last executing test programs: 5m12.881014922s ago: executing program 0 (id=14331): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x40080, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x12d432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x100e, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x5, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x0, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x2, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0x4, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0xfffffffe, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe8, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x9, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x5, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5m12.747505053s ago: executing program 0 (id=14334): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x5, 0x6, 0x80000001, 0x9, 0x18, "586491b3b9de616af5d507cc50e64037bafd05"}) 5m12.46130224s ago: executing program 0 (id=14339): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x200080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404d808}, 0x80) 5m12.14284104s ago: executing program 0 (id=14347): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$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") mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@size={'size', 0x3d, [0x6b]}}]}) 5m11.973595579s ago: executing program 0 (id=14351): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8020, 0x0) sendmsg$802154_dgram(r0, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 5m11.37474695s ago: executing program 0 (id=14362): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x7, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "84653375"}, 0xffb, 0x2, {&(0x7f0000000140)=[{0x0, 0x6, {0x0}, 0xa}, {0x9fb, 0xd3, {0x0}, 0xfff}]}}) 5m10.838108601s ago: executing program 32 (id=14362): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x7, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "84653375"}, 0xffb, 0x2, {&(0x7f0000000140)=[{0x0, 0x6, {0x0}, 0xa}, {0x9fb, 0xd3, {0x0}, 0xfff}]}}) 4m13.559635651s ago: executing program 4 (id=15374): creat(&(0x7f0000001380)='./file0\x00', 0x4) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) 4m12.30881905s ago: executing program 4 (id=15393): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x5) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) 4m11.34471033s ago: executing program 4 (id=15412): write$binfmt_script(0xffffffffffffffff, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000012b00), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x90009427, &(0x7f0000012b80)=0x1) 4m11.278336111s ago: executing program 4 (id=15413): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 4m11.213156912s ago: executing program 4 (id=15414): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000e40)={r1, 0x0, 0x0, 0x0, 0x0}) 4m10.896431846s ago: executing program 4 (id=15415): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) 4m10.567267103s ago: executing program 33 (id=15415): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) 2m25.536142325s ago: executing program 1 (id=17521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) 2m25.410913277s ago: executing program 1 (id=17525): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x5, 0x73, 0xffe00003}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e003303"], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x40040000) 2m25.334553771s ago: executing program 1 (id=17526): r0 = socket$kcm(0x10, 0x2, 0x4) setreuid(0x0, 0xee00) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m25.256798815s ago: executing program 1 (id=17528): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4bfb, 0x0) 2m25.136688352s ago: executing program 1 (id=17531): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) 2m25.050813386s ago: executing program 1 (id=17534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000240), 0x0}, 0x20) 2m23.755962464s ago: executing program 2 (id=17551): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a0069ae26bd7000000000001c"], 0x30}}, 0x0) 2m23.575620335s ago: executing program 2 (id=17553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @empty, @mcast1, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r1}) 2m23.379308022s ago: executing program 2 (id=17556): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) 2m23.312603899s ago: executing program 2 (id=17559): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x12, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000003700)="$eJzs209sFNUfAPDvbHdpCz9+9McPURB1EY2NxhYKCgcvGE08YGLEgx6bthCkUENrIoRISQweDYl349GrB6/qzXgy8YpHE0NCDBfA05rZnWn3b2nLtgvs55Ns+97sm3nvu/Pe7Nt5uwH0rXL6J4n4T0TciIgdtWxjgXLt393bl6fu3b48FYuVysm/k2q5O2k+k++3LcuMFiIKXyRNB6yZv3jp7OTs7MyFLD++cO6T8fmLl149c27y9MzpmfMTx44dOXzo6OsTr609qDb1pXHd2fv53L4973x0/d2pYr59KPtfH0e3lKPcrilVL3a7sh7bXpdOij1sCGsyEBHp6SpVx/+OGAgnD/pFpVKpDHZ+erHS7GrLFuCRlUSvWwD0Rv5Gn37+zR+bNPV4KNw6XvsAlMZ9N3vUnilGIStTavp8m1vsQv1DEfHh4j/fpI/YoPsQAAD1fjqezwQb5n+XD0TE7rpy/83WUEYi4n8RsTMi/h8RuyLiiazskxHxVNPxyxFRWaH+clO+df5TuPmgMa4knf+9ka1tNc7/8tlfjAxkue0R+YR55mD2moxGafDUmdmZQ/UHTRrXoH5+6/evOtVfrpv/pY+0/nwumLXjZrHpBt305MLkAweeuTUasbfYHH9STAOorQQMV//uiYi9azjuSF36zMvf7VvKlBrLtY+/ZdWsUt2ypWlrF5YqKt9GvFQ7/4vRcP6X25CsvD45PhSzMwfH015wsG0dv/527b1O9d/3/P/wZ/Mubx/98eSDhr3k1tWIrXX9P/L12+X4R5KIZGm9dn7tdVz748uOn2lW1/+vNOyT9v8tyQfVdN4lPptcWLhwKGJLcqJ1+8Tyvnk+L5/GP3qg/fjfme2TvhJPR0TaiZ+JiGcj4rms7fsj4vmIOLBC/L+8+cLH649/Y6XxT7e9/jWc/+X1+vkTeeLiahMDZ/ffuNfh4rG683+kmhrNtrS//iUNF43VNrALLyEAAAA89ApR/e5/YWwpXSiMjdXuAe2KrYXZufmFV07NfXp+uvYbgZEoFfI7XbX7waUkv/85UpefaMofzu4bfz0wXM2PTc3NTvc6eOhz26pjPmkZ/6m/BnrdOmDD+ckP9K+2479uOW339U1sDLCpvP9D/6ob/51+07LomzLweGr//l/a9HYAm6/d+L+yjn2AR0vFWIa+ZvxD/yrG+0vpworlgMeNcQ19afW/4l9PojLY/qmhaC0cQxvTjOE2dfUkkc6selL78Hr2yr/+1bFMFO53nGJDHxuM1jID0ZNzcXp31zt/JfuufLeb+v3K4zSfrm/AC7W51yEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICN8m8AAAD//2+z1xU=") syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 2m22.907204513s ago: executing program 2 (id=17566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m22.471187034s ago: executing program 2 (id=17569): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 2m21.887329091s ago: executing program 34 (id=17569): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 2m10.840298817s ago: executing program 35 (id=17534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000240), 0x0}, 0x20) 3.676659372s ago: executing program 7 (id=20130): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x2, 0x4046040) 3.531311528s ago: executing program 7 (id=20124): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 2.626494585s ago: executing program 7 (id=20149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x15}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 2.487323301s ago: executing program 7 (id=20152): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x0, 0xd2fd}) 2.442131908s ago: executing program 3 (id=20155): unshare(0x26020480) r0 = syz_open_dev$sndctrl(&(0x7f0000001a80), 0x0, 0x684580) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000eff000/0x4000)=nil, &(0x7f0000ce5000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 2.385948896s ago: executing program 7 (id=20157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000000000000000005000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 2.293507959s ago: executing program 3 (id=20159): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno', 0x4) 2.233994084s ago: executing program 7 (id=20170): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x40, 0x27, 0x74, {0x74, 0x22, "945b1c9f59d924432622c32d284a12ac55928391488ac7cee6ad57bab9ea658f18d64b1b422e213b2bd475f911eb887066344c1e9bf35134d77fd16d27a6680aff36b812419fdb72bf1d4eaf7cf5c251baca0405f5b8ce1cf5e2112751437d277100ebc2145d7e5c0894e8583c8def025291"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.129136867s ago: executing program 8 (id=20163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x48) 2.034948001s ago: executing program 8 (id=20165): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x1, 0x1000}) 1.976594821s ago: executing program 8 (id=20166): unshare(0x22020400) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000200)) 1.863016372s ago: executing program 8 (id=20169): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) 1.048957185s ago: executing program 8 (id=20174): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000002580)=@ocfs2={0xc, 0xfe, {0x3, 0x0, 0x7}}, 0x0) 1.048598119s ago: executing program 3 (id=20175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x3f03d7159c5ebeb1}, 0x44000) 987.357256ms ago: executing program 5 (id=20176): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 831.184234ms ago: executing program 3 (id=20177): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 830.817785ms ago: executing program 5 (id=20178): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) 822.667587ms ago: executing program 8 (id=20187): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0xa, "90"}, @global=@item_012={0x1, 0x1, 0x5, '\"'}, @global]}}, 0x0}, 0x0) 690.590005ms ago: executing program 6 (id=20180): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) 647.284789ms ago: executing program 5 (id=20181): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x2813, r1, 0x2000) 451.646432ms ago: executing program 5 (id=20182): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) fanotify_mark(r1, 0x9, 0x40001030, r1, 0x0) 451.531585ms ago: executing program 6 (id=20183): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 385.164523ms ago: executing program 5 (id=20184): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) 275.248213ms ago: executing program 5 (id=20185): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) 267.222529ms ago: executing program 6 (id=20186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf253100000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 202.643237ms ago: executing program 3 (id=20188): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000002580)=@ocfs2={0xc, 0xfe, {0x3, 0x0, 0x7}}, 0x0) 164.914152ms ago: executing program 6 (id=20189): unshare(0x20000400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000100)={0x0, 0x16, 0x0, 0x0}}, 0x10) 72.027285ms ago: executing program 3 (id=20190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 23.25127ms ago: executing program 6 (id=20191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 6 (id=20192): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0xa, 0x0) bind$inet(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 112.813535][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17568'. [ 1112.870275][T30102] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1113.058552][T30102] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1113.092401][T30102] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1113.117626][T30102] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.140353][T30102] usb 6-1: config 220 has no interface number 2 [ 1113.146717][T30102] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1113.185591][T30102] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1113.192521][T30102] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1113.223482][T30102] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1113.254068][T30102] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1113.288122][T30102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.296185][T30102] usb 6-1: Product: syz [ 1113.315837][T30102] usb 6-1: Manufacturer: syz [ 1113.325245][T30102] usb 6-1: SerialNumber: syz [ 1113.547105][T30102] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1113.558020][T30102] uvcvideo 6-1:220.0: No valid video chain found. [ 1113.564640][T30102] usb 6-1: selecting invalid altsetting 0 [ 1113.615438][T30102] usb 6-1: selecting invalid altsetting 0 [ 1113.621782][T30102] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1113.655238][T30322] hid-generic 0008:0006:0007.0059: unknown main item tag 0x0 [ 1113.666617][T30102] usb 6-1: USB disconnect, device number 25 [ 1113.684111][T30322] hid-generic 0008:0006:0007.0059: unknown main item tag 0x0 [ 1113.699561][T30322] hid-generic 0008:0006:0007.0059: unknown main item tag 0x0 [ 1113.738246][T30322] hid-generic 0008:0006:0007.0059: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1113.857965][T20231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17572'. [ 1114.449420][ T9971] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1114.461411][ T9971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1114.472176][ T9971] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1114.483109][ T9971] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1114.491974][ T9971] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1114.606998][T20250] loop6: detected capacity change from 0 to 4096 [ 1114.641713][T20250] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1114.657177][ T12] team0: Port device geneve0 removed [ 1114.704936][T20250] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1115.066331][ T12] team0: Port device bridge0 removed [ 1115.155257][T13736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1115.346935][T20267] netlink: 'syz.3.17584': attribute type 1 has an invalid length. [ 1115.358345][T20267] netlink: 140 bytes leftover after parsing attributes in process `syz.3.17584'. [ 1115.367579][T20267] netlink: 96 bytes leftover after parsing attributes in process `syz.3.17584'. [ 1115.678166][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.706925][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.739728][ T12] bond0 (unregistering): (slave bond6): Releasing backup interface [ 1115.750028][T25554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1115.781328][ T12] bond0 (unregistering): Released all slaves [ 1115.828868][ T12] bond1 (unregistering): Released all slaves [ 1115.884730][ T12] bond2 (unregistering): Released all slaves [ 1116.419934][T16461] Bluetooth: hci0: command tx timeout [ 1117.299197][ T12] bond3 (unregistering): Released all slaves [ 1117.480999][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1117.481048][ T30] audit: type=1326 audit(2000000923.284:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20307 comm="syz.3.17604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccbf38eec9 code=0x0 [ 1117.757636][ T12] bond4 (unregistering): Released all slaves [ 1117.778973][ T12] bond5 (unregistering): Released all slaves [ 1118.038011][ T12] bond6 (unregistering): Released all slaves [ 1118.065823][T20238] netlink: 'syz.5.17575': attribute type 29 has an invalid length. [ 1118.367645][T16461] Bluetooth: hci0: command tx timeout [ 1118.878234][T20352] xt_policy: neither incoming nor outgoing policy selected [ 1118.908417][T20355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17620'. [ 1119.002065][ T89] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1119.178967][ T89] usb 4-1: Using ep0 maxpacket: 16 [ 1119.201866][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.272642][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.333513][ T89] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1119.364948][ T30] audit: type=1326 audit(2000000925.301:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.5.17624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1119.388045][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.415598][ T89] usb 4-1: config 0 descriptor?? [ 1119.447411][ T30] audit: type=1326 audit(2000000925.301:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.5.17624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1119.492256][ T30] audit: type=1326 audit(2000000925.323:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.5.17624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1119.517426][ T30] audit: type=1326 audit(2000000925.323:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.5.17624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1119.554409][ T30] audit: type=1326 audit(2000000925.323:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.5.17624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1119.581736][ T30] audit: type=1326 audit(2000000925.323:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.5.17624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1119.620351][T20247] chnl_net:caif_netlink_parms(): no params data found [ 1119.649073][ T30] audit: type=1326 audit(2000000925.323:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.5.17624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1119.840020][ T89] magicmouse 0003:05AC:0324.005A: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 1119.969557][T20247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.987505][T20247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.001929][T20247] bridge_slave_0: entered allmulticast mode [ 1120.011732][T20247] bridge_slave_0: entered promiscuous mode [ 1120.034997][T30322] usb 4-1: USB disconnect, device number 57 [ 1120.071481][T20247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.095470][T20247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.103428][T20247] bridge_slave_1: entered allmulticast mode [ 1120.111941][T20247] bridge_slave_1: entered promiscuous mode [ 1120.257520][T20247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.283238][T20247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.297529][T16461] Bluetooth: hci0: command tx timeout [ 1120.531226][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1120.573002][T20247] team0: Port device team_slave_0 added [ 1120.599550][T20247] team0: Port device team_slave_1 added [ 1120.769291][T20247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.782500][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.841271][T20247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.876871][T20651] binder: 20650:20651 ioctl c018620c 200000000380 returned -22 [ 1120.919189][T20247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.940027][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.956035][T20653] loop5: detected capacity change from 0 to 128 [ 1120.965989][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.005530][T20247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.119850][T25554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1121.312861][ T12] hsr_slave_0: left promiscuous mode [ 1121.330995][ T12] hsr_slave_1: left promiscuous mode [ 1121.339661][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.348831][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.359429][ T12] veth0_vlan: left promiscuous mode [ 1122.181818][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1122.246734][T16461] Bluetooth: hci0: command tx timeout [ 1122.324978][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1123.181827][T20710] program syz.6.17650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1123.750409][T20247] hsr_slave_0: entered promiscuous mode [ 1123.758904][T20247] hsr_slave_1: entered promiscuous mode [ 1123.782952][T20683] veth1_to_batadv: entered promiscuous mode [ 1123.794374][T20683] veth1_to_batadv: left promiscuous mode [ 1124.021724][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17659'. [ 1124.355410][T20790] netlink: 92 bytes leftover after parsing attributes in process `syz.3.17664'. [ 1124.833978][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17669'. [ 1124.870365][T20247] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1124.946074][T20247] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1125.000063][T20247] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1125.047858][T20247] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1125.431054][T20247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.495145][T20247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.537107][ T9971] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1125.551324][ T9971] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1125.560239][ T9971] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1125.574548][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.576412][ T9971] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1125.581744][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.625823][ T9971] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1125.678812][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.686098][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.848240][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17685'. [ 1125.858118][T20876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17685'. [ 1125.861583][T12870] syz_tun (unregistering): left allmulticast mode [ 1125.874885][T12870] bridge0: port 1(syz_tun) entered disabled state [ 1125.893408][T13736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1125.906218][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1126.104749][T20889] futex_wake_op: syz.5.17689 tries to shift op by 36; fix this program [ 1126.296764][ T79] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.322095][ T79] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.393699][T20899] loop6: detected capacity change from 0 to 512 [ 1126.437457][T20899] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1126.479490][T20899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 1126.556741][T20899] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1126.592289][T20899] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.17694: bad orphan inode 267 [ 1126.626355][ T79] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.651047][T20899] EXT4-fs (loop6): Remounting filesystem read-only [ 1126.660100][ T79] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.686286][T20899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1126.723599][T20909] tipc: Bearer : already 2 bearers with priority 10 [ 1126.732392][T20909] tipc: Bearer : trying with adjusted priority [ 1126.748622][T20909] tipc: Enabling of bearer rejected, failed to enable media [ 1126.769297][T20899] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.17694: dx entry: limit 0 != root limit 125 [ 1126.823050][T20899] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.17694: Corrupt directory, running e2fsck is recommended [ 1126.847492][ T79] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.877091][ T79] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.929449][T13526] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1126.972386][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1127.073831][ T79] bond0: (slave netdevsim0): Releasing backup interface [ 1127.168724][ T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.187851][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1127.212727][ T9] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 1127.233582][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.267145][ T9] usb 6-1: config 0 descriptor?? [ 1127.278765][T20942] netlink: 47 bytes leftover after parsing attributes in process `syz.3.17705'. [ 1127.323683][T20942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17705'. [ 1127.614943][T16461] Bluetooth: hci5: command tx timeout [ 1127.710647][ T9] hid-corsair-void 0003:1B1C:1B29.005B: hidraw0: USB HID v10.00 Device [HID 1b1c:1b29] on usb-dummy_hcd.5-1/input0 [ 1127.744423][ T5997] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1127.785176][T20247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.898136][T30322] usb 6-1: USB disconnect, device number 26 [ 1127.922082][ T5997] usb 4-1: Using ep0 maxpacket: 16 [ 1127.954265][ T5997] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1127.976366][ T5997] usb 4-1: config 0 has no interface number 0 [ 1127.995023][ T5997] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1128.019006][ T5997] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1128.041850][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.063821][ T5997] usb 4-1: Product: syz [ 1128.068141][ T5997] usb 4-1: Manufacturer: syz [ 1128.081297][ T5997] usb 4-1: SerialNumber: syz [ 1128.100629][ T5997] usb 4-1: config 0 descriptor?? [ 1128.125486][ T5997] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 1128.824991][ T5943] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1128.994990][ T5943] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1129.008652][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.020080][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1628, setting to 1024 [ 1129.031111][ T5943] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 1129.050033][ T5943] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1129.059258][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.078814][ T5943] usb 6-1: config 0 descriptor?? [ 1129.084836][T21087] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1129.126030][ T79] bond0 (unregistering): Released all slaves [ 1129.141181][ T79] bond1 (unregistering): Released all slaves [ 1129.346341][ T79] bond2 (unregistering): left promiscuous mode [ 1129.352657][ T79] bond2 (unregistering): left allmulticast mode [ 1129.360608][ T79] team0: Port device bond2 removed [ 1129.367699][ T79] bond2 (unregistering): Released all slaves [ 1129.391939][T20857] chnl_net:caif_netlink_parms(): no params data found [ 1129.425422][ T9] usb 4-1: USB disconnect, device number 58 [ 1129.507431][ T5943] waterforce 0003:1044:7A4D.005C: hidraw0: USB HID v0.08 Device [HID 1044:7a4d] on usb-dummy_hcd.5-1/input0 [ 1129.552125][T16461] Bluetooth: hci5: command tx timeout [ 1129.619767][ T5943] waterforce 0003:1044:7A4D.005C: fw version request failed with -71 [ 1129.626616][ T79] tipc: Disabling bearer [ 1129.633678][ T79] tipc: Left network mode [ 1129.734713][T30322] usb 6-1: USB disconnect, device number 27 [ 1129.841481][T20857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.863202][T20857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.871140][T20857] bridge_slave_0: entered allmulticast mode [ 1129.880463][T20857] bridge_slave_0: entered promiscuous mode [ 1129.901722][T20857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.909848][T20857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.917923][T20857] bridge_slave_1: entered allmulticast mode [ 1129.926196][T20857] bridge_slave_1: entered promiscuous mode [ 1130.033836][T20857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.076044][T20857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.202453][T20857] team0: Port device team_slave_0 added [ 1130.212416][T20857] team0: Port device team_slave_1 added [ 1130.428455][T20857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.435695][T20857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.448278][T21280] netlink: 'syz.3.17723': attribute type 4 has an invalid length. [ 1130.465560][T20857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.473012][T21280] netlink: 17 bytes leftover after parsing attributes in process `syz.3.17723'. [ 1130.484720][T20857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.499359][T20857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.527285][T20857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.679902][T13736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1130.889315][T20857] hsr_slave_0: entered promiscuous mode [ 1130.947681][T20857] hsr_slave_1: entered promiscuous mode [ 1130.972433][T20857] debugfs: 'hsr0' already exists in 'hsr' [ 1130.978301][T20857] Cannot create hsr debugfs directory [ 1131.069328][T20247] veth0_vlan: entered promiscuous mode [ 1131.212747][ T79] hsr_slave_0: left promiscuous mode [ 1131.219239][ T79] hsr_slave_1: left promiscuous mode [ 1131.258922][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1131.263423][ T79] veth1_macvtap: left promiscuous mode [ 1131.280263][ T79] veth0_macvtap: left promiscuous mode [ 1131.289590][ T79] veth1_vlan: left promiscuous mode [ 1131.295462][ T79] veth0_vlan: left promiscuous mode [ 1131.481658][T16461] Bluetooth: hci5: command tx timeout [ 1131.616709][T21358] netlink: 52 bytes leftover after parsing attributes in process `syz.5.17739'. [ 1131.626233][T21358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17739'. [ 1131.745816][T21362] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17740'. [ 1133.065053][T20247] veth1_vlan: entered promiscuous mode [ 1133.290615][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17747'. [ 1133.381851][T20247] veth0_macvtap: entered promiscuous mode [ 1133.415085][T20247] veth1_macvtap: entered promiscuous mode [ 1133.420795][T16461] Bluetooth: hci5: command tx timeout [ 1133.435248][ T79] IPVS: stop unused estimator thread 0... [ 1133.436527][T21432] netlink: 'syz.5.17749': attribute type 1 has an invalid length. [ 1133.546430][T20247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.628162][T20247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.651588][T20857] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1133.683360][T20857] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1133.714631][T25554] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.738942][T25554] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.757253][T20857] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1133.771322][T25554] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.820313][T20857] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1133.840027][T25554] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.059207][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.071120][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.289589][T21479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1134.337974][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.363891][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.452184][T20857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.521867][T20857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.566720][T21492] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1134.603874][T21492] macsec1: entered allmulticast mode [ 1134.632464][T21492] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1134.656651][T21492] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1134.679256][T21492] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1134.751555][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.758845][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.803083][T25554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.810381][T25554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.981817][T21517] netlink: 64 bytes leftover after parsing attributes in process `syz.6.17773'. [ 1135.372660][T16461] Bluetooth: hci5: command tx timeout [ 1135.413909][T20857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.435417][ T984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1135.668602][T21555] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1135.834393][ T30] audit: type=1326 audit(2000000942.972:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21562 comm="syz.6.17790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1135.919414][ T30] audit: type=1326 audit(2000000942.972:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21562 comm="syz.6.17790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1135.986596][ T30] audit: type=1326 audit(2000000943.036:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21562 comm="syz.6.17790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1136.031051][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1136.081781][ T30] audit: type=1326 audit(2000000943.036:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21562 comm="syz.6.17790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1136.147223][ T30] audit: type=1326 audit(2000000943.036:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21562 comm="syz.6.17790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1136.239936][T20857] veth0_vlan: entered promiscuous mode [ 1136.251087][ T30] audit: type=1326 audit(2000000943.058:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21562 comm="syz.6.17790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1136.272880][T20857] veth1_vlan: entered promiscuous mode [ 1136.334830][ T30] audit: type=1326 audit(2000000943.058:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21562 comm="syz.6.17790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1136.377052][T21581] vivid-001: disconnect [ 1136.382513][T21580] vivid-001: reconnect [ 1136.411571][T20857] veth0_macvtap: entered promiscuous mode [ 1136.436753][T20857] veth1_macvtap: entered promiscuous mode [ 1136.440200][ T30] audit: type=1326 audit(2000000943.069:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21562 comm="syz.6.17790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1136.503559][T20857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.550199][T20857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.591940][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.607524][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.629476][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1136.665938][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.702027][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.919156][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.932877][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.013700][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.025939][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.145037][T21613] netlink: 'syz.3.17806': attribute type 1 has an invalid length. [ 1137.157635][T21613] netlink: 148 bytes leftover after parsing attributes in process `syz.3.17806'. [ 1137.789056][T21651] netlink: 'syz.6.17823': attribute type 3 has an invalid length. [ 1137.853880][T21656] mkiss: ax0: crc mode is auto. [ 1138.590726][T21715] netlink: 'syz.3.17848': attribute type 6 has an invalid length. [ 1139.381040][T21768] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.17867'. [ 1139.400424][T21763] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.17867'. [ 1139.674807][T21784] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17876'. [ 1139.834122][ T984] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1140.014449][ T984] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1140.027185][ T984] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1140.038673][ T984] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1140.052601][ T984] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1140.064393][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.077976][T21777] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1140.734393][T21829] bridge_slave_0: default FDB implementation only supports local addresses [ 1140.850403][ T984] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1140.869332][ T984] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input115 [ 1140.906199][ T984] usb 4-1: USB disconnect, device number 59 [ 1140.906288][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1141.398866][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1141.745124][T21887] tmpfs: User quota inode hardlimit too large. [ 1142.001736][ T1013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1142.463270][T21921] netlink: 'syz.7.17929': attribute type 2 has an invalid length. [ 1142.954466][T21955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17944'. [ 1142.960091][T21950] macvlan2: entered promiscuous mode [ 1142.993204][T21950] macvlan2: entered allmulticast mode [ 1143.034854][T21956] sp0: Synchronizing with TNC [ 1143.085646][T21966] netlink: 'syz.8.17947': attribute type 1 has an invalid length. [ 1143.417993][T21989] usb usb8: usbfs: process 21989 (syz.8.17957) did not claim interface 0 before use [ 1144.358408][T21997] syz.3.17962 (21997): drop_caches: 2 [ 1144.621515][T22046] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1144.633192][T22046] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 1144.640432][T22046] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1144.647981][T22046] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1144.660878][T22046] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1144.683564][T22046] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 1144.703532][T22046] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1144.752775][T22055] loop5: detected capacity change from 0 to 512 [ 1144.758863][T22046] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 1144.808724][T22055] EXT4-fs error (device loop5): ext4_quota_enable:7134: inode #4: comm syz.5.17986: iget: bad i_size value: 1970324836980736 [ 1144.859587][T22055] EXT4-fs error (device loop5): ext4_quota_enable:7137: comm syz.5.17986: Bad quota inode: 4, type: 1 [ 1144.872798][T22055] EXT4-fs warning (device loop5): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1144.888194][T22055] EXT4-fs (loop5): mount failed [ 1145.586505][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18010'. [ 1145.619279][T22113] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1145.985547][T22135] tipc: Failed to obtain node identity [ 1146.006822][T22135] tipc: Enabling of bearer rejected, failed to enable media [ 1146.181203][ T1013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1146.622816][T22167] Bluetooth: MGMT ver 1.23 [ 1146.733007][T22172] sp0: Synchronizing with TNC [ 1147.304506][ T5943] kernel read not supported for file /input/mouse0 (pid: 5943 comm: kworker/0:4) [ 1147.318476][T22226] netlink: 20 bytes leftover after parsing attributes in process `syz.8.18053'. [ 1147.364223][T25554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1147.513473][T30322] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1147.582737][T22245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1147.663611][T30322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1147.674192][T30322] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1147.699819][T30322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1147.719511][T30322] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1147.734548][T30322] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1147.744514][T30322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.759109][T30322] usb 6-1: config 0 descriptor?? [ 1147.874634][T22266] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1147.968524][T30322] hdpvr 6-1:0.0: firmware version 0x0 dated [ 1147.977171][T30322] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 1148.085688][T22277] bridge_slave_0: default FDB implementation only supports local addresses [ 1148.236177][ T43] kernel read not supported for file /vcs (pid: 43 comm: kworker/1:1) [ 1148.395508][T30322] hdpvr 6-1:0.0: Could not setup controls [ 1148.410569][T30322] hdpvr 6-1:0.0: registering videodev failed [ 1148.450643][T30322] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 1148.474805][T30322] usb 6-1: USB disconnect, device number 28 [ 1149.047636][T22355] loop8: detected capacity change from 0 to 1024 [ 1149.056494][T22355] EXT4-fs: quotafile must be on filesystem root [ 1149.148271][T22361] ALSA: seq fatal error: cannot create timer (-19) [ 1149.293574][T22373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18105'. [ 1149.443807][ T30] audit: type=1326 audit(2000000957.585:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22382 comm="syz.5.18110" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63d678eec9 code=0x0 [ 1149.753713][ T5943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1150.042642][T22421] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 1150.284232][T22435] trusted_key: encrypted_key: insufficient parameters specified [ 1150.394413][ T43] kernel write not supported for file /amidi2 (pid: 43 comm: kworker/1:1) [ 1150.601778][T22453] IPVS: Scheduler module ip_vs_sip not found [ 1150.792589][T22476] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18148'. [ 1150.802708][T22476] netlink: 272 bytes leftover after parsing attributes in process `syz.7.18148'. [ 1150.814723][T22476] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18148'. [ 1150.885650][T22480] program syz.7.18150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1150.945459][T25554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1150.955781][T22484] netlink: 56 bytes leftover after parsing attributes in process `syz.7.18152'. [ 1150.967415][T22484] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18152'. [ 1150.983534][T22486] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1152.061111][T22549] tipc: Started in network mode [ 1152.066840][T22549] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1152.082969][T22549] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 1152.092118][T22549] tipc: Enabled bearer , priority 10 [ 1152.423647][T22535] loop3: detected capacity change from 0 to 32768 [ 1152.431736][T22535] gfs2: quota_quantum mount option requires a positive numeric argument [ 1152.655277][T22574] tmpfs: Bad value for 'mpol' [ 1152.680455][T22576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18191'. [ 1152.726607][ T30] audit: type=1326 audit(2000000961.104:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22577 comm="syz.5.18192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1152.752120][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1152.767101][ T30] audit: type=1326 audit(2000000961.104:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22577 comm="syz.5.18192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1152.802077][ T30] audit: type=1326 audit(2000000961.147:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22577 comm="syz.5.18192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1152.845018][T22580] sp0: Synchronizing with TNC [ 1152.850293][ T30] audit: type=1326 audit(2000000961.147:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22577 comm="syz.5.18192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1152.874205][ T30] audit: type=1326 audit(2000000961.147:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22577 comm="syz.5.18192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1152.898431][ T30] audit: type=1326 audit(2000000961.147:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22577 comm="syz.5.18192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1152.921825][ T30] audit: type=1326 audit(2000000961.147:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22577 comm="syz.5.18192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1153.021630][ T5943] tipc: Node number set to 1 [ 1153.190704][ T984] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1153.347801][ T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1153.376205][ T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1153.387800][ T984] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1153.398500][ T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.416392][ T984] usb 6-1: config 0 descriptor?? [ 1153.427816][T22591] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1153.523761][T22629] syz.6.18211 (22629) used obsolete PPPIOCDETACH ioctl [ 1153.737789][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18217'. [ 1153.825154][ T984] cypress 0003:04B4:DE61.005D: unexpected long global item [ 1153.834250][ T984] cypress 0003:04B4:DE61.005D: parse failed [ 1153.840244][ T984] cypress 0003:04B4:DE61.005D: probe with driver cypress failed with error -22 [ 1154.025373][ T984] usb 6-1: USB disconnect, device number 29 [ 1154.903238][T22724] program syz.3.18242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1154.904672][T22725] netlink: 36 bytes leftover after parsing attributes in process `syz.5.18243'. [ 1155.995069][ T89] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1156.154993][ T89] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1156.167219][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1156.179669][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1156.189794][ T89] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1156.202935][ T89] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1156.212166][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.223919][ T89] usb 4-1: config 0 descriptor?? [ 1156.315361][ T1013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1156.621943][ T89] hid_parser_main: 50 callbacks suppressed [ 1156.621981][ T89] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 1156.638001][ T89] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 1156.646129][ T89] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 1156.681521][ T89] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 1156.692560][ T89] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 1156.707378][ T89] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1156.807816][ T5961] usb 4-1: USB disconnect, device number 60 [ 1156.936474][ T43] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1156.970524][T22811] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18270'. [ 1157.096752][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1157.108444][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1157.141089][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1157.159857][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1157.193385][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1157.210763][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1157.221444][ T43] usb 6-1: SerialNumber: syz [ 1157.270151][T22834] netlink: 60 bytes leftover after parsing attributes in process `syz.7.18275'. [ 1157.281192][T22824] netlink: 60 bytes leftover after parsing attributes in process `syz.7.18275'. [ 1157.434705][ T43] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1157.489197][ T43] usb 6-1: USB disconnect, device number 30 [ 1157.739910][T22856] loop7: detected capacity change from 0 to 4096 [ 1157.755982][T22856] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1157.772264][T22856] ntfs3(loop7): failed to replay log file. Can't mount rw! [ 1158.116704][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1158.293399][T22895] mkiss: ax0: crc mode is auto. [ 1158.644398][T22924] tipc: Started in network mode [ 1158.649332][T22924] tipc: Node identity 7e59cd657516, cluster identity 4711 [ 1158.664009][T22924] tipc: Enabled bearer , priority 15 [ 1159.058889][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18324'. [ 1159.116869][T22957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18324'. [ 1159.582770][ T30] audit: type=1326 audit(2000000968.432:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22980 comm="syz.5.18337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1159.621285][ T30] audit: type=1326 audit(2000000968.432:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22980 comm="syz.5.18337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1159.643940][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.684424][ T30] audit: type=1326 audit(2000000968.475:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22980 comm="syz.5.18337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1159.707219][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.707364][ T43] tipc: Node number set to 189779301 [ 1159.737305][ T30] audit: type=1326 audit(2000000968.475:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22980 comm="syz.5.18337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1159.761593][ T30] audit: type=1326 audit(2000000968.475:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22980 comm="syz.5.18337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1159.784154][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.852434][ T30] audit: type=1326 audit(2000000968.475:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22980 comm="syz.5.18337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1159.875097][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.917049][ T30] audit: type=1326 audit(2000000968.475:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22980 comm="syz.5.18337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x7ffc0000 [ 1159.939641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.950265][T22998] netlink: 'syz.3.18345': attribute type 3 has an invalid length. [ 1159.956367][T22996] loop7: detected capacity change from 0 to 1024 [ 1159.974816][T22996] EXT4-fs: Ignoring removed bh option [ 1160.001378][T22996] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1160.070985][T22996] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1160.097759][T23012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18348'. [ 1160.222437][T20247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.496558][T30322] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1160.657525][T30322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.673579][T30322] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1160.700167][T30322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.720615][T30322] usb 6-1: config 0 descriptor?? [ 1161.113944][T30322] lenovo 0003:17EF:6047.005F: item fetching failed at offset 2/5 [ 1161.142665][T30322] lenovo 0003:17EF:6047.005F: hid_parse failed [ 1161.149323][T30322] lenovo 0003:17EF:6047.005F: probe with driver lenovo failed with error -22 [ 1161.310586][T30322] usb 6-1: USB disconnect, device number 31 [ 1161.359346][T23104] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 1161.359346][T23104] program syz.3.18380 not setting count and/or reply_len properly [ 1161.504324][T23110] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1161.683877][T13736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1161.821763][T23133] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1161.916115][T23145] hpfs: Bad magic ... probably not HPFS [ 1162.068529][T23158] netlink: 92 bytes leftover after parsing attributes in process `syz.8.18400'. [ 1162.078017][T23158] netlink: 24 bytes leftover after parsing attributes in process `syz.8.18400'. [ 1162.397586][T23177] netlink: 136 bytes leftover after parsing attributes in process `syz.3.18409'. [ 1162.397659][T23177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18409'. [ 1162.733452][ T984] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1162.756889][T23203] netlink: 32 bytes leftover after parsing attributes in process `syz.8.18420'. [ 1162.883639][ T984] usb 4-1: Using ep0 maxpacket: 16 [ 1162.893798][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.916625][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.926603][ T984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1162.942253][ T984] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1162.976675][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.993212][ T984] usb 4-1: config 0 descriptor?? [ 1163.336865][T23237] netlink: 88 bytes leftover after parsing attributes in process `syz.8.18432'. [ 1163.339468][ T5943] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1163.392564][ T984] hid-multitouch 0003:0457:07DA.0060: unknown main item tag 0x0 [ 1163.400854][ T984] hid-multitouch 0003:0457:07DA.0060: unknown main item tag 0x0 [ 1163.414041][ T984] hid-multitouch 0003:0457:07DA.0060: unknown main item tag 0x0 [ 1163.422455][ T984] hid-multitouch 0003:0457:07DA.0060: unknown main item tag 0x0 [ 1163.433539][ T984] hid-multitouch 0003:0457:07DA.0060: unknown main item tag 0x0 [ 1163.441249][ T984] hid-multitouch 0003:0457:07DA.0060: unknown main item tag 0x0 [ 1163.449188][ T984] hid-multitouch 0003:0457:07DA.0060: unknown main item tag 0x0 [ 1163.458084][ T984] hid-multitouch 0003:0457:07DA.0060: unknown main item tag 0x0 [ 1163.467541][ T984] hid-multitouch 0003:0457:07DA.0060: unknown main item tag 0x0 [ 1163.477411][ T1013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1163.489256][ T984] hid-multitouch 0003:0457:07DA.0060: unknown main item tag 0x0 [ 1163.502172][ T984] hid-multitouch 0003:0457:07DA.0060: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 1163.527082][ T5943] usb 6-1: Using ep0 maxpacket: 16 [ 1163.534571][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 1163.551185][ T5943] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1163.562226][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.571547][ T5943] usb 6-1: Product: syz [ 1163.581499][ T5943] usb 6-1: Manufacturer: syz [ 1163.586147][ T5943] usb 6-1: SerialNumber: syz [ 1163.593712][ T984] usb 4-1: USB disconnect, device number 61 [ 1163.612842][ T5943] usb 6-1: config 0 descriptor?? [ 1163.646137][ T5943] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1163.824572][ T36] usb 6-1: Failed to submit usb control message: -71 [ 1163.835720][ T984] usb 6-1: USB disconnect, device number 32 [ 1163.844329][ T36] usb 6-1: unable to send the bmi data to the device: -71 [ 1163.845056][T23280] netlink: 40 bytes leftover after parsing attributes in process `syz.8.18441'. [ 1163.851586][ T36] usb 6-1: unable to get target info from device [ 1163.862545][T23280] tipc: Invalid UDP bearer configuration [ 1163.868281][T23280] tipc: Enabling of bearer rejected, failed to enable media [ 1163.869780][ T36] usb 6-1: could not get target info (-71) [ 1163.893413][ T36] usb 6-1: could not probe fw (-71) [ 1164.026371][T23290] nbd: must specify a size in bytes for the device [ 1164.959161][T23345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18465'. [ 1165.055515][T23349] loop6: detected capacity change from 0 to 2048 [ 1165.068264][T23349] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1165.079787][T23349] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1165.087914][T23349] UDF-fs: Scanning with blocksize 512 failed [ 1165.101385][T23349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1165.120654][T30322] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1165.277484][T30322] usb 4-1: Using ep0 maxpacket: 8 [ 1165.285307][T30322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.306756][T30322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.325434][T30322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1165.343391][T30322] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1165.368796][T30322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.384231][T30322] usb 4-1: config 0 descriptor?? [ 1165.607920][T23377] loop5: detected capacity change from 0 to 2048 [ 1165.636536][T23377] overlay: Unknown parameter 'lastblock' [ 1165.791728][T30322] elecom 0003:056E:00FE.0061: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 1165.966009][T30322] usb 4-1: USB disconnect, device number 62 [ 1166.302672][T23436] random: crng reseeded on system resumption [ 1166.809229][T23468] sp0: Synchronizing with TNC [ 1167.051170][T13736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1167.543643][T23527] can0 (unregistered): slcan off ttyprintk. [ 1167.900336][ T5961] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1167.941370][T23564] netlink: 'syz.3.18540': attribute type 8 has an invalid length. [ 1168.057431][ T5961] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1168.072468][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1168.087202][ T5961] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1168.102088][ T5961] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1168.116152][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.127286][ T5961] usb 6-1: Product: syz [ 1168.132102][ T5961] usb 6-1: Manufacturer: syz [ 1168.136992][ T5961] usb 6-1: SerialNumber: syz [ 1168.147822][ T5961] usb 6-1: config 0 descriptor?? [ 1168.155247][T23539] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1168.164041][ T89] kernel write not supported for file /dsp (pid: 89 comm: kworker/0:2) [ 1168.164072][T23539] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1168.205428][ T5961] usb 6-1: ucan: probing device on interface #0 [ 1168.243341][T13736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1168.786243][ T5961] ucan 6-1:0.0: probe with driver ucan failed with error -71 [ 1168.798027][ T5961] usb 6-1: USB disconnect, device number 33 [ 1169.074206][T23627] ALSA: mixer_oss: invalid OSS volume '' [ 1169.159800][T23631] loop7: detected capacity change from 0 to 8 [ 1169.177690][T23631] SQUASHFS error: xz decompression failed, data probably corrupt [ 1169.186575][T23631] SQUASHFS error: Failed to read block 0x108: -5 [ 1169.193924][T23631] SQUASHFS error: Unable to read metadata cache entry [106] [ 1169.201217][T23631] SQUASHFS error: Unable to read inode 0x11f [ 1169.417172][T23646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18574'. [ 1169.597170][ T89] IPVS: starting estimator thread 0... [ 1169.603136][T23659] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1169.714336][T23660] IPVS: using max 22 ests per chain, 52800 per kthread [ 1169.927380][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18590'. [ 1170.061499][T23694] loop3: detected capacity change from 0 to 164 [ 1170.072680][T23694] ISOFS: unable to read i-node block [ 1170.081611][T23694] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1171.260347][T23788] random: crng reseeded on system resumption [ 1171.820992][T13736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1172.374623][T23846] sd 0:0:1:0: device reset [ 1172.939803][T25554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1173.855004][T23885] syz.7.18662 (23885): drop_caches: 2 [ 1174.232559][T23904] netdevsim netdevsim8: Firmware load for '/../file0' refused, path contains '..' component [ 1174.515055][T23923] syz.8.18678 (23923): drop_caches: 2 [ 1174.726207][T23933] loop7: detected capacity change from 0 to 164 [ 1174.738132][T23933] ISOFS: unable to read i-node block [ 1174.747415][T23933] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1175.256541][T23959] syz.5.18690 (23959): drop_caches: 2 [ 1175.305879][T23961] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 1175.374337][T23965] loop3: detected capacity change from 0 to 1024 [ 1175.383325][T23965] EXT4-fs: Ignoring removed bh option [ 1175.389773][T23965] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1175.417448][T23965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1175.563153][ T5874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.573432][T23988] loop6: detected capacity change from 0 to 164 [ 1175.578260][T23987] netlink: 36 bytes leftover after parsing attributes in process `syz.8.18699'. [ 1175.608358][T23988] ISOFS: unable to read i-node block [ 1175.661009][T23988] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1175.907463][T24008] syz.6.18706 (24008): drop_caches: 2 [ 1175.985204][T24015] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 1176.237874][T24032] sd 0:0:1:0: device reset [ 1176.407440][ T5961] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1176.420483][T24051] syz.5.18722 (24051): drop_caches: 2 [ 1176.584045][ T5961] usb 4-1: Using ep0 maxpacket: 32 [ 1176.594622][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 1176.606152][T25554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1176.623402][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.634679][ T5961] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 1176.644127][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.672858][ T5961] usb 4-1: config 0 descriptor?? [ 1176.833154][T24076] program syz.5.18734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1176.902481][T24081] syz.5.18736 (24081): drop_caches: 2 [ 1177.275245][ T984] usb 4-1: USB disconnect, device number 63 [ 1178.392618][T13736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1179.419210][T24127] mkiss: ax0: crc mode is auto. [ 1179.433123][T24133] netlink: 92 bytes leftover after parsing attributes in process `syz.7.18749'. [ 1179.442574][T24134] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1179.449634][T24133] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18749'. [ 1179.690713][ T30] audit: type=1326 audit(2000000990.029:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24146 comm="syz.3.18767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1179.753446][ T30] audit: type=1326 audit(2000000990.062:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24146 comm="syz.3.18767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1179.808786][ T30] audit: type=1326 audit(2000000990.062:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24146 comm="syz.3.18767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1179.870993][ T30] audit: type=1326 audit(2000000990.062:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24146 comm="syz.3.18767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1179.926568][ T30] audit: type=1326 audit(2000000990.062:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24146 comm="syz.3.18767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1180.019600][ T30] audit: type=1326 audit(2000000990.062:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24146 comm="syz.3.18767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1180.140044][T24176] mkiss: ax0: crc mode is auto. [ 1180.363265][T24201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18783'. [ 1180.711058][T24227] netlink: 'syz.5.18785': attribute type 3 has an invalid length. [ 1181.198293][T24247] netlink: 88 bytes leftover after parsing attributes in process `syz.3.18795'. [ 1181.241682][T24249] sp0: Synchronizing with TNC [ 1181.290819][ T1013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1181.601210][T24278] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18807'. [ 1181.630813][T24281] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18809'. [ 1181.801713][T24291] hpfs: Bad magic ... probably not HPFS [ 1181.812386][T24290] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1182.623304][ T5961] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1182.738782][T24334] sd 0:0:1:0: device reset [ 1182.763491][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 1182.770766][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.792249][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.807834][T24337] loop8: detected capacity change from 0 to 2048 [ 1182.814537][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1182.832114][ T5961] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1182.841806][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.855464][T24337] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1182.867817][T24337] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1182.873360][ T5961] usb 6-1: config 0 descriptor?? [ 1182.878803][T24337] UDF-fs: Scanning with blocksize 512 failed [ 1182.891525][T24337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1183.278840][ T5961] hid_parser_main: 83 callbacks suppressed [ 1183.278869][ T5961] hid-multitouch 0003:0457:07DA.0063: unknown main item tag 0x0 [ 1183.302050][ T5961] hid-multitouch 0003:0457:07DA.0063: unknown main item tag 0x0 [ 1183.311607][ T5961] hid-multitouch 0003:0457:07DA.0063: unknown main item tag 0x0 [ 1183.321091][ T5961] hid-multitouch 0003:0457:07DA.0063: unknown main item tag 0x0 [ 1183.348395][ T5961] hid-multitouch 0003:0457:07DA.0063: unknown main item tag 0x0 [ 1183.368348][ T5961] hid-multitouch 0003:0457:07DA.0063: unknown main item tag 0x0 [ 1183.384141][ T5961] hid-multitouch 0003:0457:07DA.0063: unknown main item tag 0x0 [ 1183.392146][ T5961] hid-multitouch 0003:0457:07DA.0063: unknown main item tag 0x0 [ 1183.400072][ T5961] hid-multitouch 0003:0457:07DA.0063: unknown main item tag 0x0 [ 1183.408824][ T5961] hid-multitouch 0003:0457:07DA.0063: unknown main item tag 0x0 [ 1183.431826][ T5961] hid-multitouch 0003:0457:07DA.0063: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 1183.509043][ T5961] usb 6-1: USB disconnect, device number 34 [ 1183.540930][T24373] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1183.752154][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1183.803277][T24387] IPVS: Scheduler module ip_vs_sip not found [ 1184.131174][T24407] netlink: 136 bytes leftover after parsing attributes in process `syz.5.18853'. [ 1184.152301][T24407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18853'. [ 1184.937701][T24442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18867'. [ 1185.708997][ T5943] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1185.834003][T24497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18891'. [ 1185.878917][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.902748][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.923436][ T5943] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1185.947011][ T5943] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1185.977995][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.996853][ T5943] usb 4-1: config 0 descriptor?? [ 1186.356607][T24527] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18903'. [ 1186.401348][ T5943] hid-udraw 0003:20D6:CB17.0064: item fetching failed at offset 5/7 [ 1186.410772][ T5943] hid-udraw 0003:20D6:CB17.0064: parse failed [ 1186.417088][ T5943] hid-udraw 0003:20D6:CB17.0064: probe with driver hid-udraw failed with error -22 [ 1186.593948][ T5943] usb 4-1: USB disconnect, device number 64 [ 1186.735568][ T1013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1187.451218][T24569] nbd: must specify a size in bytes for the device [ 1187.542471][T24573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18920'. [ 1187.872280][T24594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18929'. [ 1187.898097][T24594] netlink: 56 bytes leftover after parsing attributes in process `syz.3.18929'. [ 1187.928644][T24594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18929'. [ 1188.644884][T24637] nbd: must specify at least one socket [ 1189.120107][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1189.230828][T24671] sp0: Synchronizing with TNC [ 1189.265521][T24671] sp0: Found TNC [ 1190.545495][ T5961] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1190.564194][T24727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18986'. [ 1190.578138][T24727] netlink: 56 bytes leftover after parsing attributes in process `syz.5.18986'. [ 1190.595794][T24727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18986'. [ 1190.708099][ T5961] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1190.722891][ T5961] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1190.742797][T24729] loop6: detected capacity change from 0 to 4096 [ 1190.749286][ T5961] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.752678][T24729] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1190.779061][ T5961] usb 4-1: config 220 has no interface number 2 [ 1190.779637][T24729] ntfs3(loop6): failed to replay log file. Can't mount rw! [ 1190.794940][ T5961] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1190.831324][ T5961] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1190.844436][ T5961] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1190.852945][ T5961] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1190.875893][ T5961] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1190.890310][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.908999][ T5961] usb 4-1: Product: syz [ 1190.926171][ T5961] usb 4-1: Manufacturer: syz [ 1190.935958][ T5961] usb 4-1: SerialNumber: syz [ 1191.015151][T24745] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1191.061094][T24745] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1191.077645][T24745] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1191.101756][T24745] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1191.113255][T24745] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1191.123429][T24745] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1191.133769][T24745] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1191.135984][ T30] audit: type=1326 audit(2000001002.303:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24746 comm="syz.7.18994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732138eec9 code=0x0 [ 1191.140438][T24745] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1191.169111][T24753] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1191.200214][T24745] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1191.213718][T24745] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1191.214455][ T5961] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1191.229074][T24745] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1191.241703][T24745] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1191.248331][ T5961] uvcvideo 4-1:220.0: No valid video chain found. [ 1191.255124][T24745] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1191.262923][T24745] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1191.272150][ T5961] usb 4-1: selecting invalid altsetting 0 [ 1191.296559][T24745] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1191.311538][ T5961] usb 4-1: selecting invalid altsetting 0 [ 1191.317409][ T5961] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1191.339655][ T5961] usb 4-1: USB disconnect, device number 65 [ 1191.356017][T24745] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1191.445402][T13736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1191.543788][T24781] netlink: 'syz.6.19003': attribute type 4 has an invalid length. [ 1191.567644][T24781] netlink: 'syz.6.19003': attribute type 4 has an invalid length. [ 1191.643596][T24786] loop5: detected capacity change from 0 to 8 [ 1191.668530][T24786] SQUASHFS error: xz decompression failed, data probably corrupt [ 1191.676677][T24786] SQUASHFS error: Failed to read block 0x108: -5 [ 1191.688003][T24786] SQUASHFS error: Unable to read metadata cache entry [106] [ 1191.695494][T24786] SQUASHFS error: Unable to read inode 0x11f [ 1191.936614][T24803] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19014'. [ 1192.581869][T24837] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19027'. [ 1193.523510][T24892] random: crng reseeded on system resumption [ 1193.760620][T24907] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1194.497413][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1194.536662][T24952] netlink: 'syz.5.19088': attribute type 4 has an invalid length. [ 1194.588260][T24955] netlink: 'syz.5.19088': attribute type 4 has an invalid length. [ 1194.780105][T24966] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1194.789116][T24966] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1194.796431][T24966] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1194.803578][T24966] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1194.813120][T24967] IPv6: NLM_F_CREATE should be specified when creating new route [ 1194.821164][T24966] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1194.829102][T24966] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1194.842548][T24966] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1194.858812][T24966] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1194.876920][T24966] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1194.898518][T24966] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1194.912155][T24966] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1194.939177][T24966] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1194.968071][T24966] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1195.003374][T24966] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1195.024331][T24966] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1195.035769][T24966] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1195.657550][T24969] loop5: detected capacity change from 0 to 32768 [ 1195.698572][T24969] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.19089 (24969) [ 1195.804424][T24995] netlink: 'syz.7.19099': attribute type 3 has an invalid length. [ 1195.884360][T24969] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1195.915449][T24969] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 1196.192664][T24969] BTRFS info (device loop5): rebuilding free space tree [ 1196.203649][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1196.239510][T24969] BTRFS info (device loop5): allowing degraded mounts [ 1196.243660][T25021] netlink: 'syz.7.19104': attribute type 58 has an invalid length. [ 1196.254563][T25021] netlink: 20 bytes leftover after parsing attributes in process `syz.7.19104'. [ 1196.262555][T24969] BTRFS info (device loop5): enabling ssd optimizations [ 1196.290832][T24969] BTRFS info (device loop5): enabling free space tree [ 1196.308864][T24969] BTRFS info (device loop5): force clearing of disk cache [ 1196.325627][T24969] BTRFS info (device loop5): use zstd compression, level 3 [ 1196.354536][T24969] BTRFS info (device loop5): max_inline set to 0 [ 1196.571143][ T9967] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1196.780624][T25040] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1196.789181][T25040] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 1196.797014][T25040] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1196.807766][T25040] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1196.814435][T25040] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 1196.853055][T25040] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1196.869773][T25040] comedi comedi3: 8255: I/O port conflict (0x400000a,4) [ 1196.895441][T25043] loop3: detected capacity change from 0 to 1024 [ 1196.922043][T25040] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 1196.941879][T25040] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1197.044280][T25043] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1197.063205][T25043] hfsplus: xattr search failed [ 1197.246893][T25554] hfsplus: b-tree write err: -5, ino 4 [ 1197.764244][ T5943] kernel read not supported for file /media0 (pid: 5943 comm: kworker/0:4) [ 1197.954672][T25088] netlink: 'syz.3.19132': attribute type 3 has an invalid length. [ 1198.288400][T25103] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1198.479595][T25117] netlink: 'syz.3.19147': attribute type 4 has an invalid length. [ 1198.530142][T25117] netlink: 'syz.3.19147': attribute type 4 has an invalid length. [ 1198.622817][T25126] tipc: Enabling of bearer rejected, failed to enable media [ 1198.863081][T25137] loop6: detected capacity change from 0 to 1024 [ 1198.909893][T25137] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1198.926883][T25137] hfsplus: xattr search failed [ 1198.994471][ T79] hfsplus: b-tree write err: -5, ino 4 [ 1199.111125][T25151] netlink: 'syz.7.19161': attribute type 4 has an invalid length. [ 1199.128880][T25157] netlink: 'syz.5.19171': attribute type 58 has an invalid length. [ 1199.142299][T25157] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19171'. [ 1199.168301][T25160] netlink: 'syz.7.19161': attribute type 4 has an invalid length. [ 1199.858354][T13736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1200.059390][T25192] netlink: 'syz.5.19174': attribute type 83 has an invalid length. [ 1200.423804][T25210] loop5: detected capacity change from 0 to 1024 [ 1200.446662][T25210] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1200.453456][T25210] hfsplus: xattr search failed [ 1200.510428][T13736] hfsplus: b-tree write err: -5, ino 4 [ 1200.781819][T25221] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1200.962712][T25231] tipc: Enabling of bearer rejected, failed to enable media [ 1201.138663][ T1013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1202.206159][ T43] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1202.272377][T25258] loop6: detected capacity change from 0 to 32768 [ 1202.288536][T25258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.19205 (25258) [ 1202.307519][T25258] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1202.320796][T25258] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 1202.354826][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1202.362365][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.384587][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.397857][ T43] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1202.408167][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.429336][T25315] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19235'. [ 1202.459862][ T43] usb 4-1: config 0 descriptor?? [ 1202.498704][T25258] BTRFS info (device loop6): rebuilding free space tree [ 1202.519303][T25258] BTRFS info (device loop6): allowing degraded mounts [ 1202.528533][T25258] BTRFS info (device loop6): enabling ssd optimizations [ 1202.536281][T25258] BTRFS info (device loop6): enabling free space tree [ 1202.549165][T25258] BTRFS info (device loop6): force clearing of disk cache [ 1202.556516][T25258] BTRFS info (device loop6): use zstd compression, level 3 [ 1202.565790][T25258] BTRFS info (device loop6): max_inline set to 0 [ 1202.691572][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 1202.697730][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1202.722401][ T43] usb 4-1: USB disconnect, device number 66 [ 1202.781552][T13526] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1202.984630][T25359] netlink: 'syz.7.19233': attribute type 83 has an invalid length. [ 1203.225035][ T43] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1203.383769][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1203.403180][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 1203.433644][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 256 [ 1203.445620][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.456870][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.473753][ T43] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1203.483099][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1203.491130][ T43] usb 4-1: SerialNumber: syz [ 1203.498796][ T43] usb 4-1: config 0 descriptor?? [ 1203.507411][ T43] hso 4-1:0.0: Can't find BULK OUT endpoint [ 1203.633147][ T30] audit: type=1326 audit(2000001015.715:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25394 comm="syz.5.19248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63d678eec9 code=0x0 [ 1203.704792][ T43] usb 4-1: USB disconnect, device number 67 [ 1203.745002][T25404] netlink: 'syz.6.19249': attribute type 83 has an invalid length. [ 1203.889716][T25386] loop7: detected capacity change from 0 to 32768 [ 1203.891877][T25386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.19244 (25386) [ 1203.916782][T25386] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1203.916860][T25386] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 1203.959952][T25386] BTRFS info (device loop7): rebuilding free space tree [ 1203.987169][T25386] BTRFS info (device loop7): allowing degraded mounts [ 1203.987200][T25386] BTRFS info (device loop7): enabling ssd optimizations [ 1203.987220][T25386] BTRFS info (device loop7): enabling free space tree [ 1203.987239][T25386] BTRFS info (device loop7): force clearing of disk cache [ 1203.987259][T25386] BTRFS info (device loop7): use zstd compression, level 3 [ 1203.987281][T25386] BTRFS info (device loop7): max_inline set to 0 [ 1204.113634][T20247] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1205.014068][T25460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19263'. [ 1205.234064][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1205.313214][T25445] loop7: detected capacity change from 0 to 32768 [ 1205.348394][T25473] netlink: 'syz.3.19268': attribute type 3 has an invalid length. [ 1205.369530][T25445] loop7: p1 p3 < > [ 1206.419552][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1207.564510][T25539] loop3: detected capacity change from 0 to 32768 [ 1207.605521][T25539] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.19292 (25539) [ 1207.701660][T25539] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1207.732398][T25539] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 1207.769588][T25586] netlink: 'syz.8.19314': attribute type 1 has an invalid length. [ 1207.788639][T25584] netlink: 'syz.5.19313': attribute type 30 has an invalid length. [ 1208.009631][T25539] BTRFS info (device loop3): rebuilding free space tree [ 1208.030810][T25649] misc userio: No port type given on /dev/userio [ 1208.040052][T25539] BTRFS info (device loop3): allowing degraded mounts [ 1208.058478][T25539] BTRFS info (device loop3): enabling ssd optimizations [ 1208.071898][T25539] BTRFS info (device loop3): enabling free space tree [ 1208.080074][T25539] BTRFS info (device loop3): force clearing of disk cache [ 1208.087403][T25539] BTRFS info (device loop3): use zstd compression, level 3 [ 1208.094935][T25539] BTRFS info (device loop3): max_inline set to 0 [ 1208.285461][ T5874] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1209.188000][T25711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19347'. [ 1209.203116][T25713] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1209.364370][T25721] 9pnet: Could not find request transport: ~ [ 1209.942026][T25755] netlink: 'syz.6.19362': attribute type 1 has an invalid length. [ 1210.026594][ T5943] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1210.215367][ T5943] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1210.227979][ T5943] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1210.240070][ T5943] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 1210.249588][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.266593][ T5943] usb 6-1: config 0 descriptor?? [ 1210.276218][T25749] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1210.595586][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1210.693513][ T5943] lenovo 0003:17EF:60A4.0065: hidraw0: USB HID v1.01 Device [HID 17ef:60a4] on usb-dummy_hcd.5-1/input0 [ 1210.750483][T25798] lo speed is unknown, defaulting to 1000 [ 1210.759926][T25798] lo speed is unknown, defaulting to 1000 [ 1210.774006][T25798] lo speed is unknown, defaulting to 1000 [ 1210.886200][ T984] usb 6-1: USB disconnect, device number 35 [ 1210.928801][T25802] misc userio: No port type given on /dev/userio [ 1211.055822][T25798] infiniband syz2: set active [ 1211.061513][T25798] infiniband syz2: added lo [ 1211.076870][T19200] lo speed is unknown, defaulting to 1000 [ 1211.123842][T25798] RDS/IB: syz2: added [ 1211.129570][T25798] lo speed is unknown, defaulting to 1000 [ 1211.413274][T25798] lo speed is unknown, defaulting to 1000 [ 1211.712325][ T984] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1211.748259][T25798] lo speed is unknown, defaulting to 1000 [ 1211.783990][T25847] netlink: 'syz.8.19390': attribute type 2 has an invalid length. [ 1211.800653][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1211.881665][ T984] usb 4-1: Using ep0 maxpacket: 16 [ 1211.891225][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.908978][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.921674][ T984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1211.935392][ T984] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1211.950855][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.993313][ T984] usb 4-1: config 0 descriptor?? [ 1212.077132][T25798] lo speed is unknown, defaulting to 1000 [ 1212.388726][ T984] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0066/input/input118 [ 1212.415427][T25798] lo speed is unknown, defaulting to 1000 [ 1212.488787][ T984] microsoft 0003:045E:07DA.0066: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1212.576609][T19200] usb 4-1: USB disconnect, device number 68 [ 1212.681011][T25890] netlink: 10 bytes leftover after parsing attributes in process `syz.5.19408'. [ 1212.767330][T25899] netlink: 'syz.8.19401': attribute type 30 has an invalid length. [ 1213.279177][T25966] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19416'. [ 1213.567810][ T30] audit: type=1326 audit(2000001026.368:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25977 comm="syz.3.19423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x0 [ 1213.646877][T25970] loop8: detected capacity change from 0 to 32768 [ 1213.656115][T25970] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.19419 (25970) [ 1213.672510][T25970] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1213.682775][T25970] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm [ 1213.731076][T25970] BTRFS info (device loop8): rebuilding free space tree [ 1213.743378][T25970] BTRFS info (device loop8): allowing degraded mounts [ 1213.750374][T25970] BTRFS info (device loop8): enabling ssd optimizations [ 1213.757406][T25970] BTRFS info (device loop8): enabling free space tree [ 1213.764362][T25970] BTRFS info (device loop8): force clearing of disk cache [ 1213.771498][T25970] BTRFS info (device loop8): use zstd compression, level 3 [ 1213.778783][T25970] BTRFS info (device loop8): max_inline set to 0 [ 1213.859405][T20857] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1214.210237][T19200] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1214.359805][T19200] usb 6-1: Using ep0 maxpacket: 8 [ 1214.367832][T19200] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.379464][T19200] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.389627][T19200] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1214.401569][T19200] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.414465][T19200] usb 6-1: config 0 descriptor?? [ 1214.806004][T19200] logitech 0003:046D:C20E.0067: rdesc size test failed for formula gp [ 1214.828222][T19200] logitech 0003:046D:C20E.0067: item fetching failed at offset 10/11 [ 1214.845855][T19200] logitech 0003:046D:C20E.0067: parse failed [ 1214.852152][T19200] logitech 0003:046D:C20E.0067: probe with driver logitech failed with error -22 [ 1214.895075][T26039] sctp: [Deprecated]: syz.3.19436 (pid 26039) Use of int in max_burst socket option. [ 1214.895075][T26039] Use struct sctp_assoc_value instead [ 1215.012118][ T5943] usb 6-1: USB disconnect, device number 36 [ 1215.079452][T26034] loop7: detected capacity change from 0 to 32768 [ 1215.102444][T26034] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.19435 (26034) [ 1215.129460][T26034] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1215.165672][T26034] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 1215.261279][T26034] BTRFS info (device loop7): rebuilding free space tree [ 1215.286878][T26034] BTRFS info (device loop7): allowing degraded mounts [ 1215.294019][T26034] BTRFS info (device loop7): enabling ssd optimizations [ 1215.301790][T26034] BTRFS info (device loop7): enabling free space tree [ 1215.309035][T26034] BTRFS info (device loop7): force clearing of disk cache [ 1215.316813][T26034] BTRFS info (device loop7): use zstd compression, level 3 [ 1215.325984][T26034] BTRFS info (device loop7): max_inline set to 0 [ 1215.359606][T26078] netlink: 'syz.3.19443': attribute type 1 has an invalid length. [ 1215.385612][T26078] netlink: 204 bytes leftover after parsing attributes in process `syz.3.19443'. [ 1215.398202][T26078] netlink: 'syz.3.19443': attribute type 1 has an invalid length. [ 1215.424060][T20247] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1215.649315][T26093] rdma_op ffff888033e579f0 conn xmit_rdma 0000000000000000 [ 1215.962827][T26108] block nbd5: not configured, cannot reconfigure [ 1215.972508][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1216.157443][T26116] xt_HMARK: spi-set and port-set can't be combined [ 1216.574218][T26142] loop8: detected capacity change from 0 to 256 [ 1216.892202][T26165] sctp: [Deprecated]: syz.6.19481 (pid 26165) Use of int in max_burst socket option. [ 1216.892202][T26165] Use struct sctp_assoc_value instead [ 1217.040491][T26176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19487'. [ 1217.156388][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1217.196932][T26186] rdma_op ffff8880223161f0 conn xmit_rdma 0000000000000000 [ 1217.472956][T26207] usb usb2: usbfs: process 26207 (syz.3.19501) did not claim interface 6 before use [ 1217.767991][T26222] rdma_op ffff8880594581f0 conn xmit_rdma 0000000000000000 [ 1218.028417][T26247] rdma_op ffff88804c5f89f0 conn xmit_rdma 0000000000000000 [ 1218.114068][ T30] audit: type=1326 audit(2000001031.250:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26252 comm="syz.6.19518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x0 [ 1218.524047][T26269] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19523'. [ 1218.608362][T26246] loop8: detected capacity change from 0 to 32768 [ 1218.621250][T26246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.19525 (26246) [ 1218.640414][T26246] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1218.654276][T26246] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm [ 1218.687781][T26277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19528'. [ 1218.699340][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19528'. [ 1218.711369][T26277] netlink: 'syz.7.19528': attribute type 7 has an invalid length. [ 1218.743611][T26246] BTRFS info (device loop8): rebuilding free space tree [ 1218.818732][T26246] BTRFS info (device loop8): allowing degraded mounts [ 1218.827367][T26246] BTRFS info (device loop8): enabling ssd optimizations [ 1218.837588][T26246] BTRFS info (device loop8): enabling free space tree [ 1218.891468][T26246] BTRFS info (device loop8): force clearing of disk cache [ 1218.898930][T26246] BTRFS info (device loop8): use zstd compression, level 3 [ 1218.906178][T26246] BTRFS info (device loop8): max_inline set to 0 [ 1219.136344][T20857] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1219.694127][T26336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19547'. [ 1220.057953][T26357] usb usb2: usbfs: process 26357 (syz.7.19556) did not claim interface 6 before use [ 1221.197117][ T30] audit: type=1326 audit(2000001034.555:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26414 comm="syz.5.19580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63d678eec9 code=0x0 [ 1221.331852][T26426] loop6: detected capacity change from 0 to 64 [ 1221.332733][ T1013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1221.507775][T26441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19590'. [ 1222.017240][T26464] netlink: 'syz.3.19600': attribute type 3 has an invalid length. [ 1222.384008][T26484] loop6: detected capacity change from 0 to 512 [ 1222.415643][T26484] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1222.456188][T26484] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1222.494545][T26484] EXT4-fs (loop6): 1 truncate cleaned up [ 1222.505693][T26484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1222.536446][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1222.573299][T13526] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.577994][ T5943] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1223.732195][ T5943] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1223.752301][ T5943] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1223.771764][ T5943] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1223.789277][ T5943] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1223.801517][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.824955][ T5943] usb 6-1: Product: syz [ 1223.829176][ T5943] usb 6-1: Manufacturer: syz [ 1223.842166][ T5943] usb 6-1: SerialNumber: syz [ 1223.859521][ T5943] usb 6-1: config 0 descriptor?? [ 1223.876282][ T5943] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1223.899628][ T5943] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1223.962213][T26589] loop3: detected capacity change from 0 to 64 [ 1224.058352][ T5943] usb 6-1: USB disconnect, device number 37 [ 1224.191550][T26614] netlink: 'syz.7.19668': attribute type 3 has an invalid length. [ 1225.543853][T26671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19687'. [ 1225.632166][T26647] loop3: detected capacity change from 0 to 32768 [ 1225.651519][T26647] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.19674 (26647) [ 1225.694421][T26647] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1225.718689][T26647] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1225.867954][T26699] tipc: Enabling of bearer rejected, failed to enable media [ 1225.892116][T26647] BTRFS info (device loop3): enabling ssd optimizations [ 1225.899389][T26647] BTRFS info (device loop3): enabling free space tree [ 1225.906880][T26647] BTRFS info (device loop3): use lzo compression, level 1 [ 1225.935847][ T30] audit: type=1326 audit(2000001039.640:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26711 comm="syz.6.19698" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6c418eec9 code=0x0 [ 1226.030964][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1226.084654][ T5874] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1226.774426][ T984] kernel read not supported for file /sysvipc/msg (pid: 984 comm: kworker/0:3) [ 1226.911373][T26748] loop6: detected capacity change from 0 to 64 [ 1227.082711][T26756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19711'. [ 1227.409601][T26772] netlink: 204 bytes leftover after parsing attributes in process `syz.6.19720'. [ 1227.464640][T26772] netlink: 108 bytes leftover after parsing attributes in process `syz.6.19720'. [ 1227.902752][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1229.046169][T30322] kernel write not supported for file /dsp (pid: 30322 comm: kworker/1:0) [ 1229.456341][T26840] loop8: detected capacity change from 0 to 32768 [ 1229.473178][T26875] loop5: detected capacity change from 0 to 64 [ 1229.486837][T26840] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.19749 (26840) [ 1229.511129][T26840] BTRFS info (device loop8): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1229.522124][T26840] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 1229.594831][T26840] BTRFS info (device loop8): enabling ssd optimizations [ 1229.603738][T26840] BTRFS info (device loop8): enabling free space tree [ 1229.611599][T26840] BTRFS info (device loop8): use lzo compression, level 1 [ 1229.778113][T26909] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1229.790372][T20857] BTRFS info (device loop8): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1229.800928][T26909] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1229.817134][T26909] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1229.824182][T26909] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1229.831303][T26909] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1229.840034][T26909] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1229.847177][T26909] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1229.860770][T26909] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1229.867552][T26909] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1229.874337][T26909] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1229.880948][T26909] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1229.887442][T26909] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1229.896471][T26909] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1229.905203][T26909] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1229.913163][T26909] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1229.920518][T26909] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1229.944875][T26909] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 1229.954880][T26909] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1230.147948][T26918] netlink: 204 bytes leftover after parsing attributes in process `syz.3.19774'. [ 1230.167547][T26918] netlink: 108 bytes leftover after parsing attributes in process `syz.3.19774'. [ 1230.404202][ T30] audit: type=1326 audit(2000001044.447:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26934 comm="syz.3.19781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1230.465917][ T30] audit: type=1326 audit(2000001044.447:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26934 comm="syz.3.19781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1230.515420][ T30] audit: type=1326 audit(2000001044.468:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26934 comm="syz.3.19781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1230.548068][ T30] audit: type=1326 audit(2000001044.468:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26934 comm="syz.3.19781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1230.596129][ T30] audit: type=1326 audit(2000001044.468:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26934 comm="syz.3.19781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1230.645371][ T30] audit: type=1326 audit(2000001044.468:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26934 comm="syz.3.19781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1230.707269][ T30] audit: type=1326 audit(2000001044.468:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26934 comm="syz.3.19781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1230.732292][ T30] audit: type=1326 audit(2000001044.468:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26934 comm="syz.3.19781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1230.812491][T25554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1230.957140][T26953] netlink: 'syz.8.19789': attribute type 31 has an invalid length. [ 1231.020054][T26939] loop5: detected capacity change from 0 to 32768 [ 1231.032270][T26939] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.19782 (26939) [ 1231.056326][T26939] BTRFS info (device loop5): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1231.067435][T26939] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1231.156456][T26972] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19792'. [ 1231.160984][T26939] BTRFS info (device loop5): enabling ssd optimizations [ 1231.175337][T26939] BTRFS info (device loop5): enabling free space tree [ 1231.182162][T26939] BTRFS info (device loop5): use lzo compression, level 1 [ 1231.303528][ T9967] BTRFS info (device loop5): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1231.407348][ T984] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1231.569021][ T984] usb 4-1: Using ep0 maxpacket: 16 [ 1231.599449][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.616275][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.626584][ T984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1231.640205][ T984] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1231.649325][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.685995][ T984] usb 4-1: config 0 descriptor?? [ 1232.096241][ T984] microsoft 0003:045E:07DA.0068: ignoring exceeding usage max [ 1232.118318][ T984] microsoft 0003:045E:07DA.0068: ignoring exceeding usage max [ 1232.127143][ T984] microsoft 0003:045E:07DA.0068: usage index exceeded [ 1232.134300][ T984] microsoft 0003:045E:07DA.0068: item 0 0 2 2 parsing failed [ 1232.156164][ T984] microsoft 0003:045E:07DA.0068: parse failed [ 1232.163201][ T984] microsoft 0003:045E:07DA.0068: probe with driver microsoft failed with error -22 [ 1232.234623][T27030] tipc: Started in network mode [ 1232.239855][T27030] tipc: Node identity ffffffffffffffff09, cluster identity 4711 [ 1232.286380][ T984] usb 4-1: USB disconnect, device number 69 [ 1232.407067][ T30] audit: type=1326 audit(2000001046.593:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27045 comm="syz.6.19811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1232.429558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.448845][ T30] audit: type=1326 audit(2000001046.593:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27045 comm="syz.6.19811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1232.480231][ T30] audit: type=1326 audit(2000001046.593:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27045 comm="syz.6.19811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1232.505498][ T30] audit: type=1326 audit(2000001046.593:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27045 comm="syz.6.19811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1232.535758][ T30] audit: type=1326 audit(2000001046.593:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27045 comm="syz.6.19811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1232.566689][ T30] audit: type=1326 audit(2000001046.593:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27045 comm="syz.6.19811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1232.657115][T27026] loop7: detected capacity change from 0 to 32768 [ 1232.667984][T27026] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.19806 (27026) [ 1232.687080][T27026] BTRFS info (device loop7): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1232.697354][T27026] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 1232.734514][T27026] BTRFS info (device loop7): enabling ssd optimizations [ 1232.741719][T27026] BTRFS info (device loop7): enabling free space tree [ 1232.748564][T27026] BTRFS info (device loop7): use lzo compression, level 1 [ 1232.903770][T20247] BTRFS info (device loop7): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1233.088770][T27085] netlink: 'syz.3.19820': attribute type 31 has an invalid length. [ 1233.232563][T27089] overlayfs: missing 'workdir' [ 1233.269960][T25554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1233.435322][T27099] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1233.442162][T27099] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1233.449523][T27099] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1233.456550][T27099] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1233.464285][T27099] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1233.471010][T27099] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1233.477909][T27099] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1233.486539][T27099] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1233.497242][T27099] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1233.508022][T27099] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1233.520505][T27099] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1233.533006][T27099] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1233.539785][T27099] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1233.540660][T27103] loop7: detected capacity change from 0 to 1024 [ 1233.548469][T27099] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1233.558426][T27103] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1233.563108][T27099] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1233.574774][T27103] EXT4-fs (loop7): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 1233.576350][T27099] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1233.597768][T27099] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 1233.605721][T27099] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1233.619285][T27103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1233.667681][T20247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.832492][T27119] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19833'. [ 1236.250706][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1236.262785][T27140] program syz.7.19842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1236.504099][T27122] loop6: detected capacity change from 0 to 32768 [ 1236.517507][T27122] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.19829 (27122) [ 1236.552138][T27122] BTRFS info (device loop6): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1236.589674][T27122] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 1236.687202][T27171] RDS: rds_bind could not find a transport for ::c00d:0:20:0, load rds_tcp or rds_rdma? [ 1236.759421][T27122] BTRFS info (device loop6): enabling ssd optimizations [ 1236.767206][T27122] BTRFS info (device loop6): enabling free space tree [ 1236.774114][T27122] BTRFS info (device loop6): use lzo compression, level 1 [ 1237.003446][T13526] BTRFS info (device loop6): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1237.250333][T27204] netlink: 'syz.5.19861': attribute type 1 has an invalid length. [ 1238.034804][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1238.397298][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1238.397318][ T30] audit: type=1326 audit(2000001053.009:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27270 comm="syz.5.19889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63d678eec9 code=0x0 [ 1238.426025][ T5961] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1238.574877][ T5961] usb 4-1: Using ep0 maxpacket: 32 [ 1238.582975][ T5961] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.595677][ T5961] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1238.610431][ T5961] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1238.629542][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.644938][ T5961] usb 4-1: Product: syz [ 1238.653714][ T5961] usb 4-1: Manufacturer: syz [ 1238.661754][ T5961] usb 4-1: SerialNumber: syz [ 1239.058946][ T5961] usb 4-1: cannot find UAC_HEADER [ 1239.075421][ T5961] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1239.251848][ T5943] usb 4-1: USB disconnect, device number 70 [ 1239.368141][T27327] netlink: 92 bytes leftover after parsing attributes in process `syz.6.19906'. [ 1239.384656][T27327] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19906'. [ 1239.394032][T27327] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19906'. [ 1239.529366][T27334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19910'. [ 1239.542085][T27334] nbd: socks must be embedded in a SOCK_ITEM attr [ 1239.697686][ T30] audit: type=1326 audit(2000001054.414:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27345 comm="syz.6.19915" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6c418eec9 code=0x0 [ 1240.562971][T27353] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19926'. [ 1241.221312][T30322] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1241.296552][T19200] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1241.361455][T30322] usb 6-1: Using ep0 maxpacket: 16 [ 1241.368701][T30322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.379694][T30322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.389841][T30322] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1241.402930][T30322] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1241.413123][T30322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.423753][T30322] usb 6-1: config 0 descriptor?? [ 1241.447101][T19200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.458553][T19200] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1241.471859][T19200] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1241.481036][T19200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.493106][T19200] usb 4-1: config 0 descriptor?? [ 1241.613323][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1241.802801][T27411] overlayfs: missing 'lowerdir' [ 1241.828724][T30322] hid_parser_main: 24 callbacks suppressed [ 1241.828780][T30322] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1241.843660][T30322] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1241.864931][T30322] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1241.879338][T30322] microsoft 0003:045E:07DA.0069: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1241.897936][T30322] microsoft 0003:045E:07DA.0069: no inputs found [ 1241.907586][T19200] ortek 0003:1223:3F07.006A: Fixing up logical maximum in report descriptor (Skycable) [ 1241.919857][T30322] microsoft 0003:045E:07DA.0069: could not initialize ff, continuing anyway [ 1241.930299][T19200] ortek 0003:1223:3F07.006A: unknown main item tag 0x6 [ 1241.937439][T19200] ortek 0003:1223:3F07.006A: report_id 29495 is invalid [ 1241.944352][T27419] netlink: 48 bytes leftover after parsing attributes in process `syz.6.19939'. [ 1241.947962][T19200] ortek 0003:1223:3F07.006A: item 0 2 1 8 parsing failed [ 1241.963252][T19200] ortek 0003:1223:3F07.006A: probe with driver ortek failed with error -22 [ 1242.009173][T19200] usb 6-1: USB disconnect, device number 38 [ 1242.142660][T30322] usb 4-1: USB disconnect, device number 71 [ 1242.778243][ T5943] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1242.941296][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1242.956968][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.969113][ T5943] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1242.978245][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.991165][ T5943] usb 6-1: config 0 descriptor?? [ 1243.067809][T27474] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19951'. [ 1243.262930][T27484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19956'. [ 1243.398320][ T5943] zydacron 0003:13EC:0006.006B: unknown main item tag 0x6 [ 1243.406129][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1243.449734][ T5943] zydacron 0003:13EC:0006.006B: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 1243.589759][ T5943] usb 6-1: USB disconnect, device number 39 [ 1243.601860][T27510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19966'. [ 1244.048785][T27555] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19978'. [ 1244.229992][T27563] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19982'. [ 1244.500158][ T30] audit: type=1326 audit(2000001059.564:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27580 comm="syz.6.19992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1244.526165][ T30] audit: type=1326 audit(2000001059.564:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27580 comm="syz.6.19992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1244.565556][ T30] audit: type=1326 audit(2000001059.564:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27580 comm="syz.6.19992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1244.603414][ T30] audit: type=1326 audit(2000001059.564:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27580 comm="syz.6.19992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1244.628303][ T30] audit: type=1326 audit(2000001059.564:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27580 comm="syz.6.19992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1244.690978][ T30] audit: type=1326 audit(2000001059.564:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27580 comm="syz.6.19992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1244.713757][ T30] audit: type=1326 audit(2000001059.564:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27580 comm="syz.6.19992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1244.738646][ T30] audit: type=1326 audit(2000001059.564:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27580 comm="syz.6.19992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c418eec9 code=0x7ffc0000 [ 1246.387438][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1246.689789][T27598] netlink: 1348 bytes leftover after parsing attributes in process `syz.5.20008'. [ 1246.699432][T27600] netlink: 16 bytes leftover after parsing attributes in process `syz.8.19997'. [ 1247.000263][T27619] netlink: 52 bytes leftover after parsing attributes in process `syz.7.20010'. [ 1247.081315][T27624] mkiss: ax0: crc mode is auto. [ 1247.705850][T27669] mkiss: ax0: crc mode is auto. [ 1247.925468][ T30] audit: type=1326 audit(2000001063.244:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27686 comm="syz.3.20034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1247.948775][ T30] audit: type=1326 audit(2000001063.265:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27686 comm="syz.3.20034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbf38eec9 code=0x7ffc0000 [ 1248.171854][T27701] netlink: 52 bytes leftover after parsing attributes in process `syz.3.20043'. [ 1248.638847][ T984] hid-generic 0000:0004:0000.006C: unknown main item tag 0x0 [ 1248.646862][T27729] GUP no longer grows the stack in syz.7.20056 (27729): 200000005000-200000008000 (200000004000) [ 1248.667580][ T984] hid-generic 0000:0004:0000.006C: unknown main item tag 0x0 [ 1248.673833][T27729] CPU: 1 UID: 0 PID: 27729 Comm: syz.7.20056 Not tainted syzkaller #0 PREEMPT(full) [ 1248.673863][T27729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1248.673876][T27729] Call Trace: [ 1248.673885][T27729] [ 1248.673894][T27729] dump_stack_lvl+0x189/0x250 [ 1248.673926][T27729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1248.673949][T27729] ? __pfx__printk+0x10/0x10 [ 1248.673971][T27729] ? find_vma+0xe7/0x160 [ 1248.674012][T27729] fixup_user_fault+0x661/0x720 [ 1248.674046][T27729] fault_in_user_writeable+0x72/0xe0 [ 1248.674068][T27729] futex_lock_pi+0x773/0xa90 [ 1248.674104][T27729] ? __pfx_futex_lock_pi+0x10/0x10 [ 1248.674162][T27729] ? __pfx_futex_wake_mark+0x10/0x10 [ 1248.674205][T27729] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1248.674237][T27729] do_futex+0x292/0x420 [ 1248.674266][T27729] ? __pfx_do_futex+0x10/0x10 [ 1248.674288][T27729] ? __vm_munmap+0x2c1/0x380 [ 1248.674320][T27729] __se_sys_futex+0x36f/0x400 [ 1248.674350][T27729] ? __pfx___se_sys_futex+0x10/0x10 [ 1248.674380][T27729] ? __x64_sys_futex+0x21/0xf0 [ 1248.674405][T27729] do_syscall_64+0xfa/0xfa0 [ 1248.674432][T27729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.674450][T27729] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1248.674468][T27729] ? clear_bhb_loop+0x60/0xb0 [ 1248.674491][T27729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.674509][T27729] RIP: 0033:0x7f732138eec9 [ 1248.674527][T27729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1248.674548][T27729] RSP: 002b:00007f73221dc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1248.674571][T27729] RAX: ffffffffffffffda RBX: 00007f73215e5fa0 RCX: 00007f732138eec9 [ 1248.674586][T27729] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 1248.674599][T27729] RBP: 00007f7321411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1248.674612][T27729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.674624][T27729] R13: 00007f73215e6038 R14: 00007f73215e5fa0 R15: 00007ffd5fc87008 [ 1248.674659][T27729] [ 1248.772858][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1248.804160][ T984] hid-generic 0000:0004:0000.006C: unknown main item tag 0x0 [ 1248.899944][T27739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20059'. [ 1248.925409][ T984] hid-generic 0000:0004:0000.006C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1249.157293][T27761] Bluetooth: MGMT ver 1.23 [ 1249.232760][T27766] netlink: 28 bytes leftover after parsing attributes in process `syz.6.20070'. [ 1249.498403][ T984] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1249.666754][ T984] usb 4-1: Using ep0 maxpacket: 16 [ 1249.673953][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.712302][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.737576][ T984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1249.737637][ T984] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1249.737663][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.748094][ T984] usb 4-1: config 0 descriptor?? [ 1249.932800][T27807] netlink: 28 bytes leftover after parsing attributes in process `syz.7.20087'. [ 1250.196149][ T984] microsoft 0003:045E:07DA.006D: unknown main item tag 0x0 [ 1250.196188][ T984] microsoft 0003:045E:07DA.006D: unknown main item tag 0x0 [ 1250.196216][ T984] microsoft 0003:045E:07DA.006D: unknown main item tag 0x0 [ 1250.204360][ T984] microsoft 0003:045E:07DA.006D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1250.273151][ T984] microsoft 0003:045E:07DA.006D: no inputs found [ 1250.273178][ T984] microsoft 0003:045E:07DA.006D: could not initialize ff, continuing anyway [ 1250.356593][T27823] dummy0: entered promiscuous mode [ 1250.357918][T27823] dummy0: left promiscuous mode [ 1250.475763][ T984] usb 4-1: USB disconnect, device number 72 [ 1251.085670][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1251.143919][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20103'. [ 1251.143957][T27855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20103'. [ 1251.143985][T27855] netlink: 'syz.7.20103': attribute type 18 has an invalid length. [ 1251.245709][ T89] hid-generic 0000:0004:0000.006E: unknown main item tag 0x0 [ 1251.245746][ T89] hid-generic 0000:0004:0000.006E: unknown main item tag 0x0 [ 1251.245772][ T89] hid-generic 0000:0004:0000.006E: unknown main item tag 0x0 [ 1251.249365][ T89] hid-generic 0000:0004:0000.006E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1251.666540][T27886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20116'. [ 1251.963806][T27903] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1251.996873][T27903] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1252.033607][T27903] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1252.173006][T27924] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20131'. [ 1252.720943][T27957] dummy0: entered promiscuous mode [ 1252.735434][T27957] dummy0: left promiscuous mode [ 1252.919965][T27971] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1252.926913][T27971] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1252.964055][T27971] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1252.971584][T27971] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1252.979483][T27971] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1252.991686][T27971] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1253.001601][T27971] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1253.008338][T27971] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1253.015780][T27971] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1253.033228][T27971] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1253.058261][T27971] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1253.071434][ T984] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1253.077405][T27971] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1253.085541][T27971] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1253.098462][T27971] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1253.238551][ T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.252381][ T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.263272][ T984] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1253.272354][ T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.292090][ T984] usb 6-1: config 0 descriptor?? [ 1253.368120][T28004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20164'. [ 1253.378042][T28004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20164'. [ 1253.388193][T28004] netlink: 'syz.6.20164': attribute type 18 has an invalid length. [ 1253.689677][ T984] pyra 0003:1E7D:2CF6.006F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1253.871107][ T984] pyra 0003:1E7D:2CF6.006F: couldn't init struct pyra_device [ 1253.871172][ T984] pyra 0003:1E7D:2CF6.006F: couldn't install mouse [ 1253.879301][ T984] pyra 0003:1E7D:2CF6.006F: probe with driver pyra failed with error -71 [ 1253.929106][ T984] usb 6-1: USB disconnect, device number 40 [ 1254.140123][T25554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1255.387486][T28072] ================================================================== [ 1255.395615][T28072] BUG: KASAN: slab-use-after-free in move_to_new_folio+0x145/0x490 [ 1255.403560][T28072] Read of size 8 at addr ffff8880323768c0 by task syz.5.20185/28072 [ 1255.411570][T28072] [ 1255.413927][T28072] CPU: 1 UID: 0 PID: 28072 Comm: syz.5.20185 Not tainted syzkaller #0 PREEMPT(full) [ 1255.413959][T28072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1255.413972][T28072] Call Trace: [ 1255.413981][T28072] [ 1255.413990][T28072] dump_stack_lvl+0x189/0x250 [ 1255.414029][T28072] ? rcu_is_watching+0x15/0xb0 [ 1255.414047][T28072] ? __kasan_check_byte+0x12/0x40 [ 1255.414078][T28072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1255.414099][T28072] ? rcu_is_watching+0x15/0xb0 [ 1255.414116][T28072] ? lock_release+0x4b/0x3e0 [ 1255.414159][T28072] ? __virt_addr_valid+0x1c8/0x5c0 [ 1255.414191][T28072] ? __virt_addr_valid+0x4a5/0x5c0 [ 1255.414215][T28072] print_report+0xca/0x240 [ 1255.414246][T28072] ? move_to_new_folio+0x145/0x490 [ 1255.414279][T28072] kasan_report+0x118/0x150 [ 1255.414310][T28072] ? move_to_new_folio+0x145/0x490 [ 1255.414348][T28072] kasan_check_range+0x2b0/0x2c0 [ 1255.414371][T28072] move_to_new_folio+0x145/0x490 [ 1255.414403][T28072] migrate_pages_batch+0x1d5f/0x35e0 [ 1255.414442][T28072] ? __pfx_compaction_free+0x10/0x10 [ 1255.414467][T28072] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1255.414494][T28072] ? __lock_acquire+0xab9/0xd20 [ 1255.414521][T28072] ? css_rstat_updated+0x23a/0x4f0 [ 1255.414566][T28072] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1255.414592][T28072] ? __pfx_compaction_free+0x10/0x10 [ 1255.414615][T28072] migrate_pages+0x1bcc/0x2930 [ 1255.414650][T28072] ? __pfx_compaction_free+0x10/0x10 [ 1255.414671][T28072] ? __pfx_compaction_alloc+0x10/0x10 [ 1255.414691][T28072] ? __pfx___might_resched+0x10/0x10 [ 1255.414720][T28072] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1255.414747][T28072] ? __pfx_migrate_pages+0x10/0x10 [ 1255.414773][T28072] ? rcu_is_watching+0x15/0xb0 [ 1255.414790][T28072] ? isolate_migratepages_block+0x394f/0x4160 [ 1255.414836][T28072] compact_zone+0x23e1/0x4ab0 [ 1255.414885][T28072] ? __pfx_compact_zone+0x10/0x10 [ 1255.414913][T28072] sysctl_compaction_handler+0x3a4/0x7b0 [ 1255.414938][T28072] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 1255.414975][T28072] ? trace_kmalloc+0x1f/0xd0 [ 1255.414992][T28072] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1255.415015][T28072] ? proc_sys_call_handler+0x3cf/0x700 [ 1255.415040][T28072] proc_sys_call_handler+0x4cb/0x700 [ 1255.415064][T28072] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1255.415087][T28072] ? __asan_memset+0x22/0x50 [ 1255.415120][T28072] iter_file_splice_write+0x975/0x10e0 [ 1255.415155][T28072] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1255.415189][T28072] ? rcu_read_lock_any_held+0xb3/0x120 [ 1255.415216][T28072] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1255.415237][T28072] direct_splice_actor+0x101/0x160 [ 1255.415261][T28072] splice_direct_to_actor+0x5a8/0xcc0 [ 1255.415293][T28072] ? __pfx_direct_splice_actor+0x10/0x10 [ 1255.415316][T28072] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1255.415345][T28072] do_splice_direct+0x181/0x270 [ 1255.415369][T28072] ? __pfx_do_splice_direct+0x10/0x10 [ 1255.415393][T28072] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1255.415421][T28072] ? rw_verify_area+0x255/0x4d0 [ 1255.415442][T28072] do_sendfile+0x4da/0x7e0 [ 1255.415472][T28072] ? __pfx_do_sendfile+0x10/0x10 [ 1255.415505][T28072] __se_sys_sendfile64+0xd9/0x190 [ 1255.415530][T28072] ? __pfx___se_sys_futex+0x10/0x10 [ 1255.415556][T28072] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1255.415583][T28072] ? do_syscall_64+0xbe/0xfa0 [ 1255.415612][T28072] do_syscall_64+0xfa/0xfa0 [ 1255.415638][T28072] ? lockdep_hardirqs_on+0x9c/0x150 [ 1255.415666][T28072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.415688][T28072] ? clear_bhb_loop+0x60/0xb0 [ 1255.415712][T28072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.415733][T28072] RIP: 0033:0x7f63d678eec9 [ 1255.415753][T28072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.415772][T28072] RSP: 002b:00007f63d762f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1255.415797][T28072] RAX: ffffffffffffffda RBX: 00007f63d69e5fa0 RCX: 00007f63d678eec9 [ 1255.415813][T28072] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 1255.415828][T28072] RBP: 00007f63d6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1255.415842][T28072] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1255.415855][T28072] R13: 00007f63d69e6038 R14: 00007f63d69e5fa0 R15: 00007ffe8ee01998 [ 1255.415880][T28072] [ 1255.415889][T28072] [ 1255.841919][T28072] Allocated by task 15147: [ 1255.846345][T28072] kasan_save_track+0x3e/0x80 [ 1255.851043][T28072] __kasan_slab_alloc+0x6c/0x80 [ 1255.855903][T28072] kmem_cache_alloc_noprof+0x367/0x6e0 [ 1255.861405][T28072] gfs2_glock_get+0x263/0xec0 [ 1255.866096][T28072] gfs2_inode_lookup+0x215/0xb10 [ 1255.871046][T28072] gfs2_dir_search+0x168/0x220 [ 1255.875811][T28072] gfs2_lookupi+0x3d9/0x5a0 [ 1255.880319][T28072] init_journal+0x54a/0x2260 [ 1255.884915][T28072] init_inodes+0xdb/0x320 [ 1255.889243][T28072] gfs2_fill_super+0x1923/0x20d0 [ 1255.894224][T28072] get_tree_bdev_flags+0x40e/0x4d0 [ 1255.899336][T28072] gfs2_get_tree+0x51/0x1e0 [ 1255.903845][T28072] vfs_get_tree+0x92/0x2b0 [ 1255.908261][T28072] do_new_mount+0x302/0x9e0 [ 1255.912770][T28072] __se_sys_mount+0x313/0x410 [ 1255.917466][T28072] do_syscall_64+0xfa/0xfa0 [ 1255.921984][T28072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.927880][T28072] [ 1255.930201][T28072] Freed by task 15168: [ 1255.934265][T28072] kasan_save_track+0x3e/0x80 [ 1255.938964][T28072] __kasan_save_free_info+0x46/0x50 [ 1255.944169][T28072] __kasan_slab_free+0x5c/0x80 [ 1255.948932][T28072] kmem_cache_free+0x19b/0x690 [ 1255.953715][T28072] rcu_core+0xcab/0x1770 [ 1255.957964][T28072] handle_softirqs+0x286/0x870 [ 1255.962743][T28072] __irq_exit_rcu+0xca/0x1f0 [ 1255.967338][T28072] irq_exit_rcu+0x9/0x30 [ 1255.971587][T28072] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1255.977235][T28072] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1255.983216][T28072] [ 1255.985541][T28072] Last potentially related work creation: [ 1255.991254][T28072] kasan_save_stack+0x3e/0x60 [ 1255.995939][T28072] kasan_record_aux_stack+0xbd/0xd0 [ 1256.001153][T28072] call_rcu+0x157/0x9c0 [ 1256.005305][T28072] __gfs2_glock_free+0xb44/0xc90 [ 1256.010246][T28072] gfs2_glock_free+0x3c/0xa0 [ 1256.014837][T28072] process_scheduled_works+0xae1/0x17b0 [ 1256.020483][T28072] worker_thread+0x8a0/0xda0 [ 1256.025084][T28072] kthread+0x711/0x8a0 [ 1256.029189][T28072] ret_from_fork+0x4bc/0x870 [ 1256.033785][T28072] ret_from_fork_asm+0x1a/0x30 [ 1256.038556][T28072] [ 1256.040881][T28072] Second to last potentially related work creation: [ 1256.047458][T28072] kasan_save_stack+0x3e/0x60 [ 1256.052136][T28072] kasan_record_aux_stack+0xbd/0xd0 [ 1256.057351][T28072] insert_work+0x3d/0x330 [ 1256.061688][T28072] __queue_work+0xcd2/0xfb0 [ 1256.066193][T28072] queue_delayed_work_on+0x18b/0x280 [ 1256.071473][T28072] clear_glock+0x116/0x220 [ 1256.075895][T28072] glock_hash_walk+0x109/0x1c0 [ 1256.080680][T28072] gfs2_gl_hash_clear+0xfd/0x660 [ 1256.085625][T28072] gfs2_fill_super+0x18af/0x20d0 [ 1256.090564][T28072] get_tree_bdev_flags+0x40e/0x4d0 [ 1256.095682][T28072] gfs2_get_tree+0x51/0x1e0 [ 1256.100186][T28072] vfs_get_tree+0x92/0x2b0 [ 1256.104603][T28072] do_new_mount+0x302/0x9e0 [ 1256.109137][T28072] __se_sys_mount+0x313/0x410 [ 1256.113824][T28072] do_syscall_64+0xfa/0xfa0 [ 1256.118338][T28072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.124236][T28072] [ 1256.126560][T28072] The buggy address belongs to the object at ffff8880323764f8 [ 1256.126560][T28072] which belongs to the cache gfs2_glock(aspace) of size 1224 [ 1256.141307][T28072] The buggy address is located 968 bytes inside of [ 1256.141307][T28072] freed 1224-byte region [ffff8880323764f8, ffff8880323769c0) [ 1256.155192][T28072] [ 1256.157516][T28072] The buggy address belongs to the physical page: [ 1256.163930][T28072] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032374a90 pfn:0x32374 [ 1256.174001][T28072] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1256.182589][T28072] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1256.190217][T28072] page_type: f5(slab) [ 1256.194235][T28072] raw: 00fff00000000040 ffff88802032f3c0 dead000000000122 0000000000000000 [ 1256.203148][T28072] raw: ffff888032374a90 00000000800c0008 00000000f5000000 0000000000000000 [ 1256.211837][T28072] head: 00fff00000000040 ffff88802032f3c0 dead000000000122 0000000000000000 [ 1256.220526][T28072] head: ffff888032374a90 00000000800c0008 00000000f5000000 0000000000000000 [ 1256.229200][T28072] head: 00fff00000000002 ffffea0000c8dd01 00000000ffffffff 00000000ffffffff [ 1256.237883][T28072] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1256.246546][T28072] page dumped because: kasan: bad access detected [ 1256.252969][T28072] page_owner tracks the page as allocated [ 1256.258697][T28072] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8100, tgid 8099 (syz.1.962), ts 183114667571, free_ts 175410385342 [ 1256.279201][T28072] post_alloc_hook+0x240/0x2a0 [ 1256.283989][T28072] get_page_from_freelist+0x2365/0x2440 [ 1256.289628][T28072] __alloc_frozen_pages_noprof+0x181/0x370 [ 1256.295451][T28072] alloc_pages_mpol+0x232/0x4a0 [ 1256.300307][T28072] allocate_slab+0x96/0x3a0 [ 1256.304815][T28072] ___slab_alloc+0xe94/0x1920 [ 1256.309508][T28072] __slab_alloc+0x65/0x100 [ 1256.313941][T28072] kmem_cache_alloc_noprof+0x3f9/0x6e0 [ 1256.319411][T28072] gfs2_glock_get+0x263/0xec0 [ 1256.324105][T28072] gfs2_inode_lookup+0x215/0xb10 [ 1256.329051][T28072] init_sb+0xa30/0x12c0 [ 1256.333212][T28072] gfs2_fill_super+0x15ef/0x20d0 [ 1256.338152][T28072] get_tree_bdev_flags+0x40e/0x4d0 [ 1256.343270][T28072] gfs2_get_tree+0x51/0x1e0 [ 1256.347785][T28072] vfs_get_tree+0x92/0x2b0 [ 1256.352206][T28072] do_new_mount+0x302/0x9e0 [ 1256.356710][T28072] page last free pid 6168 tgid 6168 stack trace: [ 1256.363036][T28072] __free_frozen_pages+0xbc4/0xd30 [ 1256.368151][T28072] __slab_free+0x2e7/0x390 [ 1256.372571][T28072] qlist_free_all+0x97/0x140 [ 1256.377245][T28072] kasan_quarantine_reduce+0x148/0x160 [ 1256.382704][T28072] __kasan_slab_alloc+0x22/0x80 [ 1256.387553][T28072] __kmalloc_noprof+0x3c3/0x7f0 [ 1256.392415][T28072] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1256.397969][T28072] tomoyo_path2_perm+0x288/0x680 [ 1256.402940][T28072] tomoyo_path_rename+0x141/0x190 [ 1256.408051][T28072] security_path_rename+0x250/0x490 [ 1256.413335][T28072] do_renameat2+0x52b/0xa80 [ 1256.417845][T28072] __x64_sys_rename+0x82/0x90 [ 1256.422526][T28072] do_syscall_64+0xfa/0xfa0 [ 1256.427046][T28072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.432939][T28072] [ 1256.435262][T28072] Memory state around the buggy address: [ 1256.440892][T28072] ffff888032376780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1256.448954][T28072] ffff888032376800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1256.457014][T28072] >ffff888032376880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1256.465083][T28072] ^ [ 1256.471360][T28072] ffff888032376900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1256.479435][T28072] ffff888032376980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1256.487510][T28072] ================================================================== [ 1256.495656][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.512480][T28072] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1256.519733][T28072] CPU: 0 UID: 0 PID: 28072 Comm: syz.5.20185 Not tainted syzkaller #0 PREEMPT(full) [ 1256.529216][T28072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1256.539372][T28072] Call Trace: [ 1256.542668][T28072] [ 1256.545691][T28072] dump_stack_lvl+0x99/0x250 [ 1256.550293][T28072] ? __asan_memcpy+0x40/0x70 [ 1256.554924][T28072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1256.560131][T28072] ? __pfx__printk+0x10/0x10 [ 1256.564737][T28072] vpanic+0x237/0x6d0 [ 1256.568724][T28072] ? __pfx_vpanic+0x10/0x10 [ 1256.573233][T28072] ? preempt_schedule+0xae/0xc0 [ 1256.578213][T28072] ? __pfx_preempt_schedule+0x10/0x10 [ 1256.583710][T28072] panic+0xb9/0xc0 [ 1256.587449][T28072] ? __pfx_panic+0x10/0x10 [ 1256.591876][T28072] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1256.597808][T28072] ? move_to_new_folio+0x145/0x490 [ 1256.602977][T28072] check_panic_on_warn+0x89/0xb0 [ 1256.607938][T28072] ? move_to_new_folio+0x145/0x490 [ 1256.613150][T28072] end_report+0x78/0x160 [ 1256.617412][T28072] kasan_report+0x129/0x150 [ 1256.621923][T28072] ? move_to_new_folio+0x145/0x490 [ 1256.627049][T28072] kasan_check_range+0x2b0/0x2c0 [ 1256.631997][T28072] move_to_new_folio+0x145/0x490 [ 1256.637038][T28072] migrate_pages_batch+0x1d5f/0x35e0 [ 1256.642344][T28072] ? __pfx_compaction_free+0x10/0x10 [ 1256.647652][T28072] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1256.653319][T28072] ? __lock_acquire+0xab9/0xd20 [ 1256.658185][T28072] ? css_rstat_updated+0x23a/0x4f0 [ 1256.663343][T28072] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1256.668763][T28072] ? __pfx_compaction_free+0x10/0x10 [ 1256.674076][T28072] migrate_pages+0x1bcc/0x2930 [ 1256.678885][T28072] ? __pfx_compaction_free+0x10/0x10 [ 1256.684205][T28072] ? __pfx_compaction_alloc+0x10/0x10 [ 1256.689588][T28072] ? __pfx___might_resched+0x10/0x10 [ 1256.694889][T28072] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1256.700795][T28072] ? __pfx_migrate_pages+0x10/0x10 [ 1256.705994][T28072] ? rcu_is_watching+0x15/0xb0 [ 1256.710761][T28072] ? isolate_migratepages_block+0x394f/0x4160 [ 1256.716860][T28072] compact_zone+0x23e1/0x4ab0 [ 1256.721658][T28072] ? __pfx_compact_zone+0x10/0x10 [ 1256.726738][T28072] sysctl_compaction_handler+0x3a4/0x7b0 [ 1256.732403][T28072] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 1256.738588][T28072] ? trace_kmalloc+0x1f/0xd0 [ 1256.743187][T28072] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1256.748746][T28072] ? proc_sys_call_handler+0x3cf/0x700 [ 1256.754218][T28072] proc_sys_call_handler+0x4cb/0x700 [ 1256.759530][T28072] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1256.765341][T28072] ? __asan_memset+0x22/0x50 [ 1256.769951][T28072] iter_file_splice_write+0x975/0x10e0 [ 1256.775517][T28072] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1256.781454][T28072] ? rcu_read_lock_any_held+0xb3/0x120 [ 1256.787012][T28072] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1256.792911][T28072] direct_splice_actor+0x101/0x160 [ 1256.798030][T28072] splice_direct_to_actor+0x5a8/0xcc0 [ 1256.803502][T28072] ? __pfx_direct_splice_actor+0x10/0x10 [ 1256.809142][T28072] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1256.815048][T28072] do_splice_direct+0x181/0x270 [ 1256.819909][T28072] ? __pfx_do_splice_direct+0x10/0x10 [ 1256.825375][T28072] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1256.831366][T28072] ? rw_verify_area+0x255/0x4d0 [ 1256.836223][T28072] do_sendfile+0x4da/0x7e0 [ 1256.840653][T28072] ? __pfx_do_sendfile+0x10/0x10 [ 1256.845685][T28072] __se_sys_sendfile64+0xd9/0x190 [ 1256.850713][T28072] ? __pfx___se_sys_futex+0x10/0x10 [ 1256.855920][T28072] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1256.861562][T28072] ? do_syscall_64+0xbe/0xfa0 [ 1256.866426][T28072] do_syscall_64+0xfa/0xfa0 [ 1256.870953][T28072] ? lockdep_hardirqs_on+0x9c/0x150 [ 1256.876199][T28072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.882284][T28072] ? clear_bhb_loop+0x60/0xb0 [ 1256.887059][T28072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.892961][T28072] RIP: 0033:0x7f63d678eec9 [ 1256.897382][T28072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.917079][T28072] RSP: 002b:00007f63d762f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1256.925594][T28072] RAX: ffffffffffffffda RBX: 00007f63d69e5fa0 RCX: 00007f63d678eec9 [ 1256.933574][T28072] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 1256.941568][T28072] RBP: 00007f63d6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1256.949542][T28072] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1256.957518][T28072] R13: 00007f63d69e6038 R14: 00007f63d69e5fa0 R15: 00007ffe8ee01998 [ 1256.965506][T28072] [ 1256.969938][T28072] Kernel Offset: disabled [ 1256.974257][T28072] Rebooting in 86400 seconds..