ 949.628501][ T5812] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 949.661598][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.670252][ T5812] usb 4-1: Product: syz [ 949.675220][ T5812] usb 4-1: Manufacturer: syz [ 949.680125][ T5812] usb 4-1: SerialNumber: syz [ 949.892293][T16805] loop1: detected capacity change from 0 to 32768 [ 949.918495][T16778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.954992][T16778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.956909][T16805] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 949.956909][T16805] [ 949.982600][T16805] ERROR: (device loop1): remounting filesystem as read-only [ 949.989324][ T5812] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input64 [ 950.005055][ T5126] bcm5974 4-1:1.0: could not read from device [ 950.018883][ T5126] bcm5974 4-1:1.0: could not read from device [ 950.038331][ T5126] bcm5974 4-1:1.0: could not read from device [ 950.045851][ T5812] usb 4-1: USB disconnect, device number 76 [ 950.077114][ T5126] bcm5974 4-1:1.0: could not read from device [ 950.181374][T16824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14250'. [ 950.236591][ T9043] udevd[9043]: Error opening device "/dev/input/event4": No such file or directory [ 950.264220][ T9043] udevd[9043]: Unable to EVIOCGABS device "/dev/input/event4" [ 950.278396][ T9043] udevd[9043]: Unable to EVIOCGABS device "/dev/input/event4" [ 950.311542][ T9043] udevd[9043]: Unable to EVIOCGABS device "/dev/input/event4" [ 950.338631][ T9043] udevd[9043]: Unable to EVIOCGABS device "/dev/input/event4" [ 950.400002][T16838] infiniband syz1: set active [ 950.417158][T16838] infiniband syz1: set active [ 950.422606][T16838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 950.446530][ T6727] lo speed is unknown, defaulting to 1000 [ 950.457318][ T5810] lo speed is unknown, defaulting to 1000 [ 950.474609][ T23] lo speed is unknown, defaulting to 1000 [ 950.486618][ T5810] lo speed is unknown, defaulting to 1000 [ 951.155932][T16882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14267'. [ 951.334516][T16885] bridge_slave_0: left promiscuous mode [ 951.362162][T16885] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.363529][T16891] binfmt_misc: register: failed to install interpreter file ./file0 [ 951.422312][T16885] vlan0: left promiscuous mode [ 951.451228][T16885] ip6gretap1: left promiscuous mode [ 951.457420][T16885] bond1: left promiscuous mode [ 951.478386][T16885] bond3: left promiscuous mode [ 951.494449][T16885] geneve3: left promiscuous mode [ 951.530417][T16885] ip6erspan1: left promiscuous mode [ 951.543344][T16885] bridge5: left promiscuous mode [ 951.566335][T16885] ipip0: left promiscuous mode [ 951.582484][T16885] ip6gre2: left promiscuous mode [ 951.613071][T16885] ip6tnl4: left promiscuous mode [ 951.642970][T16885] bridge9: left promiscuous mode [ 951.669028][T16885] batadv0: left promiscuous mode [ 952.209027][T16927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.783101][ T9] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 952.832039][T16969] loop1: detected capacity change from 0 to 128 [ 952.914522][T16969] FAT-fs (loop1): Directory bread(block 162) failed [ 952.930626][T16969] FAT-fs (loop1): Directory bread(block 163) failed [ 952.945121][T16969] FAT-fs (loop1): Directory bread(block 164) failed [ 952.953736][T16969] FAT-fs (loop1): Directory bread(block 165) failed [ 952.966707][T16969] FAT-fs (loop1): Directory bread(block 166) failed [ 952.983349][T16969] FAT-fs (loop1): Directory bread(block 167) failed [ 952.990205][T16969] FAT-fs (loop1): Directory bread(block 168) failed [ 953.002128][T16969] FAT-fs (loop1): Directory bread(block 169) failed [ 953.008952][T16969] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 953.030298][ T9] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 953.046070][ T9] usb 1-1: config 0 has no interface number 0 [ 953.070147][ T9] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 953.086978][T16969] FAT-fs (loop1): Directory bread(block 162) failed [ 953.101475][ T9] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 953.121036][T16969] FAT-fs (loop1): Directory bread(block 163) failed [ 953.134982][T16969] syz.1.14296: attempt to access beyond end of device [ 953.134982][T16969] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 953.141251][ T9] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 953.169608][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.178044][ T9] usb 1-1: Product: syz [ 953.188761][ T9] usb 1-1: Manufacturer: syz [ 953.193643][ T9] usb 1-1: SerialNumber: syz [ 953.198694][T16969] syz.1.14296: attempt to access beyond end of device [ 953.198694][T16969] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 953.227406][T16956] loop2: detected capacity change from 0 to 32768 [ 953.238961][ T9] usb 1-1: config 0 descriptor?? [ 953.257028][T16949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 953.264459][T16956] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.14292 (16956) [ 953.267599][ T9] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 953.314510][T16956] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 953.319110][ T9] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 953.381108][T16956] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 953.390169][T16956] BTRFS info (device loop2): enabling ssd optimizations [ 953.432001][T16956] BTRFS info (device loop2): not using ssd optimizations [ 953.439821][T16956] BTRFS info (device loop2): turning off barriers [ 953.490203][T16956] BTRFS info (device loop2): using free space tree [ 953.715539][ T5778] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 953.748884][ T9] usb 1-1: USB disconnect, device number 90 [ 953.786325][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 953.803424][ T9] cyberjack 1-1:0.69: device disconnected [ 954.992967][T17087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 955.915749][T17135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 956.177438][T17112] loop1: detected capacity change from 0 to 32768 [ 956.324859][T17112] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 956.484449][T17175] xt_CT: You must specify a L4 protocol and not use inversions on it [ 956.532942][T17112] XFS (loop1): Ending clean mount [ 956.672845][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 957.044049][T17199] netlink: 260 bytes leftover after parsing attributes in process `syz.2.14360'. [ 957.799381][T17246] loop2: detected capacity change from 0 to 256 [ 957.819365][T17242] netlink: 'syz.1.14374': attribute type 1 has an invalid length. [ 957.861264][T17242] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14374'. [ 958.018286][T17253] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14379'. [ 958.075680][T17253] openvswitch: netlink: Flow key attribute not present in set flow. [ 958.268658][T17272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 958.378229][T17278] loop3: detected capacity change from 0 to 128 [ 958.483074][T17286] 9pnet: Could not find request transport: tcp g]H`+n1oH&TxZ];@fIS\TsVE8Mj&}s$) LtyOԧV2}ʦXKP[: +(w [ 958.486038][T17278] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 958.528962][T17278] hpfs: filesystem error: improperly stopped [ 958.536734][T17278] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 958.550983][T17278] hpfs: You really don't want any checks? You are crazy... [ 958.558793][T17278] hpfs: hpfs_map_sector(): read error [ 958.573269][T17278] hpfs: code page support is disabled [ 958.579310][T17278] hpfs: hpfs_map_4sectors(): unaligned read [ 958.591578][T17278] hpfs: hpfs_map_4sectors(): unaligned read [ 958.597535][T17278] hpfs: filesystem error: unable to find root dir [ 958.700885][T17278] hpfs: hpfs_map_4sectors(): unaligned read [ 958.724374][T17278] hpfs: hpfs_map_sector(): read error [ 958.741102][T17294] netlink: 260 bytes leftover after parsing attributes in process `syz.1.14390'. [ 958.977973][T17308] loop2: detected capacity change from 0 to 256 [ 959.017083][T17314] loop3: detected capacity change from 0 to 16 [ 959.086105][T17314] erofs: (device loop3): mounted with root inode @ nid 36. [ 959.087361][T17308] FAT-fs (loop2): Directory bread(block 64) failed [ 959.127541][T17308] FAT-fs (loop2): Directory bread(block 65) failed [ 959.154288][T17308] FAT-fs (loop2): Directory bread(block 66) failed [ 959.171868][T17308] FAT-fs (loop2): Directory bread(block 67) failed [ 959.180048][T17308] FAT-fs (loop2): Directory bread(block 68) failed [ 959.211112][T17308] FAT-fs (loop2): Directory bread(block 69) failed [ 959.240787][T17308] FAT-fs (loop2): Directory bread(block 70) failed [ 959.249220][T17308] FAT-fs (loop2): Directory bread(block 71) failed [ 959.267353][T17308] FAT-fs (loop2): Directory bread(block 72) failed [ 959.305811][T17308] FAT-fs (loop2): Directory bread(block 73) failed [ 959.745325][T17343] netlink: 260 bytes leftover after parsing attributes in process `syz.3.14403'. [ 959.971710][ T8] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 960.069766][T17362] netlink: 'syz.0.14410': attribute type 1 has an invalid length. [ 960.077979][T17362] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14410'. [ 960.172923][ T8] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 960.191130][ T8] usb 2-1: config 0 has no interface number 0 [ 960.198236][ T8] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 960.221624][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 960.247491][ T8] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.263787][ T8] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 960.290989][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.299497][ T8] usb 2-1: Product: syz [ 960.319437][ T8] usb 2-1: Manufacturer: syz [ 960.335862][ T8] usb 2-1: SerialNumber: syz [ 960.359066][ T8] usb 2-1: config 0 descriptor?? [ 960.365978][T17338] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 960.391856][ T8] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 960.409011][ T8] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 960.440838][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 960.476772][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.511550][ T9] usb 3-1: Product: syz [ 960.515864][ T9] usb 3-1: Manufacturer: syz [ 960.541531][ T9] usb 3-1: SerialNumber: syz [ 960.555210][ T9] usb 3-1: config 0 descriptor?? [ 960.583773][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 960.600998][ T9] hub: probe of 3-1:0.0 failed with error -5 [ 960.607973][ T9] f81232 3-1:0.0: f81534a converter detected [ 960.804064][ T9] usb 3-1: f81534a converter now attached to ttyUSB1 [ 960.887439][ T23] usb 2-1: USB disconnect, device number 80 [ 960.900034][ T23] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 960.923770][ T23] cyberjack 2-1:0.69: device disconnected [ 960.975121][T17387] loop3: detected capacity change from 0 to 32768 [ 961.001298][T17387] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 961.089119][T17387] XFS (loop3): Ending clean mount [ 961.122489][ T9] usb 3-1: USB disconnect, device number 87 [ 961.141894][ T9] f81534a ttyUSB1: f81534a converter now disconnected from ttyUSB1 [ 961.161165][ T9] f81232 3-1:0.0: device disconnected [ 961.194055][ T5777] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 961.494174][T17439] netlink: 'syz.3.14422': attribute type 1 has an invalid length. [ 961.509196][T17439] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14422'. [ 961.842332][T17459] loop2: detected capacity change from 0 to 16 [ 961.860215][T17459] erofs: (device loop2): mounted with root inode @ nid 36. [ 962.446985][ T5773] cgroup: fork rejected by pids controller in /syz0 [ 962.775404][T17523] kAFS: unable to lookup cell '' [ 962.868498][T17491] veth1_vlan (unregistering): left allmulticast mode [ 963.026885][T17491] team0: Port device macvlan1 removed [ 963.053073][T17547] loop3: detected capacity change from 0 to 256 [ 963.377676][T17569] loop1: detected capacity change from 0 to 128 [ 963.426759][T17569] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 963.451896][T17569] hpfs: filesystem error: improperly stopped [ 963.457971][T17569] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 963.494636][T17569] hpfs: You really don't want any checks? You are crazy... [ 963.525023][T17569] hpfs: hpfs_map_sector(): read error [ 963.530468][T17569] hpfs: code page support is disabled [ 963.571332][T17569] hpfs: hpfs_map_4sectors(): unaligned read [ 963.578917][T17569] hpfs: hpfs_map_4sectors(): unaligned read [ 963.595105][T17569] hpfs: filesystem error: unable to find root dir [ 963.641628][T17569] hpfs: hpfs_map_4sectors(): unaligned read [ 963.648140][T17569] hpfs: hpfs_map_sector(): read error [ 963.667374][ T3499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.889430][ T3499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.929244][T17585] futex_wake_op: syz.3.14459 tries to shift op by 144; fix this program [ 963.961784][T17585] futex_wake_op: syz.3.14459 tries to shift op by 144; fix this program [ 964.085068][ T3499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.306817][ T3499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.314837][T17604] loop1: detected capacity change from 0 to 256 [ 964.876277][T11928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 964.897462][T11928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 964.914190][T11928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 964.951122][T11928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 964.959876][T17643] futex_wake_op: syz.2.14471 tries to shift op by 144; fix this program [ 964.976470][T11928] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 964.985534][T11928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 965.059754][T22239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 965.071352][T22239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 965.086330][T22239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 965.089575][T17643] futex_wake_op: syz.2.14471 tries to shift op by 144; fix this program [ 965.112802][T22239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 965.172329][T22239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 965.199778][T22239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 965.639622][T17703] loop2: detected capacity change from 0 to 256 [ 966.227594][T17737] futex_wake_op: syz.1.14487 tries to shift op by 144; fix this program [ 966.254730][T17737] futex_wake_op: syz.1.14487 tries to shift op by 144; fix this program [ 966.297252][T17633] lo speed is unknown, defaulting to 1000 [ 966.369989][ T5777] cgroup: fork rejected by pids controller in /syz3 [ 966.931157][T17633] lo speed is unknown, defaulting to 1000 [ 967.061010][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 967.271549][T22239] Bluetooth: hci1: command tx timeout [ 967.287081][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 967.297633][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.306312][ T9] usb 2-1: Product: syz [ 967.311578][ T9] usb 2-1: Manufacturer: syz [ 967.316607][ T9] usb 2-1: SerialNumber: syz [ 967.323763][ T9] usb 2-1: config 0 descriptor?? [ 967.331131][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 967.337422][ T9] hub: probe of 2-1:0.0 failed with error -5 [ 967.347173][ T9] f81232 2-1:0.0: f81534a converter detected [ 967.561971][ T9] usb 2-1: f81534a converter now attached to ttyUSB0 [ 967.911873][ T9] usb 2-1: USB disconnect, device number 81 [ 967.925663][ T9] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 967.961821][ T9] f81232 2-1:0.0: device disconnected [ 968.444563][T17633] chnl_net:caif_netlink_parms(): no params data found [ 968.763526][T17633] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.770740][T17633] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.795161][T17633] bridge_slave_0: entered allmulticast mode [ 968.808031][T17633] bridge_slave_0: entered promiscuous mode [ 968.837669][T17633] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.857471][T17633] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.866274][T17633] bridge_slave_1: entered allmulticast mode [ 968.880508][T17633] bridge_slave_1: entered promiscuous mode [ 968.999236][T17633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.013439][T17633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.089964][T17633] team0: Port device team_slave_0 added [ 969.150296][T17633] team0: Port device team_slave_1 added [ 969.191734][T17633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.198739][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.226308][T17633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.319082][T17633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.326564][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.352808][ C0] vkms_vblank_simulate: vblank timer overrun [ 969.362609][T22239] Bluetooth: hci1: command tx timeout [ 969.377242][T17633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.633548][T17633] hsr_slave_0: entered promiscuous mode [ 969.648485][T17633] hsr_slave_1: entered promiscuous mode [ 969.654959][T17633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 969.663330][T17633] Cannot create hsr debugfs directory [ 969.715082][ T3499] hsr_slave_0: left promiscuous mode [ 969.735839][ T3499] hsr_slave_1: left promiscuous mode [ 969.752142][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.759854][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.771207][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.778865][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.823320][ T3499] veth1_macvtap: left promiscuous mode [ 969.829920][ T3499] veth0_macvtap: left promiscuous mode [ 969.836468][ T3499] veth1_vlan: left promiscuous mode [ 970.353118][ T3499] bond6 (unregistering): Released all slaves [ 970.738303][ T3499] bond5 (unregistering): Released all slaves [ 970.750582][ T3499] bond4 (unregistering): Released all slaves [ 970.868776][ T3499] bond3 (unregistering): Released all slaves [ 970.886447][ T3499] bond2 (unregistering): Released all slaves [ 971.194373][ C0] vkms_vblank_simulate: vblank timer overrun [ 971.248530][ T3499] bond1 (unregistering): Released all slaves [ 971.441468][T22239] Bluetooth: hci1: command tx timeout [ 972.212860][ T3499] team0 (unregistering): Port device 7 removed [ 972.296030][ T3499] team0 (unregistering): Port device C removed [ 972.374863][ T3499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.452461][ T3499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.064479][ T3499] bond0 (unregistering): Released all slaves [ 973.503572][T22239] Bluetooth: hci1: command tx timeout [ 974.566017][T17633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 974.577788][T17633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 974.589373][T17633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 974.614971][T17633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 974.768753][T17633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.802695][T17633] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.826749][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.833978][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.855091][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.862323][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.240512][T17633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.313030][T17633] veth0_vlan: entered promiscuous mode [ 975.334814][T17633] veth1_vlan: entered promiscuous mode [ 975.391547][T17633] veth0_macvtap: entered promiscuous mode [ 975.404965][T17633] veth1_macvtap: entered promiscuous mode [ 975.427237][T17633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.446628][T17633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.458464][T17633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.467935][T17633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.477978][T17633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.487074][T17633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.611496][T26472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.622795][T26472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.669478][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.702313][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.718370][ T3499] IPVS: stop unused estimator thread 0... [ 976.007646][T18286] futex_wake_op: syz.0.14496 tries to shift op by 144; fix this program [ 976.049114][T18286] futex_wake_op: syz.0.14496 tries to shift op by 144; fix this program [ 976.273440][ T3499] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 976.298937][ T3499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.679445][T11928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 976.696277][T11928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 976.725147][T11928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 976.745459][T11928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 976.753654][T11928] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 976.762924][T11928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 977.014809][ T3499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.064904][T18303] lo speed is unknown, defaulting to 1000 [ 977.076770][T18303] lo speed is unknown, defaulting to 1000 [ 977.128988][ T3499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.272811][ T3499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.034089][T18303] chnl_net:caif_netlink_parms(): no params data found [ 978.559022][T18303] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.577731][T18303] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.589249][T18303] bridge_slave_0: entered allmulticast mode [ 978.597856][T18303] bridge_slave_0: entered promiscuous mode [ 978.606332][T18303] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.614168][T18303] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.624245][T18303] bridge_slave_1: entered allmulticast mode [ 978.631640][T18303] bridge_slave_1: entered promiscuous mode [ 978.728698][T18303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.828682][T18303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.861650][T22239] Bluetooth: hci2: command tx timeout [ 979.020439][T18303] team0: Port device team_slave_0 added [ 979.216714][T18543] loop2: detected capacity change from 0 to 1024 [ 979.256502][T18303] team0: Port device team_slave_1 added [ 979.293655][T18545] netlink: del zone limit has 8 unknown bytes [ 979.471583][T18303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.478688][T18303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.572519][T18303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.904894][T18303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.921077][T18303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.953934][T18303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.101963][T18303] hsr_slave_0: entered promiscuous mode [ 980.109649][T18303] hsr_slave_1: entered promiscuous mode [ 980.119520][T18303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 980.133402][T18303] Cannot create hsr debugfs directory [ 980.164219][ T3499] [ 980.166692][ T3499] ====================================================== [ 980.173838][ T3499] WARNING: possible circular locking dependency detected [ 980.180970][ T3499] syzkaller #0 Not tainted [ 980.185792][ T3499] ------------------------------------------------------ [ 980.194178][ T3499] kworker/u4:9/3499 is trying to acquire lock: [ 980.200693][ T3499] ffff88807b0e4d80 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 980.210302][ T3499] [ 980.210302][ T3499] but task is already holding lock: [ 980.217684][ T3499] ffff88805d278768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 980.228115][ T3499] [ 980.228115][ T3499] which lock already depends on the new lock. [ 980.228115][ T3499] [ 980.238689][ T3499] [ 980.238689][ T3499] the existing dependency chain (in reverse order) is: [ 980.247847][ T3499] [ 980.247847][ T3499] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 980.255606][ T3499] __mutex_lock+0x135/0xc80 [ 980.261438][ T3499] ieee80211_open+0x144/0x200 [ 980.267197][ T3499] __dev_open+0x2cb/0x430 [ 980.272189][ T3499] dev_open+0xab/0x190 [ 980.277060][ T3499] team_add_slave+0x703/0x28a0 [ 980.282630][ T3499] do_setlink+0xcde/0x3f40 [ 980.287589][ T3499] rtnl_newlink+0x1848/0x2170 [ 980.292800][ T3499] rtnetlink_rcv_msg+0x843/0xf90 [ 980.298273][ T3499] netlink_rcv_skb+0x235/0x4c0 [ 980.303584][ T3499] netlink_unicast+0x7b1/0x930 [ 980.308892][ T3499] netlink_sendmsg+0x8d0/0xbf0 [ 980.314714][ T3499] ____sys_sendmsg+0x61b/0x980 [ 980.320004][ T3499] ___sys_sendmsg+0x2a6/0x360 [ 980.325209][ T3499] __se_sys_sendmsg+0x1d0/0x2c0 [ 980.330671][ T3499] do_syscall_64+0x55/0xb0 [ 980.335625][ T3499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 980.342044][ T3499] [ 980.342044][ T3499] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 980.350229][ T3499] __lock_acquire+0x37ef/0x7d80 [ 980.355628][ T3499] lock_acquire+0x19e/0x420 [ 980.360664][ T3499] __mutex_lock+0x135/0xc80 [ 980.365787][ T3499] team_del_slave+0x31/0x1b0 [ 980.370939][ T3499] team_device_event+0x297/0xa30 [ 980.376406][ T3499] notifier_call_chain+0x18f/0x380 [ 980.382049][ T3499] unregister_netdevice_many_notify+0x1037/0x1910 [ 980.388994][ T3499] unregister_netdevice_queue+0x2e9/0x330 [ 980.395238][ T3499] _cfg80211_unregister_wdev+0x16d/0x580 [ 980.401461][ T3499] ieee80211_remove_interfaces+0x4b3/0x690 [ 980.407827][ T3499] ieee80211_unregister_hw+0x5d/0x2a0 [ 980.414103][ T3499] mac80211_hwsim_del_radio+0x289/0x480 [ 980.420184][ T3499] hwsim_exit_net+0x58d/0x650 [ 980.425482][ T3499] cleanup_net+0x707/0xbb0 [ 980.430432][ T3499] process_scheduled_works+0xa60/0x1600 [ 980.436500][ T3499] worker_thread+0xa5e/0xfe0 [ 980.441620][ T3499] kthread+0x2fa/0x390 [ 980.446209][ T3499] ret_from_fork+0x48/0x80 [ 980.451161][ T3499] ret_from_fork_asm+0x11/0x20 [ 980.456520][ T3499] [ 980.456520][ T3499] other info that might help us debug this: [ 980.456520][ T3499] [ 980.466844][ T3499] Possible unsafe locking scenario: [ 980.466844][ T3499] [ 980.474289][ T3499] CPU0 CPU1 [ 980.479653][ T3499] ---- ---- [ 980.485029][ T3499] lock(&rdev->wiphy.mtx); [ 980.489561][ T3499] lock(team->team_lock_key#2); [ 980.497033][ T3499] lock(&rdev->wiphy.mtx); [ 980.504530][ T3499] lock(team->team_lock_key#2); [ 980.509477][ T3499] [ 980.509477][ T3499] *** DEADLOCK *** [ 980.509477][ T3499] [ 980.517804][ T3499] 5 locks held by kworker/u4:9/3499: [ 980.523084][ T3499] #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 980.534135][ T3499] #1: ffffc9000d347d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 980.544665][ T3499] #2: ffffffff8e3ca0d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 980.554061][ T3499] #3: ffffffff8e3d70c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 980.563911][ T3499] #4: ffff88805d278768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 980.574807][ T3499] [ 980.574807][ T3499] stack backtrace: [ 980.580969][ T3499] CPU: 1 PID: 3499 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 980.589791][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 980.600587][ T3499] Workqueue: netns cleanup_net [ 980.605868][ T3499] Call Trace: [ 980.609518][ T3499] [ 980.612826][ T3499] dump_stack_lvl+0x18c/0x250 [ 980.617679][ T3499] ? load_image+0x420/0x420 [ 980.622323][ T3499] ? show_regs_print_info+0x20/0x20 [ 980.627638][ T3499] ? print_circular_bug+0x12b/0x1a0 [ 980.633643][ T3499] check_noncircular+0x2fc/0x400 [ 980.638773][ T3499] ? print_deadlock_bug+0x5d0/0x5d0 [ 980.644105][ T3499] ? lockdep_lock+0xf5/0x230 [ 980.648715][ T3499] ? _find_first_zero_bit+0xd6/0x100 [ 980.654982][ T3499] __lock_acquire+0x37ef/0x7d80 [ 980.660651][ T3499] ? verify_lock_unused+0x140/0x140 [ 980.666173][ T3499] ? verify_lock_unused+0x140/0x140 [ 980.672200][ T3499] ? __up_read+0x2b8/0x6b0 [ 980.676649][ T3499] lock_acquire+0x19e/0x420 [ 980.682763][ T3499] ? team_del_slave+0x31/0x1b0 [ 980.687808][ T3499] ? __might_sleep+0xe0/0xe0 [ 980.692441][ T3499] ? read_lock_is_recursive+0x20/0x20 [ 980.697823][ T3499] __mutex_lock+0x135/0xc80 [ 980.702356][ T3499] ? team_del_slave+0x31/0x1b0 [ 980.707135][ T3499] ? __mutex_lock+0x30d/0xc80 [ 980.712175][ T3499] ? team_del_slave+0x31/0x1b0 [ 980.716952][ T3499] ? mutex_lock_nested+0x20/0x20 [ 980.721957][ T3499] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 980.727747][ T3499] team_del_slave+0x31/0x1b0 [ 980.732469][ T3499] team_device_event+0x297/0xa30 [ 980.737547][ T3499] notifier_call_chain+0x18f/0x380 [ 980.742938][ T3499] unregister_netdevice_many_notify+0x1037/0x1910 [ 980.749670][ T3499] ? unregister_netdevice_many+0x20/0x20 [ 980.755424][ T3499] ? kernfs_remove_by_name_ns+0x117/0x150 [ 980.761206][ T3499] ? __lock_acquire+0x7d80/0x7d80 [ 980.766565][ T3499] unregister_netdevice_queue+0x2e9/0x330 [ 980.772740][ T3499] ? list_netdevice+0x730/0x730 [ 980.777594][ T3499] ? kernfs_remove_by_name_ns+0x117/0x150 [ 980.783478][ T3499] _cfg80211_unregister_wdev+0x16d/0x580 [ 980.789156][ T3499] ieee80211_remove_interfaces+0x4b3/0x690 [ 980.795564][ T3499] ? ieee80211_do_stop+0x2000/0x2000 [ 980.800863][ T3499] ? rcu_is_watching+0x15/0xb0 [ 980.805842][ T3499] ieee80211_unregister_hw+0x5d/0x2a0 [ 980.811239][ T3499] mac80211_hwsim_del_radio+0x289/0x480 [ 980.817319][ T3499] ? rhashtable_remove_fast+0xc00/0xc00 [ 980.822914][ T3499] hwsim_exit_net+0x58d/0x650 [ 980.827709][ T3499] ? hwsim_init_net+0x90/0x90 [ 980.832415][ T3499] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 980.838304][ T3499] cleanup_net+0x707/0xbb0 [ 980.843010][ T3499] ? ops_free_list+0x3b0/0x3b0 [ 980.847933][ T3499] ? _raw_spin_unlock_irq+0x23/0x50 [ 980.853142][ T3499] ? process_scheduled_works+0x975/0x1600 [ 980.859143][ T3499] ? process_scheduled_works+0x975/0x1600 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 980.864888][ T3499] process_scheduled_works+0xa60/0x1600 [ 980.870475][ T3499] ? worker_attach_to_pool+0x370/0x370 [ 980.875937][ T3499] ? assign_work+0x3cc/0x5d0 [ 980.880527][ T3499] worker_thread+0xa5e/0xfe0 [ 980.885121][ T3499] kthread+0x2fa/0x390 [ 980.889275][ T3499] ? pr_cont_work+0x550/0x550 [ 980.894512][ T3499] ? kthread_blkcg+0xd0/0xd0 [ 980.899336][ T3499] ret_from_fork+0x48/0x80 [ 980.903804][ T3499] ? kthread_blkcg+0xd0/0xd0 [ 980.908419][ T3499] ret_from_fork_asm+0x11/0x20 [ 980.913189][ T3499] [ 980.950678][T22239] Bluetooth: hci2: command tx timeout [ 981.038733][ T3499] team0: Port device wlan1 removed [ 981.829247][ T3499] hsr_slave_0: left promiscuous mode [ 981.850719][ T3499] hsr_slave_1: left promiscuous mode [ 981.884895][ T3499] bond0: left allmulticast mode [ 981.901271][ T3499] bond0: left promiscuous mode [ 981.906525][ T3499] bridge0: port 3(bond0) entered disabled state [ 981.922378][ T3499] bridge_slave_1: left allmulticast mode [ 981.928163][ T3499] bridge_slave_1: left promiscuous mode [ 981.945176][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.979659][ T3499] veth0_macvtap: left allmulticast mode [ 981.996417][ T3499] veth0_macvtap: left promiscuous mode [ 982.003988][ T3499] veth0_vlan: left promiscuous mode [ 982.524061][ T3499] bond7 (unregistering): Released all slaves [ 982.536334][ T3499] bond6 (unregistering): Released all slaves [ 982.547404][ T3499] bond5 (unregistering): Released all slaves [ 982.827255][ T3499] bond4 (unregistering): Released all slaves [ 983.404989][ T3499] bond3 (unregistering): Released all slaves [ 983.672987][ T3499] bond2 (unregistering): Released all slaves [ 983.922048][ T3499] bond1 (unregistering): Released all slaves [ 984.486135][ T3499] team0 (unregistering): Port device team_slave_1 removed [ 984.532062][ T3499] team0 (unregistering): Port device team_slave_0 removed [ 984.958412][ T3499] bond0 (unregistering): Released all slaves [ 985.405644][ T3499] IPVS: stop unused estimator thread 0... [ 985.484767][ T1127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.497103][ T1127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50062 - 0 [ 985.518266][ T1127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 55300 - 0 [ 985.586794][ T1127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.598676][ T1127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50062 - 0 [ 985.610162][ T1127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 55300 - 0 [ 985.670467][ T1127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.682205][ T1127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50062 - 0 [ 985.694526][ T1127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 55300 - 0 [ 985.764273][ T1127] netdevsim netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.777137][ T1127] netdevsim netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50062 - 0 [ 985.787621][ T1127] netdevsim netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 55300 - 0 [ 985.907343][ T1127] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.958194][ T1127] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.033868][ T1127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.086963][ T1127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.223158][ T1127] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.313019][ T1127] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.391998][ T1127] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.460529][ T1127] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.388558][ T1127] hsr_slave_0: left promiscuous mode [ 989.394437][ T1127] 0: left promiscuous mode [ 989.400099][ T1127] bridge_slave_1: left allmulticast mode [ 989.405966][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.423482][ T1127] bridge_slave_0: left allmulticast mode [ 989.429418][ T1127] bridge_slave_0: left promiscuous mode [ 989.435380][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.443971][ T1127] hsr_slave_0: left promiscuous mode [ 989.450152][ T1127] hsr_slave_1: left promiscuous mode [ 989.462192][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.470446][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.479963][ T1127] bridge_slave_1: left allmulticast mode [ 989.487029][ T1127] bridge_slave_1: left promiscuous mode [ 989.492808][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.501125][ T1127] bridge_slave_0: left allmulticast mode [ 989.507402][ T1127] bridge_slave_0: left promiscuous mode [ 989.513291][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.524020][ T1127] hsr_slave_0: left promiscuous mode [ 989.530111][ T1127] hsr_slave_1: left promiscuous mode [ 989.536165][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.544099][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.552259][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.559717][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.567358][ T1127] bridge_slave_1: left allmulticast mode [ 989.574025][ T1127] bridge_slave_1: left promiscuous mode [ 989.579731][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.588113][ T1127] bridge_slave_0: left allmulticast mode [ 989.595538][ T1127] bridge_slave_0: left promiscuous mode [ 989.601753][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.614679][ T1127] hsr_slave_0: left promiscuous mode [ 989.620842][ T1127] hsr_slave_1: left promiscuous mode [ 989.630281][ T1127] veth0_macvtap: left promiscuous mode [ 989.637445][ T1127] veth1_macvtap: left promiscuous mode [ 989.643292][ T1127] veth0_macvtap: left promiscuous mode [ 989.757829][ T1127] infiniband syz1: set down [ 990.008318][ T1127] bond6 (unregistering): Released all slaves