last executing test programs: 7m1.598066828s ago: executing program 32 (id=36): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) 5m31.809330679s ago: executing program 33 (id=628): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 4m16.939338522s ago: executing program 34 (id=1162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400002, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) 3m42.888285287s ago: executing program 35 (id=1320): r0 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000200), &(0x7f0000000580)=[r2], &(0x7f00000000c0)}) 1m34.642609277s ago: executing program 2 (id=1894): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x2a10008, &(0x7f0000000100)=ANY=[], 0xf, 0xab, &(0x7f0000000340)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40403, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x6, 0x0, 0x0, 0xa, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac6390b86fa00000000004faa2ae2c084a0ea000000000000008000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b732672082200000000000ff1e0000f1fff3fffff2ff00", [0x4, 0x9b8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m33.91206563s ago: executing program 2 (id=1897): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000400)=ANY=[], 0x0) syz_extract_tcp_res(0x0, 0x40d, 0x8) 1m32.842766162s ago: executing program 2 (id=1902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 1m32.489876222s ago: executing program 40 (id=1902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 1m1.581477153s ago: executing program 5 (id=2010): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200810, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) preadv(r0, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) 1m1.302259369s ago: executing program 5 (id=2014): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 1m1.018685545s ago: executing program 5 (id=2017): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x6b, '\x00', 0x5, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 59.838642255s ago: executing program 5 (id=2024): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x89, 0x8005, 0x0, 0x0, 0x20, 0xd, "2dbaf86d3bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf112ff4117639c2eb4b78c660e677df701905b9aafab4afb4f755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4166810017000800d300000000010900", [0x204, 0x400]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0xfe94}], 0x1, 0x7, 0x0, 0x5) 58.926542387s ago: executing program 5 (id=2029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x4011, &(0x7f0000000180), 0x0, 0x65b, &(0x7f0000000880)="$eJzs3c9vG1kdAPDvjJ04PxaSrRCwHNgIhLYSbLLJ7qIKIe3mwmlVtcA/EJq0quo2VRMkUiqRSHBEXDggceJS/guoxJUTtx64cEKVKkA5UFTRWY09kzhOHDtOHTfO5yM5mZlnv/dG8tfvzfN74wAurLn8TxrxTkTcTyJmWtKqUSTONZ+3+59HN/JHEln2o38l8egXyXZrXknxf7p48f9nmkcuVQ6Xu7H18M5Kvb72oNhf2Lx7f2Fj6+H7t++u3Fq7tXZv6btLVz7+6OMrix+c6vzyGowV259NFBu/f5ks/vHvV5P4NF4VdcvPq/21tZ5y72wu5iJrenEgIY240vMZvNn+O1O+Txpq+RsiqQ6zRpxEGhGfFDHylZiJSuwH60z86vpQKwcMVJZEo42ay4CLJ4mOSbeLDvMRSRMDrRNwFsp+QHltf9R18GHpILskwBl5vhwR18v4H4uIMv6rzbHBmGiMDUztxr/3Py2aI1+nG5lrmqtE/PUvV3+ZP6LDOBwwGNs75Sh3e/ufNOJ/NprXAFO7aes4bywXvYC0+J7gh+0Zdx88b5hr2xf/cHa2dyLiq824O9irPyL+n+6npkXslvH/kz7L7zP+3+qzOAAAAAAAABhpT5Yj4jtHzf9L9+b/jFcipnaTA9//T0fEp6+h/O7f/6XPio3jF9sBJ/Z8OeL7R87/3ZsNMFsp9r7QmA8wlty8XV/7ICK+GBGXY6yW7y+25ds6l+D9X1/6Xafy8/gv5//lj7z8ci5gkdOzattcotWVzZXTnjcQ8Xwn4mvVPP7fLY4cnP+Xt/9JlO3//rSbPL7v91jGpW89vtYprXv8A4OS/SHivSPb//3udnL8/TkWGv2BhbJXcNjXf/6bP3UqX/zD8OTt/9Tx8V9LWu/Xs9E8ONFj/uMR8eFWNeuU3m//fzz5caXMP/ezlc3NB4sR48lnh48v9VhZGHFlPJTxksf/5W8eP/631/9vicPJiNjuscwvv5r+R6c07T8MTx7/q8e3/zMH2/+Tbyw9nv1zp/Kv9dT+f9Ro0y8XR4z/QavD9+PoNUCHUl0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOOfSiHgrknR+bztN5+cjpiPiSzGV1tc3Nr99c/2n91aj8evfszGWlr/0O9PcT8rf/59t2V9q2/8wIt6OiN9WJhv78zfW66vDPnkAAAAAAAAAAAAAAAAAAAB4Q0w31vxntfb1/7l/VoZdO2DgqsV/8Q4XT7XvV2a111oR4Mz1H//AebZzovgfG2hdgLPXOf5fvMwa2g7/4BsDrxNwNnpu///mch9GTZ/X/74ugBFg/A8uqh7H9CYGXQ9gGLT/AAAAAAAwUt5+98nTJCK2vzfZeOTGi7TJodYMGLS0S7rPABhd5vDCxVVdH3YNgGGxoB9I9rb+177Yv6Hz7P9kMBUCAAAAAAAAAAAAAA55753O6/+tDYDRduz6/243BwDOtWPW/x+1sMftAmCEdP7pD+v6YNS5xge6tfbW/wMAAAAAAAAAAADAG2Di4Z2Ven3twcbW+dv4pK9XVSJiiJXfXjldPlltWJWfiE5JrwZT6FhEDPs91m1jJ8uynp6cB1u9vpZlEd2fXN6CY4gn2P2jozbgjyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDp8wAAAP//bCMbTw==") close(0x3) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 58.474720174s ago: executing program 5 (id=2034): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000b00)="90897667cf137b057a2d399e1a6a56cda6e968033fef6c258f47125b303915a782acf971740c769cfe1004611108d7e1aa4fa1f2418591c1447ca414c41ce520a8", 0x41) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x8001, 0x2) 58.042887869s ago: executing program 41 (id=2034): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000b00)="90897667cf137b057a2d399e1a6a56cda6e968033fef6c258f47125b303915a782acf971740c769cfe1004611108d7e1aa4fa1f2418591c1447ca414c41ce520a8", 0x41) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x8001, 0x2) 19.152981144s ago: executing program 3 (id=2330): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x31, 0xffffffffffffffff, 0x8000000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000, 0x1}) 18.866752861s ago: executing program 3 (id=2333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffd) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x4, 0xfb, 0x0, 0x10001, 0x2, 0x3, 0xd4, 0x7, 0x2, 0x6, 0x1, 0x0, 0x7, 0x3, 0x65, 0x5, 0x9, 0xc, '\x00', 0x8}) 18.52395207s ago: executing program 3 (id=2336): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) close_range(r1, r1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) 18.401663708s ago: executing program 3 (id=2337): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x10fff9, 0x10fff9) 17.897166387s ago: executing program 3 (id=2342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fcf000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0xc, 0x0, 0x0) 16.088617823s ago: executing program 3 (id=2355): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = io_uring_setup(0x1962, &(0x7f0000000880)={0x0, 0x3, 0x100, 0x1, 0x398}) close(r0) clock_nanosleep(0xb, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x341, 0xfffffffc) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) 15.419243291s ago: executing program 42 (id=2355): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = io_uring_setup(0x1962, &(0x7f0000000880)={0x0, 0x3, 0x100, 0x1, 0x398}) close(r0) clock_nanosleep(0xb, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x341, 0xfffffffc) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) 5.99326033s ago: executing program 9 (id=2420): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0xde106, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x81657b94fb2d95c8, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xfc, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "d25e6fa6"}, @global=@item_012={0x1, 0x1, 0x0, "1c"}]}}, 0x0}, 0x0) 3.931191791s ago: executing program 4 (id=2431): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000940)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) chown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 3.849912755s ago: executing program 9 (id=2433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x74, 0x2c, 0xd3f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xfff1, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0xffff7fff, 0x9, 0x3ff, {0x3, 0x2, 0x8, 0x46a8, 0x5d, 0xe457}, {0xe, 0x1, 0x800, 0x570, 0x3ff, 0xbff}, 0x9, 0x3, 0x9}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4005}, 0x20040054) 3.655889977s ago: executing program 4 (id=2436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @remote, 'geneve0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010100}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) 3.383922442s ago: executing program 1 (id=2437): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r2, 0x3}, 0x8) 3.266725069s ago: executing program 4 (id=2438): timer_create(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 3.057811021s ago: executing program 9 (id=2440): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file1\x00', 0x180c850, &(0x7f0000000080)={[{@fat=@umask={'umask', 0x3d, 0x5}}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_mixed}, {@fat=@discard}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1ff}}, {@rodir}, {@shortname_lower}, {@shortname_win95}]}, 0x1, 0x371, &(0x7f0000002980)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x141000, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.324456214s ago: executing program 1 (id=2443): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="2a997dee7022a69a668b5d91e4fc5efe77bcb02013af3a43884aa6fd8b38b1bc00000101000000db"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 2.154757154s ago: executing program 9 (id=2444): socket$vsock_stream(0x28, 0x5, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100)={0x32, 0x1, '\x00', [@generic={0x99, 0x9, "c1bfcb8178a25c2b67"}]}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 1.903309899s ago: executing program 4 (id=2446): r0 = socket(0x1d, 0x2, 0x6) socket$packet(0x11, 0xa, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000009c0)=[{0x0, 0x500}, {&(0x7f00000008c0)="5e725cf1ff", 0x5}], 0x2}, 0x40000c0) 1.436882806s ago: executing program 8 (id=2449): io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000440)=@can, 0x80, &(0x7f0000001b00)=[{&(0x7f00000004c0)="ffd10de4d2edffe8711eb781ab0a1d8f14e5859b4b9682eeece6bad038380e40d6c4052d42fe6d7cd70704d84261be59e9104e1e3932946a7464ee4be26f6930a44eba69da2f2b061b7d44cf6b6a4a6ac0b484aed27d2e35956678d41c0b21139416aef9ea59e42d1c369a5b4d41cace4460bdf9aaf8100d76f1aef2fdf1c53b69b0d1ef982e0b7c1baed9799865d197ab65a1a2828524d0600ac44bfbe32a30b39e3ab68aff361e00f236ff879dd2a3f57be94480a2c7d6e4abad92a48a5348735dfdd840e9567a12449e0ff34ae4e7edd94a544c4c62278eaad680b9718a", 0xdf}, {&(0x7f0000000680)="740a661ddefdd833db87fea3221f325d477ba3298cf58dcdff71a1ccb4cfeec7668ac43209cfbbadb9db73917af02c0e0cbbebbf39999060775003a65e8a49c62a3d7b7bff284dc74b2b3d82592263643ac5e6fc087ff4b61fd8da6b29b0cb0d47bcd8a07056b4862c63c9773e18d36fa6e5b44a8a5243d7367d33ce065607418b5eeff581e073af852aac04c68e089b970571ad5a1ff7d7bbb5b8aceb261254c6408d2079ec1b71433972ec8f41d2b7456af0cc3ab953cddf976d43c112ba28387c921b266b0102ab317e4aca3b155f9d3004fdb7faa57b01e883955d7690af86fc411f4c80db449e1c10e5bc192fed59dbbb6516fa69b8ee", 0xf9}, {&(0x7f0000000780)="cb2e86e6eda2a775bafcf81efc0fa194b9d94e558ff271f01f3bd3c0df4a1238f5fd5b12d9d04ec1cd518121a95a66d649ce9011ba40b8f378dcf22f705bb12cfaf3a9d8f966a46ba6d8f82b0a33feb30554a3562ef6a38f3ad07f6c5a9db7c789b12c0dd5c903d32d0bbd6be1692cdc", 0x70}, {&(0x7f0000000980)="e678602b4c8336e4ca5672904b573eeae05378d2b433fb70fa58e188515d1a3b8ddcd6f471e46ec62d80be62bb449c530ec8d903df2a3127fbaffd177605d4376172ff72218aed5109bd25a8db1d338f8c2120991cd25637989c4a02b7ae82c63ed70bf9c150bcd17ad7c73da05d5f52c458888ae92bd43140d74e2a4e64a2d64da931f5512dc37189379c0dd62126ca01dcf20ac6e131a8433286d0f907769428886f28cb461a07bd6af7f3cbc46c77880c19f1a70e202e09c067e7e5dcea79455759721697b2fd2eb44ee4b91fbc2c8d", 0xd1}, {&(0x7f0000000180)="0e6e8b20913e64a69513e7ccf42c45b206933583ceabc3a589e7fa4e18609413818d13035bf45941da", 0x29}, {&(0x7f0000000240)="748879f28fc9bad9bcdc8236", 0xc}, {&(0x7f0000000b00)="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", 0x3ac}], 0x7}}], 0x1, 0x881) 1.262734206s ago: executing program 1 (id=2450): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) 1.181733801s ago: executing program 8 (id=2451): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0xc}], 0x1, 0x4044810) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.01627195s ago: executing program 1 (id=2452): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r3, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 871.111639ms ago: executing program 8 (id=2453): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_virt_wifi\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@multicast, @random="bdfec6d04adb", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 847.87477ms ago: executing program 4 (id=2454): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x25000, 0xe1, &(0x7f0000000080)=""/225}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 775.853484ms ago: executing program 1 (id=2455): mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8010, &(0x7f0000000100)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 550.567908ms ago: executing program 8 (id=2456): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x208008de, &(0x7f0000001c00)=ANY=[@ANYBLOB="e2ce076109da3e662cd0cd0c6af4947ac7ee33394ef340bbc6bf4ff412f817dde1ff079becca6d959a7ad384e20ed46286b581c1392d07027d03e18d4f073fa87781fb69503fc665836795df211a47513b64385de2d5fda59abf8cb5c03eca37362c74156f6b969749be92133ec292f37641946384a33bda79b724236c95ad97db8bcbb97001027004324e9e3d0ebd97ef7338e6e921656a2442d7ad2a3e37d31d6e3d01bb7a024b", @ANYRESOCT, @ANYBLOB=',discard,umask=00000000000000000005676,iocharset=iso8859-1,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp949,dmask=00000000000000000000001,iocharset=cp863,uid=', @ANYRESHEX=0xee00, @ANYBLOB="8186902c06"], 0x80, 0x14ff, &(0x7f0000000580)="$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") r0 = socket(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0xfffffff6, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff7c, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x11}, 0x7}], 0x50, 0x102, 0x0) 550.213938ms ago: executing program 9 (id=2457): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 494.285251ms ago: executing program 4 (id=2458): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000002fc0)={0x40, 0x1a, 0x25, {0x25, 0x21, "ccf59110cacccb3c449375511cb153e69b5b00aa71ac7462cab49ac93eaf6287b6105d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0x0, 0x0) 296.205332ms ago: executing program 8 (id=2459): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[], 0x8b, 0x2cb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000002c0)='./bus\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0) 295.827442ms ago: executing program 9 (id=2460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x44, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x6, 0x0, 0x4, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x6, 0x4, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xd8, 0x4, 0x2, r2}) 94.684614ms ago: executing program 1 (id=2461): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="8011000042000701fe"], 0x1180}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 0s ago: executing program 8 (id=2462): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_pidfd_open(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x8, 0x1, 0x7fff, 0x1, 0x7, 0x9, 0xa4, 0xffc, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xffbffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0xfffffffd, 0xe, 0x2b12, 0x1100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x4000001, 0x1, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x1, 0x7f, 0x7, 0x4c3e, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0xfffffffe, 0x400, 0x9, 0x4, 0x7, 0x4009, 0x9a, 0x4, 0x100002, 0x8, 0x752, 0xfffffffc, 0x3, 0x0, 0x10001, 0x8, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x6, 0x7, 0x3, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x40000005, 0x8, 0x8000000, 0x4, 0x2, 0x80003b, 0x4, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0x3, 0xffffffff]}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 378.440353][T10997] syz.1.1758: attempt to access beyond end of device [ 378.440353][T10997] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 378.467356][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.474271][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.747812][T10417] syz-executor: attempt to access beyond end of device [ 378.747812][T10417] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 379.644021][T11073] loop2: detected capacity change from 0 to 512 [ 379.698214][T11073] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 379.737232][T11073] UDF-fs: Scanning with blocksize 512 failed [ 379.776721][T11073] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 379.800149][T11073] UDF-fs: Scanning with blocksize 1024 failed [ 379.872522][T11073] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 379.885201][T11073] UDF-fs: Scanning with blocksize 2048 failed [ 379.922800][T11073] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 379.968032][T11073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.276498][T11073] syz.2.1776: attempt to access beyond end of device [ 380.276498][T11073] loop2: rw=2049, sector=520, nr_sectors = 120 limit=512 [ 380.291647][T11058] loop8: detected capacity change from 0 to 40427 [ 380.335207][T11058] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 380.365533][T11058] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 380.408275][T11064] loop5: detected capacity change from 0 to 32768 [ 380.423417][T11058] F2FS-fs (loop8): invalid crc value [ 380.486187][T11058] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 380.564395][T11064] XFS (loop5): Mounting V5 Filesystem [ 380.567579][ T6032] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.666945][ T6032] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.750779][T11064] XFS (loop5): Ending clean mount [ 380.757683][T11058] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 380.764770][T11058] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 380.789983][T11064] XFS (loop5): Quotacheck needed: Please wait. [ 380.941270][T11064] XFS (loop5): Quotacheck: Done. [ 381.017450][ T6032] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.059551][ T27] audit: type=1800 audit(1771011967.411:101): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1770" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 381.068025][ T6032] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.101629][ T27] audit: type=1800 audit(1771011967.441:102): pid=11064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1773" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 381.196103][ T9104] syz-executor: attempt to access beyond end of device [ 381.196103][ T9104] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 381.324835][T11102] loop2: detected capacity change from 0 to 512 [ 381.371509][ T6032] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.389118][T11102] EXT4-fs: Ignoring removed nobh option [ 381.418299][T11102] EXT4-fs (loop2): Test dummy encryption mode enabled [ 381.446204][ T6032] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.500523][T11102] EXT4-fs error (device loop2): __ext4_iget:5095: inode #11: block 1: comm syz.2.1779: invalid block [ 381.586699][T11102] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1779: couldn't read orphan inode 11 (err -117) [ 381.653112][T11102] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 381.676279][T10490] XFS (loop5): Unmounting Filesystem [ 381.901974][ T6032] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.964707][T10384] EXT4-fs (loop2): unmounting filesystem. [ 381.976071][ T6032] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.667483][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.680590][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.693125][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.712472][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.720696][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 382.739561][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.935573][T11131] device batadv_slave_1 entered promiscuous mode [ 383.019236][T11130] device batadv_slave_1 left promiscuous mode [ 383.077001][T11139] input: syz1 as /devices/virtual/input/input19 [ 383.547763][T11149] loop5: detected capacity change from 0 to 4096 [ 383.785293][ T9277] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 383.987773][T11127] chnl_net:caif_netlink_parms(): no params data found [ 384.017557][ T9277] usb 10-1: Using ep0 maxpacket: 16 [ 384.046752][ T9277] usb 10-1: config 0 has no interfaces? [ 384.066846][ T9277] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 384.088172][T10490] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 384.095846][T10490] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 384.096559][ T9277] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 384.124920][ T9277] usb 10-1: Manufacturer: syz [ 384.166173][ T9277] usb 10-1: config 0 descriptor?? [ 384.306312][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1801'. [ 384.473758][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1801'. [ 384.496933][T11127] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.504461][T11127] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.543687][T11127] device bridge_slave_0 entered promiscuous mode [ 384.605687][T11127] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.617784][T11127] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.649742][T11127] device bridge_slave_1 entered promiscuous mode [ 384.785732][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 384.986502][T11127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.051845][T11127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.397929][ T6032] device hsr_slave_0 left promiscuous mode [ 385.418743][ T6032] device hsr_slave_1 left promiscuous mode [ 385.445017][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.470963][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.500818][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.520518][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.552465][ T6032] device bridge_slave_1 left promiscuous mode [ 385.573943][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.603078][ T6032] device bridge_slave_0 left promiscuous mode [ 385.623278][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.699249][ T6032] device veth1_macvtap left promiscuous mode [ 385.716912][ T6032] device veth0_macvtap left promiscuous mode [ 385.726575][ T6032] device veth1_vlan left promiscuous mode [ 385.740024][ T6032] device veth0_vlan left promiscuous mode [ 386.069769][T11192] loop8: detected capacity change from 0 to 32768 [ 386.145858][ T6045] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 386.184561][T11192] XFS (loop8): Mounting V5 Filesystem [ 386.359934][T11192] XFS (loop8): Ending clean mount [ 386.398799][T11192] XFS (loop8): Quotacheck needed: Please wait. [ 386.483754][ T126] usb 10-1: USB disconnect, device number 5 [ 386.504011][T11192] XFS (loop8): Quotacheck: Done. [ 386.556308][ T27] audit: type=1800 audit(1771011972.911:103): pid=11192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1805" name="file1" dev="loop8" ino=9286 res=0 errno=0 [ 386.875586][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 386.989254][T11211] loop2: detected capacity change from 0 to 32768 [ 387.108493][T11211] ERROR: (device loop2): dbFindCtl: Corrupt dmapctl page [ 387.108493][T11211] [ 387.130610][T11211] ERROR: (device loop2): remounting filesystem as read-only [ 387.163197][ T9104] XFS (loop8): Unmounting Filesystem [ 387.204378][T11211] ialloc: diAlloc returned -5! [ 387.834157][T11238] loop2: detected capacity change from 0 to 512 [ 387.861943][T11238] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 387.926783][T11238] EXT4-fs (loop2): 1 truncate cleaned up [ 387.944445][T11238] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 388.019695][T11238] EXT4-fs (loop2): shut down requested (2) [ 388.073787][ T6032] team0 (unregistering): Port device team_slave_1 removed [ 388.115568][T10384] EXT4-fs (loop2): unmounting filesystem. [ 388.201365][ T6032] team0 (unregistering): Port device team_slave_0 removed [ 388.262170][ T6032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.373079][ T6032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.467675][T11248] loop2: detected capacity change from 0 to 512 [ 388.507272][T11248] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.549927][T11248] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1817: inode has both inline data and extents flags [ 388.572263][T11248] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1817: couldn't read orphan inode 15 (err -117) [ 388.592010][T11248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 388.747460][T10384] EXT4-fs (loop2): unmounting filesystem. [ 388.945504][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 389.198536][ T6032] bond0 (unregistering): Released all slaves [ 389.363329][T11127] team0: Port device team_slave_0 added [ 389.419454][T11233] netlink: 'syz.9.1812': attribute type 21 has an invalid length. [ 389.593294][T11127] team0: Port device team_slave_1 added [ 389.727063][T11127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.771846][T11127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.803290][T11127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.824134][T11127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.875231][T11127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.005418][T11127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.200064][T11127] device hsr_slave_0 entered promiscuous mode [ 390.243018][T11127] device hsr_slave_1 entered promiscuous mode [ 390.670760][T11298] loop2: detected capacity change from 0 to 256 [ 390.698407][T11305] loop5: detected capacity change from 0 to 512 [ 390.737128][T11305] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 390.756275][T11305] UDF-fs: Scanning with blocksize 512 failed [ 390.794270][T11305] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 390.811582][T11305] UDF-fs: Scanning with blocksize 1024 failed [ 390.828447][T11305] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 390.856792][T11305] UDF-fs: Scanning with blocksize 2048 failed [ 390.864387][T11305] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 390.909529][T11305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.024559][T11305] syz.5.1834: attempt to access beyond end of device [ 391.024559][T11305] loop5: rw=2049, sector=520, nr_sectors = 120 limit=512 [ 391.040744][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 391.088350][T11311] loop2: detected capacity change from 0 to 256 [ 391.843437][T11325] loop5: detected capacity change from 0 to 4096 [ 391.884246][T11325] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 391.931102][T11325] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 391.996194][T11331] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.305017][T11334] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 392.346074][T11334] Remounting filesystem read-only [ 392.371470][T11334] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 392.435631][T11334] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 392.462954][T11334] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 392.485522][T11334] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 392.507819][T11334] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 392.535543][T11334] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 392.575302][T11334] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 392.585072][T11334] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 392.613771][T11334] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 392.713871][T10490] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 395.307407][T11302] netlink: 'syz.8.1835': attribute type 21 has an invalid length. [ 395.744477][T11373] loop2: detected capacity change from 0 to 1024 [ 395.788882][T11374] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 395.841494][T11373] EXT4-fs: Ignoring removed orlov option [ 395.910683][T11373] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 396.158210][T11373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 396.329235][T11373] EXT4-fs (loop2): shut down requested (2) [ 396.515229][ T4401] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 396.600991][T11389] loop9: detected capacity change from 0 to 512 [ 396.625416][T11366] loop8: detected capacity change from 0 to 131072 [ 396.633595][T11366] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0) [ 396.642529][T11366] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 396.650847][T10384] EXT4-fs (loop2): unmounting filesystem. [ 396.658536][T11366] F2FS-fs (loop8): invalid crc value [ 396.668033][T11366] F2FS-fs (loop8): Found nat_bits in checkpoint [ 396.715529][ T4401] usb 6-1: Using ep0 maxpacket: 32 [ 396.721572][T11366] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 396.728721][T11366] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 396.749710][ T4401] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 396.760370][T11389] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 396.793323][ T4401] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.820007][ T4401] usb 6-1: Product: syz [ 396.821570][T11389] EXT4-fs (loop9): 1 truncate cleaned up [ 396.824199][ T4401] usb 6-1: Manufacturer: syz [ 396.835475][ T4401] usb 6-1: SerialNumber: syz [ 396.855028][T11389] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 396.879695][ T4401] usb 6-1: config 0 descriptor?? [ 396.909534][ T4401] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 396.929002][T11127] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 396.996181][T11389] EXT4-fs (loop9): shut down requested (2) [ 397.038102][T11127] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 397.078759][T11127] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 397.122873][T11127] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 397.187028][ T9318] EXT4-fs (loop9): unmounting filesystem. [ 397.764113][T11415] loop8: detected capacity change from 0 to 1024 [ 397.804130][T11415] EXT4-fs: Ignoring removed orlov option [ 397.846535][T11415] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 398.124058][ T4401] gspca_ov534_9: reg_w failed -71 [ 398.418801][ T9104] EXT4-fs (loop8): unmounting filesystem. [ 398.486617][T11407] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.494320][T11407] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.515417][ T4401] gspca_ov534_9: Unknown sensor 0000 [ 398.515483][ T4401] ov534_9: probe of 6-1:0.0 failed with error -22 [ 398.551130][ T4401] usb 6-1: USB disconnect, device number 15 [ 399.382998][T11407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.445923][T11407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.158606][T11407] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.168717][T11407] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.178255][T11407] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.187261][T11407] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.297310][T11407] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.306311][T11407] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.315242][T11407] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.324147][T11407] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.354487][T11434] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 400.510183][T11127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.587540][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 400.600489][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 400.646914][T11127] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.672741][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 400.694654][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 400.715968][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.723132][ T6029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.783140][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 400.825828][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 400.837901][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 400.848007][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.855177][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.906642][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 400.947508][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 400.976591][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 401.025197][ T5584] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 401.045816][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 401.056799][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 401.071746][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 401.101633][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 401.131500][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 401.166063][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 401.190266][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 401.204788][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 401.228303][T11127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 401.233271][ T5584] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 401.245356][ T5584] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.285315][ T5584] usb 10-1: Product: syz [ 401.289636][ T5584] usb 10-1: Manufacturer: syz [ 401.294351][ T5584] usb 10-1: SerialNumber: syz [ 401.347096][ T5584] usb 10-1: config 0 descriptor?? [ 401.667630][ T5587] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 401.771826][ T5584] airspy 10-1:0.0: Board ID: 00 [ 401.776939][ T5584] airspy 10-1:0.0: Firmware version: [ 401.865735][ T5587] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.895373][ T5587] usb 9-1: config 0 has no interfaces? [ 401.923883][ T5587] usb 9-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 401.985428][ T5587] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.018566][ T5587] usb 9-1: config 0 descriptor?? [ 402.089811][ T6032] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.100996][ T6032] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 402.127321][T11127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.193683][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 402.213035][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 402.228874][ T9272] usb 9-1: USB disconnect, device number 9 [ 402.291105][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 402.304934][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 402.322979][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 402.332731][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 402.349817][T11127] device veth0_vlan entered promiscuous mode [ 402.385077][T11127] device veth1_vlan entered promiscuous mode [ 402.490272][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 402.504197][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 402.521619][T11127] device veth0_macvtap entered promiscuous mode [ 402.575595][ T5584] airspy 10-1:0.0: usb_control_msg() failed -71 request 0f [ 402.595928][ T5584] airspy 10-1:0.0: Registered as swradio24 [ 402.601823][ T5584] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 402.635937][ T5584] usb 10-1: USB disconnect, device number 6 [ 403.710345][T11541] loop8: detected capacity change from 0 to 512 [ 403.743399][T11541] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 403.836824][T11541] EXT4-fs (loop8): 1 truncate cleaned up [ 403.843791][T11541] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 403.891804][T11541] EXT4-fs (loop8): shut down requested (2) [ 404.081304][ T9104] EXT4-fs (loop8): unmounting filesystem. [ 404.113738][T11521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.204722][T11521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.295223][ T9277] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 404.547921][ T9277] usb 10-1: unable to get BOS descriptor or descriptor too short [ 404.561414][ T9277] usb 10-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 404.577926][ T9277] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.587170][ T9277] usb 10-1: Product: syz [ 404.597161][ T9277] usb 10-1: Manufacturer: syz [ 404.601890][ T9277] usb 10-1: SerialNumber: syz [ 404.879057][T11554] loop8: detected capacity change from 0 to 32768 [ 404.938731][ T9277] snd-usb-audio: probe of 10-1:8.0 failed with error -2 [ 404.957220][ T9277] usb 10-1: USB disconnect, device number 7 [ 404.961749][T11554] XFS (loop8): Mounting V5 Filesystem [ 405.018480][T11554] XFS (loop8): Ending clean mount [ 405.226297][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.300550][ T9104] XFS (loop8): Unmounting Filesystem [ 405.326192][T11521] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.335292][T11521] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.344247][T11521] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.355004][T11521] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.457301][T11127] device veth1_macvtap entered promiscuous mode [ 405.473665][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 405.484100][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 405.503883][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.516935][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.527224][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.553786][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.581709][T11127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.595600][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 405.606080][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 405.627864][T11576] netlink: 'syz.5.1885': attribute type 11 has an invalid length. [ 405.640053][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1885'. [ 405.659711][T11576] netlink: 'syz.5.1885': attribute type 11 has an invalid length. [ 405.691192][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1885'. [ 405.718261][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.737939][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.773799][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.794691][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.845615][T11127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.853569][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 405.873865][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 405.909750][T11127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.919687][T11127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.950157][T11127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.975322][T11127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.145910][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 406.168093][ T4555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.233663][ T4555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.275567][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 406.313478][ T6040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.332058][ T6040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.444429][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 406.727539][T11580] loop9: detected capacity change from 0 to 32768 [ 406.751814][T11580] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop9 scanned by syz.9.1887 (11580) [ 406.845204][T11580] BTRFS info (device loop9): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 406.869262][T11580] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 406.895525][T11580] BTRFS info (device loop9): using free space tree [ 407.049420][T11621] loop2: detected capacity change from 0 to 64 [ 407.212595][T11621] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 407.331936][T11580] BTRFS info (device loop9): enabling ssd optimizations [ 407.365390][T11621] loop2: detected capacity change from 64 to 0 [ 407.388919][ C1] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.435425][ C1] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.475994][ C1] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.500778][ T27] audit: type=1800 audit(1771011993.851:104): pid=11580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1887" name="file1" dev="loop9" ino=261 res=0 errno=0 [ 407.523581][ C1] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.534561][T11637] BFS-fs: find_inode(): Unable to read inode loop2:00000002 [ 407.700001][ C1] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.712868][ C0] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.725755][ T9318] BTRFS info (device loop9): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 408.031693][T11645] loop1: detected capacity change from 0 to 128 [ 408.140845][T11645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 408.192664][ C0] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.201931][ T6040] BFS-fs: find_inode(): Unable to read inode loop2:00000001 [ 408.213437][ C1] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.228168][ T6040] BFS-fs: find_inode(): Unable to read inode loop2:00000000 [ 408.235765][T11645] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 408.267503][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.307194][T11645] EXT4-fs error (device loop1): make_indexed_dir:2333: inode #2: block 18: comm syz.1.1899: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 408.326734][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.541609][ T27] audit: type=1326 audit(1771011994.891:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.5.1900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc14a99bf79 code=0x0 [ 408.610062][T11127] EXT4-fs (loop1): unmounting filesystem. [ 408.668691][T11660] loop5: detected capacity change from 0 to 256 [ 408.990897][ T6021] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.180263][ T6021] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.327315][ T6021] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.533616][ T6021] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.888403][T11683] netlink: 'syz.8.1907': attribute type 11 has an invalid length. [ 410.177512][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 410.188209][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 410.197820][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 410.205919][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 410.213956][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 410.248663][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.592823][T11681] loop5: detected capacity change from 0 to 32768 [ 410.647215][T11681] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1906 (11681) [ 410.708380][T11697] netlink: 'syz.8.1911': attribute type 12 has an invalid length. [ 410.722143][T11681] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 410.752994][T11681] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 410.804165][T11681] BTRFS info (device loop5): using free space tree [ 410.915395][T11708] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input22 [ 411.168600][T11681] BTRFS info (device loop5): enabling ssd optimizations [ 411.320877][ T27] audit: type=1800 audit(1771011997.671:106): pid=11681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1906" name="file1" dev="loop5" ino=261 res=0 errno=0 [ 411.445734][T11687] chnl_net:caif_netlink_parms(): no params data found [ 411.630103][T10490] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 412.385839][T11735] Bluetooth: hci1: command 0x0409 tx timeout [ 412.500387][T11734] loop1: detected capacity change from 0 to 32768 [ 412.598191][T11734] XFS (loop1): Mounting V5 Filesystem [ 412.766838][T11734] XFS (loop1): Ending clean mount [ 412.785032][T11734] XFS (loop1): Quotacheck needed: Please wait. [ 412.862353][T11687] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.892236][T11687] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.953065][T11687] device bridge_slave_0 entered promiscuous mode [ 412.960318][T11734] XFS (loop1): Quotacheck: Done. [ 412.975730][T11687] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.992775][T11687] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.013489][ T27] audit: type=1800 audit(1771011999.361:107): pid=11734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1915" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 413.018893][T11687] device bridge_slave_1 entered promiscuous mode [ 413.185713][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 413.504572][T11127] XFS (loop1): Unmounting Filesystem [ 414.465221][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 415.945177][ T7] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 416.153838][ T7] usb 9-1: unable to get BOS descriptor or descriptor too short [ 416.186527][ T7] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 416.194172][ T7] usb 9-1: can't read configurations, error -71 [ 416.545522][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 418.418147][T11778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.436142][T11778] IPv6: NLM_F_CREATE should be set when creating new route [ 418.456982][T11687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.482751][ T6021] device hsr_slave_0 left promiscuous mode [ 418.489818][ T6021] device hsr_slave_1 left promiscuous mode [ 418.496626][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.504052][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.578699][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.595548][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.605807][ T6021] device bridge_slave_1 left promiscuous mode [ 418.612249][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.622276][ T6021] device bridge_slave_0 left promiscuous mode [ 418.625280][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 418.629234][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.687903][ T6021] device veth1_macvtap left promiscuous mode [ 418.693998][ T6021] device veth0_macvtap left promiscuous mode [ 418.705899][ T6021] device veth1_vlan left promiscuous mode [ 418.711898][ T6021] device veth0_vlan left promiscuous mode [ 419.826329][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 419.919226][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 419.985678][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.056248][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.708584][ T6021] bond0 (unregistering): Released all slaves [ 420.834666][T11687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.864040][T11687] team0: Port device team_slave_0 added [ 420.871787][T11687] team0: Port device team_slave_1 added [ 420.895648][T11687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.902642][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.928893][T11687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.941901][T11687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.949206][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.975697][T11687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.044996][T11687] device hsr_slave_0 entered promiscuous mode [ 421.052007][T11687] device hsr_slave_1 entered promiscuous mode [ 421.059356][T11687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.067921][T11687] Cannot create hsr debugfs directory [ 421.984865][T11687] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.996630][T11687] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 422.007325][T11687] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 422.018202][T11687] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 422.115471][T11687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.130982][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 422.139858][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 422.152170][T11687] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.164434][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 422.175976][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 422.184593][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.191763][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.207582][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 422.230294][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 422.242729][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 422.253943][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.261128][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.279125][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 422.304188][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 422.323720][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 422.342005][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 422.372058][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 422.381432][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 422.391284][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 422.400795][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 422.409793][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 422.418730][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 422.427463][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 422.437094][T11687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 422.762238][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.777280][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.798607][T11687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.835403][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 422.844250][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 422.888540][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 422.902457][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 422.913382][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 422.928647][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 422.942942][T11687] device veth0_vlan entered promiscuous mode [ 422.970806][T11687] device veth1_vlan entered promiscuous mode [ 423.012592][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 423.030180][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.045797][T11687] device veth0_macvtap entered promiscuous mode [ 423.063876][T11687] device veth1_macvtap entered promiscuous mode [ 423.089532][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.100362][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.111257][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.122553][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.134155][T11687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.143499][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 423.152468][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 423.160911][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 423.170364][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 423.181793][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.197457][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.207949][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.218783][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.230296][T11687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.238733][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 423.259263][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.277514][T11687] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.293380][T11687] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.302733][T11687] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.315439][T11687] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.422934][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.437933][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.463166][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 423.484268][ T6040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.492228][ T6040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.500517][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 423.685623][T11921] binder: 11920:11921 ioctl 401054d5 200000000100 returned -22 [ 423.690953][T11927] loop9: detected capacity change from 0 to 512 [ 423.785835][T11927] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 423.849049][T11927] EXT4-fs (loop9): 1 truncate cleaned up [ 423.854727][T11927] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 423.961681][ T9318] EXT4-fs (loop9): unmounting filesystem. [ 424.761148][T11963] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 424.881343][T11963] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 424.995262][T11963] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 425.033200][T11972] loop9: detected capacity change from 0 to 1024 [ 425.123144][T11974] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 425.234399][T11979] loop5: detected capacity change from 0 to 2048 [ 425.339547][T11979] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 425.515046][T11962] loop3: detected capacity change from 0 to 32768 [ 425.558249][T11962] XFS (loop3): Mounting V5 Filesystem [ 425.608724][T10490] EXT4-fs (loop5): unmounting filesystem. [ 425.666383][T11995] netlink: 'syz.8.1941': attribute type 3 has an invalid length. [ 425.674619][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1941'. [ 425.751000][T11962] XFS (loop3): Ending clean mount [ 425.783946][T11962] XFS (loop3): Quotacheck needed: Please wait. [ 425.903832][T12002] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input23 [ 425.969827][T11962] XFS (loop3): Quotacheck: Done. [ 426.072137][ T27] audit: type=1800 audit(1771012012.421:108): pid=11962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1928" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 426.605751][T11687] XFS (loop3): Unmounting Filesystem [ 427.819095][T12018] loop8: detected capacity change from 0 to 32768 [ 427.846509][T12018] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 scanned by syz.8.1949 (12018) [ 427.921558][T12018] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 427.982067][T12018] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 428.022755][T12018] BTRFS info (device loop8): using free space tree [ 428.124149][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'. [ 428.208972][T12063] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1962'. [ 428.387210][T12018] BTRFS info (device loop8): enabling ssd optimizations [ 428.697989][ T9104] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 429.487194][T12083] loop1: detected capacity change from 0 to 32768 [ 429.643253][T12083] XFS (loop1): Mounting V5 Filesystem [ 429.836584][T12083] XFS (loop1): Ending clean mount [ 429.857578][T12083] XFS (loop1): Quotacheck needed: Please wait. [ 429.941625][T12083] XFS (loop1): Quotacheck: Done. [ 430.036019][ T27] audit: type=1800 audit(1771012016.381:109): pid=12083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1964" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 430.326088][T12100] loop5: detected capacity change from 0 to 32768 [ 430.496639][T12100] XFS (loop5): Mounting V5 Filesystem [ 430.548726][T12104] loop8: detected capacity change from 0 to 32768 [ 430.551180][T11127] XFS (loop1): Unmounting Filesystem [ 430.574760][T12104] XFS (loop8): Mounting V5 Filesystem [ 430.647049][T12100] XFS (loop5): Ending clean mount [ 430.779032][T12104] XFS (loop8): Ending clean mount [ 430.792027][T12104] XFS (loop8): Quotacheck needed: Please wait. [ 430.847279][T12106] loop9: detected capacity change from 0 to 32768 [ 430.916739][T12104] XFS (loop8): Quotacheck: Done. [ 431.005580][T12106] XFS (loop9): Mounting V5 Filesystem [ 431.013264][T10490] XFS (loop5): Unmounting Filesystem [ 431.124060][T12121] loop3: detected capacity change from 0 to 32768 [ 431.182369][T12106] XFS (loop9): Ending clean mount [ 431.220725][T12121] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1972 (12121) [ 431.281906][T12121] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 431.284500][T12106] XFS (loop9): Quotacheck needed: Please wait. [ 431.333928][T12121] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 431.395274][T12121] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 431.425764][T12121] BTRFS info (device loop3): use zstd compression, level 3 [ 431.446634][T12121] BTRFS info (device loop3): using free space tree [ 431.494745][ T9104] XFS (loop8): Unmounting Filesystem [ 431.704563][T12106] XFS (loop9): Quotacheck: Done. [ 431.745327][T12121] BTRFS info (device loop3): enabling ssd optimizations [ 431.773086][ T27] audit: type=1800 audit(1771012018.121:110): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1970" name="file1" dev="loop9" ino=6150 res=0 errno=0 [ 431.817477][T12106] XFS (loop9): User initiated shutdown received. [ 431.859957][T12106] XFS (loop9): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 431.870427][ T27] audit: type=1800 audit(1771012018.221:111): pid=12121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1972" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 431.994616][T12106] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 432.275770][ T9318] XFS (loop9): Unmounting Filesystem [ 432.654236][T11687] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 433.143191][ T4388] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (4388) [ 433.283428][T12203] IPVS: set_ctl: invalid protocol: 58 172.20.20.35:20003 [ 433.365327][ T5585] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 433.565221][ T5585] usb 9-1: Using ep0 maxpacket: 8 [ 433.572549][ T5585] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 433.601461][ T5585] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.692611][ T5585] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.733099][ T5585] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 433.804270][ T5585] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.845152][ T5585] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 433.894836][ T5585] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.075589][T12219] loop1: detected capacity change from 0 to 32768 [ 434.086554][T12219] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1983 (12219) [ 434.104782][T12219] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 434.115034][T12219] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 434.123755][T12219] BTRFS info (device loop1): setting nodatacow, compression disabled [ 434.131997][T12219] BTRFS info (device loop1): force clearing of disk cache [ 434.139203][T12219] BTRFS info (device loop1): enabling ssd optimizations [ 434.147695][T12219] BTRFS info (device loop1): using spread ssd allocation scheme [ 434.155468][T12219] BTRFS info (device loop1): turning off barriers [ 434.161958][T12219] BTRFS info (device loop1): disabling free space tree [ 434.168921][T12219] BTRFS info (device loop1): not using ssd optimizations [ 434.176246][T12219] BTRFS info (device loop1): not using spread ssd allocation scheme [ 434.186708][ T5585] usb 9-1: usb_control_msg returned -32 [ 434.192386][ T5585] usbtmc 9-1:16.0: can't read capabilities [ 434.247411][T12227] loop9: detected capacity change from 0 to 1024 [ 434.263800][T12227] EXT4-fs: inline encryption not supported [ 434.273421][T12227] EXT4-fs: Ignoring removed i_version option [ 434.282926][T12227] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 434.305187][ T3598] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 434.321462][T12227] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 434.389854][T12227] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3852: comm syz.9.1986: Allocating blocks 497-513 which overlap fs metadata [ 434.404940][T12227] EXT4-fs (loop9): pa ffff88806fc08d20: logic 256, phys. 385, len 8 [ 434.413973][T12227] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 434.505265][ T3598] usb 6-1: Using ep0 maxpacket: 8 [ 434.512192][ T3598] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 434.535300][ T3598] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.545487][ T3598] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.565220][ T3598] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.583286][ T3598] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.588750][T12219] BTRFS info (device loop1): rebuilding free space tree [ 434.605178][ T3598] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 434.615501][ T3598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.648695][T12219] BTRFS info (device loop1): disabling free space tree [ 434.655919][T12219] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 434.666145][T12219] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 434.848668][ T3598] usb 6-1: usb_control_msg returned -32 [ 434.854566][ T3598] usbtmc 6-1:16.0: can't read capabilities [ 435.035310][ T9318] EXT4-fs (loop9): unmounting filesystem. [ 435.045779][T12252] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 435.055970][T12254] BTRFS info (device loop1): space_info DATA+METADATA (sub-group id 0) has 8192 free, is not full [ 435.067263][T12254] BTRFS info (device loop1): space_info total=11534336, used=49152, pinned=16384, reserved=0, may_use=11460608, readonly=0 zone_unusable=0 [ 435.081544][T12254] BTRFS info (device loop1): global_block_rsv: size 1048576 reserved 1048576 [ 435.090754][T12254] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 435.098540][T12254] BTRFS info (device loop1): chunk_block_rsv: size 98304 reserved 98304 [ 435.107138][T12254] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 435.114938][T12254] BTRFS info (device loop1): delayed_refs_rsv: size 65536 reserved 65536 [ 435.253150][ T3598] usb 9-1: USB disconnect, device number 12 [ 435.394283][T12255] loop3: detected capacity change from 0 to 32768 [ 435.423175][T12255] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1988 (12255) [ 435.441475][T12255] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 435.451743][T12255] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 435.461306][T12255] BTRFS info (device loop3): using free space tree [ 435.714041][T12255] BTRFS info (device loop3): enabling ssd optimizations [ 435.730410][ T27] audit: type=1800 audit(1771012022.081:112): pid=12255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1988" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 436.067622][T11687] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 436.185419][ T4388] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop3 scanned by udevd (4388) [ 436.241894][T11127] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 437.069138][ T126] usb 6-1: USB disconnect, device number 16 [ 438.202095][T12308] loop9: detected capacity change from 0 to 131072 [ 438.218439][T12308] F2FS-fs (loop9): Invalid log sectorsize (67108873) [ 438.225207][T12308] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 438.245875][T12308] F2FS-fs (loop9): invalid crc value [ 438.337243][T12308] F2FS-fs (loop9): Found nat_bits in checkpoint [ 438.411681][T12308] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 438.418885][T12308] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 438.596236][T12330] device hsr0 entered promiscuous mode [ 438.616734][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'. [ 438.654865][T12330] device hsr_slave_0 left promiscuous mode [ 438.670334][T12330] device hsr_slave_1 left promiscuous mode [ 438.742863][T12306] loop8: detected capacity change from 0 to 32768 [ 438.796596][T12306] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 438.917894][T12330] device hsr0 left promiscuous mode [ 439.279629][ T4406] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 439.454143][T12348] tipc: Started in network mode [ 439.490096][T12348] tipc: Node identity ac14140f, cluster identity 4711 [ 439.526608][T12348] tipc: New replicast peer: 255.255.255.255 [ 439.559814][T12348] tipc: Enabled bearer , priority 10 [ 439.907986][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.914341][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.679475][ T3598] tipc: Node number set to 2886997007 [ 440.717814][T12340] loop9: detected capacity change from 0 to 32768 [ 440.854910][T12385] No such timeout policy "syz1" [ 440.954510][T12340] JBD2: Ignoring recovery information on journal [ 441.163886][T12340] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 441.476495][T12398] loop3: detected capacity change from 0 to 16 [ 441.661922][T12398] erofs: (device loop3): mounted with root inode @ nid 36. [ 441.690065][T12401] loop8: detected capacity change from 0 to 2048 [ 441.747272][T12398] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 441.767084][T12401] loop8: p3 < > p4 < > [ 441.776140][T12401] loop8: partition table partially beyond EOD, truncated [ 441.794717][T12398] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 441.823512][T12401] loop8: p3 start 4284289 is beyond EOD, truncated [ 441.846848][ T9318] ocfs2: Unmounting device (7,9) on (node local) [ 441.862754][T12398] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 441.932795][T12398] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 441.945981][T12410] loop5: detected capacity change from 0 to 256 [ 441.998088][T12407] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 442.017900][T12410] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 442.048857][T12410] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 442.068932][T12398] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 442.092457][T12410] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 442.121103][T12407] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 442.168807][T12407] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 442.210176][T12407] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 442.216263][ T4388] udevd[4388]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 442.255312][T12410] loop5: detected capacity change from 256 to 64 [ 442.285728][T12407] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 442.292950][T12414] netem: incorrect gi model size [ 442.312795][T12414] netem: change failed [ 442.338109][T12407] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 442.350395][T12410] loop5: [ 442.357031][T12412] syz.5.2024: attempt to access beyond end of device [ 442.357031][T12412] loop5: rw=2049, sector=168, nr_sectors = 1 limit=64 [ 442.405896][T12412] Buffer I/O error on dev loop5, logical block 168, lost sync page write [ 442.449022][T12412] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805222c260 iblock : 8, err : -5) [ 442.485305][T12412] exFAT-fs (loop5): Filesystem has been set read-only [ 442.515384][T12412] syz.5.2024: attempt to access beyond end of device [ 442.515384][T12412] loop5: rw=2049, sector=144, nr_sectors = 8 limit=64 [ 443.249033][ T7] kernel write not supported for file /vcs (pid: 7 comm: kworker/0:0) [ 444.005676][ T6029] tipc: Disabling bearer [ 444.025448][ T6029] tipc: Left network mode [ 444.425904][T12470] loop1: detected capacity change from 0 to 512 [ 444.662325][T12470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 444.682210][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.693547][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 444.695360][T12470] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.712673][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.723285][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.733316][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 444.740795][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 445.116252][T12496] loop8: detected capacity change from 0 to 128 [ 445.298104][T11127] EXT4-fs (loop1): unmounting filesystem. [ 445.345930][T11735] Bluetooth: hci1: command 0x0405 tx timeout [ 445.538370][ T6040] kworker/u4:22: attempt to access beyond end of device [ 445.538370][ T6040] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 445.804078][T12513] loop8: detected capacity change from 0 to 512 [ 445.874351][T12513] EXT4-fs (loop8): 1 truncate cleaned up [ 445.883737][T12513] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 446.087052][T12513] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2055: invalid indirect mapped block 234881024 (level 0) [ 446.338568][ T9104] EXT4-fs (loop8): unmounting filesystem. [ 446.624175][T12482] chnl_net:caif_netlink_parms(): no params data found [ 446.785378][T11735] Bluetooth: hci3: command 0x0409 tx timeout [ 447.249555][ T6029] device hsr_slave_0 left promiscuous mode [ 447.256818][ T6029] device hsr_slave_1 left promiscuous mode [ 447.263429][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.285858][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.324878][T12555] loop8: detected capacity change from 0 to 128 [ 447.329488][T12549] loop9: detected capacity change from 0 to 2048 [ 447.465280][T12549] UDF-fs: warning (device loop9): udf_fill_super: No partition found (2) [ 447.796070][T12566] loop1: detected capacity change from 0 to 128 [ 448.875566][T11735] Bluetooth: hci3: command 0x041b tx timeout [ 449.064485][T12603] loop9: detected capacity change from 0 to 2048 [ 449.150682][T12603] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 449.241393][T12603] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.791850][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 449.933166][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 450.031317][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.140474][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.952853][T11735] Bluetooth: hci3: command 0x040f tx timeout [ 450.955883][ T6029] bond0 (unregistering): Released all slaves [ 451.058197][T12579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.185729][T12482] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.192885][T12482] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.274796][T12482] device bridge_slave_0 entered promiscuous mode [ 451.385254][T12482] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.406229][T12482] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.414503][T12482] device bridge_slave_1 entered promiscuous mode [ 451.603848][T12482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.669209][T12482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.804697][T12482] team0: Port device team_slave_0 added [ 451.824012][T12482] team0: Port device team_slave_1 added [ 451.918212][T12482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.934214][T12482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.034584][T12482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.163356][T12482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.186847][T12482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.305361][T12482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.489378][T12482] device hsr_slave_0 entered promiscuous mode [ 452.533266][T12482] device hsr_slave_1 entered promiscuous mode [ 452.568289][T12482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.602988][T12482] Cannot create hsr debugfs directory [ 453.034476][T11735] Bluetooth: hci3: command 0x0419 tx timeout [ 453.402576][T12711] loop3: detected capacity change from 0 to 512 [ 453.515606][T12711] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 453.559024][T12711] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.700533][T12482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.719656][T12482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.764442][T11687] EXT4-fs (loop3): unmounting filesystem. [ 453.776690][T12482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.803827][T12725] loop9: detected capacity change from 0 to 1024 [ 453.831834][T12482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.872072][T12725] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 453.911644][T12725] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.972853][T12725] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: comm syz.9.2112: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.002077][T12725] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 454.020833][T12725] EXT4-fs (loop9): This should not happen!! Data will be lost [ 454.020833][T12725] [ 454.034109][T12740] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #15: comm syz.9.2112: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.162444][T12482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.163078][T12740] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #15: comm syz.9.2112: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.184285][T12740] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #15: comm syz.9.2112: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.198594][T12740] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #15: comm syz.9.2112: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.203232][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 454.219824][T12740] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #15: comm syz.9.2112: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.220217][T12740] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #15: comm syz.9.2112: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.312834][T12740] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #15: comm syz.9.2112: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.337273][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 454.345453][T12740] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #15: comm syz.9.2112: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.373093][T12482] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.405226][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 454.405332][ T126] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 454.423358][T12740] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #15: comm syz.9.2112: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.451971][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 454.482730][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.489941][ T6034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.595567][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 454.630037][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 454.638101][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 454.661641][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.676728][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 454.694961][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.706534][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.713677][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.731315][ T126] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 454.743964][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.774522][ T126] usb 2-1: config 0 descriptor?? [ 454.784294][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 454.804632][ T9318] EXT4-fs (loop9): unmounting filesystem. [ 454.816520][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 454.872375][T12757] loop3: detected capacity change from 0 to 1024 [ 454.878882][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 454.972623][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 454.991583][T12757] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 454.995893][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 455.022637][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 455.038472][T12757] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.039032][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 455.057834][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 455.067896][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 455.094599][T12482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.137027][T12482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 455.161943][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 455.173408][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.196740][T12757] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2120: bg 0: block 112: padding at end of block bitmap is not set [ 455.242550][ T126] apple 0003:05AC:024B.0022: unknown global tag 0xe [ 455.265257][ T126] apple 0003:05AC:024B.0022: item 0 1 1 14 parsing failed [ 455.287190][ T126] apple 0003:05AC:024B.0022: parse failed [ 455.293101][ T126] apple: probe of 0003:05AC:024B.0022 failed with error -22 [ 455.315350][T12757] EXT4-fs (loop3): Remounting filesystem read-only [ 455.452077][T11687] EXT4-fs (loop3): unmounting filesystem. [ 455.469835][ T126] usb 2-1: USB disconnect, device number 10 [ 456.175506][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 456.183073][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 456.233100][T12482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.512450][T12805] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 456.582573][T12809] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3415122576 (109283922432 ns) > initial count (6907418368 ns). Using initial count to start timer. [ 457.279258][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 457.300190][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 457.347745][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 457.367936][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 457.398803][T12482] device veth0_vlan entered promiscuous mode [ 457.408780][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 457.411010][T12838] loop8: detected capacity change from 0 to 256 [ 457.422245][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 457.440763][T12482] device veth1_vlan entered promiscuous mode [ 457.466573][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 457.480993][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 457.485236][ T5585] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 457.530186][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 457.545773][T12838] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 457.562157][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 457.565292][ T3598] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 457.605781][T12482] device veth0_macvtap entered promiscuous mode [ 457.626706][T12482] device veth1_macvtap entered promiscuous mode [ 457.675331][ T5585] usb 10-1: Using ep0 maxpacket: 8 [ 457.678247][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.682272][ T5585] usb 10-1: config 0 has no interfaces? [ 457.697517][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.728125][ T5585] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.735132][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.755336][ T5585] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.765258][ T3598] usb 2-1: Using ep0 maxpacket: 8 [ 457.770934][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.772091][ T3598] usb 2-1: config index 0 descriptor too short (expected 30768, got 18) [ 457.791218][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.795433][T12841] loop3: detected capacity change from 0 to 4096 [ 457.815132][ T5585] usb 10-1: Product: syz [ 457.819505][ T5585] usb 10-1: Manufacturer: syz [ 457.824213][ T5585] usb 10-1: SerialNumber: syz [ 457.827758][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.845754][ T3598] usb 2-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 457.866080][T12482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.873913][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 457.893213][ T5585] usb 10-1: config 0 descriptor?? [ 457.894419][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 457.908812][ T3598] usb 2-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 457.936738][T12844] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 457.961260][ T27] audit: type=1800 audit(1771012044.311:113): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2140" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 457.970350][ T3598] usb 2-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 457.997746][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 458.021037][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 458.040376][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.077367][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.091914][ T3598] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 458.111839][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.122245][ T3598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.146846][T12847] loop8: detected capacity change from 0 to 2048 [ 458.153336][ T3598] usb 2-1: Product: syz [ 458.165154][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.173617][ T3598] usb 2-1: Manufacturer: syz [ 458.183744][ T3598] usb 2-1: SerialNumber: syz [ 458.191488][T12482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.244046][T12482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.272034][T12847] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 458.325765][T12847] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 458.334849][T12482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.400944][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 458.405580][ T126] usb 10-1: USB disconnect, device number 8 [ 458.410819][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 458.427942][T12482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.437750][T12482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.451690][T12482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.460900][T12482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.616459][ T9104] EXT4-fs (loop8): unmounting filesystem. [ 458.676866][ T3598] usb 2-1: USB disconnect, device number 11 [ 458.710532][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.735148][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.765959][ T6032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 458.789841][ T6034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.815581][ T6034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.838076][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 460.111745][T12902] loop8: detected capacity change from 0 to 128 [ 460.140625][T12902] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 460.163640][T12902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 460.515678][T12914] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 461.057532][T12933] loop3: detected capacity change from 0 to 7 [ 461.092456][T12933] Dev loop3: unable to read RDB block 7 [ 461.112808][T12933] loop3: unable to read partition table [ 461.130216][T12933] loop3: partition table beyond EOD, truncated [ 461.162691][T12933] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 461.635540][T12947] loop1: detected capacity change from 0 to 2048 [ 461.733006][T12947] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 461.816930][T12947] EXT4-fs (loop1): shut down requested (0) [ 462.207044][T11127] EXT4-fs (loop1): unmounting filesystem. [ 462.213291][T12967] device syzkaller1 entered promiscuous mode [ 462.318590][T12969] loop8: detected capacity change from 0 to 128 [ 462.369119][T12969] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 462.423753][T12969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 462.465575][T11735] Bluetooth: hci0: command 0x0406 tx timeout [ 463.074351][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2189'. [ 463.147799][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2189'. [ 463.189104][T12994] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.198092][T12994] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.206938][T12994] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.215752][T12994] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.504603][ T126] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 463.566880][ T126] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 463.810363][ T126] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 464.008551][ T126] usb 10-1: config 0 has no interfaces? [ 464.019400][ T126] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.067117][ T126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 464.101407][ T126] usb 10-1: SerialNumber: syz [ 464.131066][ T126] usb 10-1: config 0 descriptor?? [ 464.195483][T13034] netlink: 'syz.1.2201': attribute type 15 has an invalid length. [ 464.765047][T13027] loop4: detected capacity change from 0 to 40427 [ 464.795170][T13047] loop8: detected capacity change from 0 to 4096 [ 464.828817][T13027] F2FS-fs (loop4): invalid crc value [ 464.879776][T13027] F2FS-fs (loop4): Found nat_bits in checkpoint [ 465.127304][T13027] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 465.240208][T13063] loop3: detected capacity change from 0 to 256 [ 465.356661][T13063] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 465.404056][T12482] syz-executor: attempt to access beyond end of device [ 465.404056][T12482] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 465.574757][T13061] loop1: detected capacity change from 0 to 8192 [ 465.644312][T13061] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 465.718152][T13061] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 465.734777][T13061] REISERFS (device loop1): using ordered data mode [ 465.746776][T13061] reiserfs: using flush barriers [ 465.754371][T13061] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 465.772286][T13061] REISERFS (device loop1): checking transaction log (loop1) [ 465.793210][T13061] REISERFS (device loop1): Using r5 hash to sort names [ 465.808144][T13061] REISERFS (device loop1): using 3.5.x disk format [ 465.861743][T13061] REISERFS warning (device loop1): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 465.918164][T13061] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 466.595451][T13090] loop4: detected capacity change from 0 to 512 [ 466.615528][ T9270] usb 10-1: USB disconnect, device number 9 [ 466.646517][T13090] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 466.828530][T13090] EXT4-fs (loop4): #blocks per group too big: 32768 [ 466.840656][T13099] loop1: detected capacity change from 0 to 1024 [ 466.911438][T13099] EXT4-fs: Ignoring removed bh option [ 466.943031][T13090] overlayfs: upper fs does not support tmpfile. [ 466.988626][T13099] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 467.383416][T11127] EXT4-fs (loop1): unmounting filesystem. [ 468.284074][T13143] loop4: detected capacity change from 0 to 2048 [ 468.364058][T13143] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.507568][T13147] loop8: detected capacity change from 0 to 256 [ 468.571419][T13147] exfat: Deprecated parameter 'utf8' [ 468.635050][T13147] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 468.793437][ T27] audit: type=1804 audit(1771012054.999:114): pid=13147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2232" name="/newroot/191/file0/bus" dev="loop8" ino=1048695 res=1 errno=0 [ 468.914708][T13151] overlayfs: missing 'workdir' [ 469.291094][T13134] loop1: detected capacity change from 0 to 40427 [ 469.297795][T13157] loop3: detected capacity change from 0 to 64 [ 469.384818][T13134] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 469.403042][T13134] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 469.510906][T13134] F2FS-fs (loop1): Found nat_bits in checkpoint [ 469.667581][T13134] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 469.677214][T13134] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 470.509336][T13191] loop8: detected capacity change from 0 to 16 [ 470.548508][T13191] erofs: (device loop8): mounted with root inode @ nid 36. [ 470.557398][ T14] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 470.760436][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 470.767353][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.799260][ T14] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 470.843361][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.883964][ T14] usb 4-1: config 0 descriptor?? [ 471.113990][ T14] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 471.262192][T13205] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 471.299881][T13208] loop4: detected capacity change from 0 to 512 [ 471.320692][T13208] EXT4-fs: Ignoring removed nobh option [ 471.353508][T13209] input: syz0 as /devices/virtual/input/input24 [ 471.455980][T13208] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #3: comm syz.4.2250: corrupted inode contents [ 471.576039][T13208] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #3: comm syz.4.2250: mark_inode_dirty error [ 471.629575][T13208] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #3: comm syz.4.2250: corrupted inode contents [ 471.660996][ T3598] usb 4-1: USB disconnect, device number 22 [ 471.688809][T13208] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.2250: mark_inode_dirty error [ 471.741573][T13208] Quota error (device loop4): write_blk: dquota write failed [ 471.751816][T13225] loop8: detected capacity change from 0 to 256 [ 471.759497][T13208] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 471.775775][T13225] exfat: Deprecated parameter 'utf8' [ 471.790367][T13225] exfat: Deprecated parameter 'utf8' [ 471.807912][T13208] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.2250: Failed to acquire dquot type 0 [ 471.821307][T13225] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 471.872984][T13208] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #16: comm syz.4.2250: corrupted inode contents [ 471.907723][T13208] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #16: comm syz.4.2250: mark_inode_dirty error [ 471.947066][T13208] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #16: comm syz.4.2250: corrupted inode contents [ 471.978255][T13208] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.2250: mark_inode_dirty error [ 472.026058][T13208] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #16: comm syz.4.2250: corrupted inode contents [ 472.061313][T13208] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 472.082177][T13208] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #16: comm syz.4.2250: corrupted inode contents [ 472.106127][T13208] EXT4-fs error (device loop4): ext4_truncate:4318: inode #16: comm syz.4.2250: mark_inode_dirty error [ 472.127072][T13220] loop1: detected capacity change from 0 to 32768 [ 472.159390][T13208] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 472.179012][T13220] (syz.1.2242,13220,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 472.187736][T13208] EXT4-fs (loop4): 1 truncate cleaned up [ 472.213917][T13208] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 472.233791][T13208] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.248489][T13220] (syz.1.2242,13220,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 472.407116][T13220] JBD2: Ignoring recovery information on journal [ 472.605466][T12482] EXT4-fs (loop4): unmounting filesystem. [ 472.612970][T13220] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 472.728742][ T126] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 472.975990][ T126] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 473.013774][ T126] usb 9-1: config 1 has no interface number 0 [ 473.034359][ T126] usb 9-1: config 1 interface 105 has no altsetting 0 [ 473.064332][T13255] loop9: detected capacity change from 0 to 8 [ 473.072612][ T126] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 473.103419][ T126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.118797][T13256] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2261'. [ 473.125574][ T126] usb 9-1: Product: syz [ 473.132169][ T126] usb 9-1: Manufacturer: syz [ 473.162914][T11127] ocfs2: Unmounting device (7,1) on (node local) [ 473.188426][ T126] usb 9-1: SerialNumber: syz [ 473.463678][ T5427] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 473.665407][ T5427] usb 5-1: Using ep0 maxpacket: 32 [ 473.674853][ T5427] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 473.701367][ T5427] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 473.734531][ T5427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 473.773717][ T5427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 473.807316][ T5427] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 473.828228][ T5427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 473.880870][ T5427] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 473.911790][ T5427] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 473.952762][ T5427] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 473.980585][ T5427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.018855][ T5427] usb 5-1: config 0 descriptor?? [ 474.035533][T13260] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 474.057226][ T126] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 474.136905][T13277] loop9: detected capacity change from 0 to 4096 [ 474.265082][ T5427] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 474.295297][ T126] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 474.378183][ T126] aqc111 9-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 40:ca:e0:e2:4d:8d [ 474.413057][ T126] usb 9-1: USB disconnect, device number 13 [ 474.424339][ T126] aqc111 9-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 474.457754][ T9318] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22. [ 474.467980][ C0] usblp0: nonzero read bulk status received: -71 [ 474.473832][ T9318] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 474.476018][ T3598] usb 5-1: USB disconnect, device number 22 [ 474.532750][ T3598] usblp0: removed [ 474.540614][ T126] aqc111 9-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 474.568223][ T126] aqc111 9-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 474.610594][ T126] aqc111 9-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 474.667989][T13286] Invalid argument reading file caps for ./file0 [ 474.668749][T13272] loop3: detected capacity change from 0 to 32768 [ 474.702061][T13272] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2266 (13272) [ 474.760434][T13272] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 474.788923][T13272] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 474.802888][T13272] BTRFS info (device loop3): using free space tree [ 475.017316][T13272] BTRFS info (device loop3): enabling ssd optimizations [ 475.076068][ T27] audit: type=1800 audit(1771012061.158:115): pid=13272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2266" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 475.185923][T11687] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 475.284160][T13319] CUSE: info not properly terminated [ 475.509981][ T4324] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 475.660152][T13325] device syzkaller1 entered promiscuous mode [ 475.698025][ T4324] usb 2-1: Using ep0 maxpacket: 16 [ 475.707475][ T4324] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.726431][ T4324] usb 2-1: config 0 has no interface number 0 [ 475.749627][ T4324] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 475.778071][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.797014][ T4324] usb 2-1: Product: syz [ 475.802367][ T4324] usb 2-1: Manufacturer: syz [ 475.806998][ T4324] usb 2-1: SerialNumber: syz [ 475.851315][ T4324] usb 2-1: config 0 descriptor?? [ 475.872215][ T4324] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 477.067783][ T3598] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 477.225891][T13340] loop3: detected capacity change from 0 to 131072 [ 477.264122][T13340] F2FS-fs (loop3): invalid crc value [ 477.265285][ T3598] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.351621][ T3598] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.355191][T13340] F2FS-fs (loop3): Found nat_bits in checkpoint [ 477.370929][ T3598] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 477.407291][T13340] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 477.430048][T13340] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 477.433986][ T3598] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 477.473570][ T3598] usb 9-1: Manufacturer: syz [ 477.515392][ T4324] gspca_spca1528: reg_w err -71 [ 477.521600][ T4324] spca1528: probe of 2-1:0.1 failed with error -71 [ 477.524578][ T3598] usb 9-1: config 0 descriptor?? [ 477.576840][ T4324] usb 2-1: USB disconnect, device number 12 [ 477.745600][T13372] device wg1 entered promiscuous mode [ 478.563853][ T3598] uclogic 0003:256C:006D.0024: v1 frame probing failed: -71 [ 478.574611][T13390] loop4: detected capacity change from 0 to 512 [ 478.583975][ T3598] uclogic 0003:256C:006D.0024: failed probing parameters: -71 [ 478.614726][ T3598] uclogic: probe of 0003:256C:006D.0024 failed with error -71 [ 478.664241][ T3598] usb 9-1: USB disconnect, device number 14 [ 478.720866][T13390] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 478.779632][T13390] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.870235][T13390] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #2: comm syz.4.2296: corrupted inode contents [ 478.898829][T13401] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 478.947572][T13390] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #2: comm syz.4.2296: mark_inode_dirty error [ 478.968467][T13401] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2298'. [ 478.980120][T13390] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #2: comm syz.4.2296: corrupted inode contents [ 479.019951][T13390] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2296: mark_inode_dirty error [ 479.261808][T12482] EXT4-fs (loop4): unmounting filesystem. [ 479.286483][ T3598] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 479.498995][ T3598] usb 10-1: Using ep0 maxpacket: 8 [ 479.513788][ T3598] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 479.538505][ T3598] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.569293][ T3598] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.594795][ T3598] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.614027][ T3598] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.615296][ T4311] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 479.642980][ T3598] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 479.665259][ T3598] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.832885][ T4311] usb 4-1: Using ep0 maxpacket: 32 [ 479.839961][ T4311] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 479.886105][ T4311] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 479.907703][ T3598] usb 10-1: usb_control_msg returned -32 [ 479.913431][ T3598] usbtmc 10-1:16.0: can't read capabilities [ 479.917806][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 479.976064][ T4311] usb 4-1: Product: syz [ 479.995039][ T4311] usb 4-1: Manufacturer: syz [ 479.999704][ T4311] usb 4-1: SerialNumber: syz [ 480.032927][ T4311] usb 4-1: config 0 descriptor?? [ 480.046532][T13411] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 480.284396][T13411] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 480.319654][ T3598] usb 4-1: USB disconnect, device number 23 [ 480.647607][T13463] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 480.856951][ T9270] usb 10-1: USB disconnect, device number 10 [ 481.064517][T13476] loop8: detected capacity change from 0 to 4096 [ 481.072389][ T3598] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 481.116593][T13476] EXT4-fs (loop8): Test dummy encryption mode enabled [ 481.161846][T13476] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 481.271160][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.304841][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.349297][ T3598] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 481.375840][ T9104] EXT4-fs (loop8): unmounting filesystem. [ 481.418085][ T3598] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 481.457816][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.503044][ T3598] usb 2-1: config 0 descriptor?? [ 481.816541][ T5432] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 481.924332][ T3598] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 481.978833][ T3598] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 482.044784][ T4555] tipc: Subscription rejected, illegal request [ 482.046837][ T5432] usb 9-1: Using ep0 maxpacket: 8 [ 482.079292][ T5432] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 482.118127][ T5432] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 482.147791][ T5432] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.157771][ T5432] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.236832][ T5432] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 482.289208][ T5432] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.334392][T13519] loop4: detected capacity change from 0 to 8 [ 482.529319][ T5432] usb 9-1: GET_CAPABILITIES returned 0 [ 482.535070][ T5432] usbtmc 9-1:16.0: can't read capabilities [ 483.039790][T13535] loop4: detected capacity change from 0 to 512 [ 483.149416][T13535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 483.195457][T13535] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 483.242318][ C0] plantronics 0003:047F:FFFF.0025: usb_submit_urb(ctrl) failed: -1 [ 483.259163][T13546] loop3: detected capacity change from 0 to 512 [ 483.302363][T13546] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 483.322819][ T4311] usb 9-1: USB disconnect, device number 15 [ 483.337109][T13546] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 483.402119][T13546] System zones: 0-1, 15-15, 18-18, 34-34 [ 483.431496][T13546] EXT4-fs (loop3): orphan cleanup on readonly fs [ 483.437985][T13546] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 483.469695][T12482] EXT4-fs (loop4): unmounting filesystem. [ 483.475681][T13546] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 483.528253][T13546] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 483.568242][T13546] EXT4-fs (loop3): 1 truncate cleaned up [ 483.590216][T13546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 483.809904][T13555] loop4: detected capacity change from 0 to 4096 [ 484.066779][T13566] loop8: detected capacity change from 0 to 512 [ 484.105521][ T3598] usb 2-1: USB disconnect, device number 13 [ 484.144074][T13563] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.204203][T13563] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.227428][T13566] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 484.339743][T13566] EXT4-fs error (device loop8): ext4_readdir:223: inode #12: comm syz.8.2344: path /211/file0/file0: directory fails checksum at offset 0 [ 484.503774][T13571] loop9: detected capacity change from 0 to 32768 [ 484.573724][T13571] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 484.636328][T12482] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 484.664966][T12482] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 484.693127][ T9104] EXT4-fs (loop8): unmounting filesystem. [ 484.768249][ T9318] ocfs2: Unmounting device (7,9) on (node local) [ 485.262276][T13592] loop9: detected capacity change from 0 to 128 [ 485.380740][T13592] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 485.415844][T13592] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 485.436452][T11687] EXT4-fs (loop3): unmounting filesystem. [ 485.681187][T13604] loop5: detected capacity change from 0 to 7 [ 485.717277][T13604] Dev loop5: unable to read RDB block 7 [ 485.734605][T13604] loop5: unable to read partition table [ 485.756371][ T9318] EXT4-fs (loop9): unmounting filesystem. [ 485.775431][T13604] loop5: partition table beyond EOD, truncated [ 485.810553][T13604] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 485.850370][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.926864][ T6045] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.213118][ T6045] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.404271][ T6045] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.574242][ T6045] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.800275][T13597] loop8: detected capacity change from 0 to 32768 [ 486.917963][T13597] XFS (loop8): Mounting V5 Filesystem [ 487.181020][ T4282] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 487.192817][ T4282] Bluetooth: hci0: Injecting HCI hardware error event [ 487.214201][T11735] Bluetooth: hci0: hardware error 0x00 [ 487.223132][T13597] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 487.344050][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.357907][T13597] XFS (loop8): Starting recovery (logdev: internal) [ 487.368454][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.386899][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.453132][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.460818][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 487.468568][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.558642][T13597] XFS (loop8): Ending recovery (logdev: internal) [ 487.600091][T13657] loop4: detected capacity change from 0 to 256 [ 487.658793][T13657] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 487.677198][ T27] audit: type=1800 audit(1771012073.632:116): pid=13597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2352" name="file1" dev="loop8" ino=4422 res=0 errno=0 [ 487.697917][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.738928][T13657] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 488.092993][ T9104] XFS (loop8): Unmounting Filesystem [ 488.442958][T13681] loop1: detected capacity change from 0 to 128 [ 488.774121][T13648] chnl_net:caif_netlink_parms(): no params data found [ 489.153396][T13703] "syz.8.2373" (13703) uses obsolete ecb(arc4) skcipher [ 489.258681][T13648] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.305331][T13648] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.313216][T13648] device bridge_slave_0 entered promiscuous mode [ 489.462579][T13648] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.475348][T13648] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.504215][T13648] device bridge_slave_1 entered promiscuous mode [ 489.516627][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 489.526804][T11735] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 489.888159][T13715] netlink: 'syz.9.2385': attribute type 1 has an invalid length. [ 489.959497][ T5432] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 489.975580][T13715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.032916][T13717] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.049480][T13717] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.064552][T13717] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.073352][T13717] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.104592][T13717] bond1: (slave geneve2): making interface the new active one [ 490.122909][T13717] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 490.158950][ T5432] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 490.175196][ T5432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.198652][ T5432] usb 5-1: config 0 descriptor?? [ 490.211088][ T9270] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 490.235535][ T5432] cp210x 5-1:0.0: cp210x converter detected [ 490.244139][ T6032] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 490.279996][T13648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.310844][T13648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.416027][ T9270] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 490.450515][ T9270] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.476953][T13734] loop9: detected capacity change from 0 to 256 [ 490.483460][ T9270] usb 9-1: Product: syz [ 490.487648][ T9270] usb 9-1: Manufacturer: syz [ 490.492269][ T9270] usb 9-1: SerialNumber: syz [ 490.554819][ T9270] usb 9-1: config 0 descriptor?? [ 490.570751][T13734] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 490.635608][ T5432] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 490.710678][T13716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.759485][T13716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.778849][ T9270] usb 9-1: USB disconnect, device number 16 [ 490.821274][ T5432] usb 5-1: cp210x converter now attached to ttyUSB0 [ 490.895618][T13648] team0: Port device team_slave_0 added [ 490.945378][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.969374][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.031937][ T4324] usb 5-1: USB disconnect, device number 23 [ 491.037979][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.046442][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.055945][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.092427][ T4324] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 491.105387][ T6045] device bridge_slave_1 left promiscuous mode [ 491.109608][T13745] loop9: detected capacity change from 0 to 256 [ 491.116197][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.127526][ T4324] cp210x 5-1:0.0: device disconnected [ 491.175152][ T6045] device bridge_slave_0 left promiscuous mode [ 491.195658][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.201547][T13745] FAT-fs (loop9): Directory bread(block 64) failed [ 491.257080][T13745] FAT-fs (loop9): Directory bread(block 65) failed [ 491.263974][T13745] FAT-fs (loop9): Directory bread(block 66) failed [ 491.298106][T13745] FAT-fs (loop9): Directory bread(block 67) failed [ 491.311201][T13745] FAT-fs (loop9): Directory bread(block 68) failed [ 491.321449][ T6045] device veth1_macvtap left promiscuous mode [ 491.339088][T13745] FAT-fs (loop9): Directory bread(block 69) failed [ 491.345841][T13745] FAT-fs (loop9): Directory bread(block 70) failed [ 491.351924][ T6045] device veth0_macvtap left promiscuous mode [ 491.360348][T13745] FAT-fs (loop9): Directory bread(block 71) failed [ 491.366141][ T6045] device veth1_vlan left promiscuous mode [ 491.367083][T13745] FAT-fs (loop9): Directory bread(block 72) failed [ 491.386394][ T6045] device veth0_vlan left promiscuous mode [ 491.414754][T13745] FAT-fs (loop9): Directory bread(block 73) failed [ 491.568565][ T5427] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 491.609024][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 491.769730][ T5427] usb 2-1: Using ep0 maxpacket: 32 [ 491.777048][ T5427] usb 2-1: config 0 has no interfaces? [ 491.787563][T13754] loop4: detected capacity change from 0 to 1024 [ 491.805654][ T5427] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 491.821444][T13754] EXT4-fs: Ignoring removed nobh option [ 491.833872][T13754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 491.845886][ T5427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.896296][ T5427] usb 2-1: Product: syz [ 491.922421][ T5427] usb 2-1: Manufacturer: syz [ 491.931567][ T5427] usb 2-1: SerialNumber: syz [ 491.948613][T13754] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 491.978266][ T5427] usb 2-1: config 0 descriptor?? [ 492.454241][T13747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.476103][T13747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.481678][T12482] EXT4-fs (loop4): unmounting filesystem. [ 492.511533][ T5427] usb 2-1: USB disconnect, device number 14 [ 493.137953][ T6045] team0 (unregistering): Port device team_slave_1 removed [ 493.217484][ T6045] team0 (unregistering): Port device team_slave_0 removed [ 493.279546][ T6045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.341477][ T6045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.706992][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 493.757401][T13789] loop4: detected capacity change from 0 to 256 [ 493.777522][T13789] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 494.134066][ T6045] bond0 (unregistering): Released all slaves [ 494.306671][T13648] team0: Port device team_slave_1 added [ 494.465079][T13648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.472092][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.620462][T13648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.701955][T13648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.740116][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.855067][T13648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.279620][T13648] device hsr_slave_0 entered promiscuous mode [ 495.306209][T13648] device hsr_slave_1 entered promiscuous mode [ 495.326539][T13648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.367045][T13648] Cannot create hsr debugfs directory [ 495.725351][T13834] loop8: detected capacity change from 0 to 2048 [ 495.789025][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 495.826429][T13834] UDF-fs: error (device loop8): udf_read_inode: (ino 1312) failed !bh [ 495.880050][T13834] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 495.939460][T13834] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 496.006674][T13834] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 496.056187][T13834] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 496.089754][T13834] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 496.140471][ T4324] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 496.167461][T13834] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 496.214456][T13834] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 496.336188][ T4324] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 496.371534][T13834] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 496.372580][ T4324] usb 10-1: config 0 interface 0 has no altsetting 0 [ 496.422766][ T4324] usb 10-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 496.423845][T13834] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 496.461573][ T4324] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.491980][T13834] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 496.504551][ T4324] usb 10-1: config 0 descriptor?? [ 496.538545][T13834] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 496.569907][T13834] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 496.617960][T13834] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 496.663693][T13857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2425'. [ 496.688236][T13857] device vlan2 entered promiscuous mode [ 496.712625][T13857] device gretap0 entered promiscuous mode [ 496.805655][T13648] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 496.931358][ T4324] wacom 0003:056A:003F.0026: hidraw0: USB HID v0.06 Device [HID 056a:003f] on usb-dummy_hcd.9-1/input0 [ 496.966964][T13648] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 497.000972][T13648] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 497.043891][T13648] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 497.133936][ T9270] usb 10-1: USB disconnect, device number 11 [ 497.340072][T13648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.392967][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 497.407987][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 497.428254][T13872] fido_id[13872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 497.437137][T13648] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.475927][T13867] device syzkaller1 entered promiscuous mode [ 497.570260][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 497.581774][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 497.601717][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.608920][ T6057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.645246][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 497.661955][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.690701][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.711178][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.718385][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.763941][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.784331][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.848842][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.890362][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.915712][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 497.948599][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.992720][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 498.053129][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 498.077209][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.099399][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 498.123501][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.138359][T13905] loop8: detected capacity change from 0 to 1024 [ 498.153430][T13648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 498.677491][T13919] loop8: detected capacity change from 0 to 2368 [ 498.765790][T13923] loop9: detected capacity change from 0 to 256 [ 498.875306][T13923] FAT-fs (loop9): Directory bread(block 64) failed [ 498.919397][T13923] FAT-fs (loop9): Directory bread(block 65) failed [ 498.955986][T13923] FAT-fs (loop9): Directory bread(block 66) failed [ 498.986261][T13923] FAT-fs (loop9): Directory bread(block 67) failed [ 499.011268][T13923] FAT-fs (loop9): Directory bread(block 68) failed [ 499.032530][T13923] FAT-fs (loop9): Directory bread(block 69) failed [ 499.054184][T13923] FAT-fs (loop9): Directory bread(block 70) failed [ 499.076581][T13923] FAT-fs (loop9): Directory bread(block 71) failed [ 499.091406][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.104603][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.119465][T13923] FAT-fs (loop9): Directory bread(block 72) failed [ 499.142238][T13648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.156368][T13923] FAT-fs (loop9): Directory bread(block 73) failed [ 499.332402][T13931] loop8: detected capacity change from 0 to 7 [ 499.352438][T13931] Dev loop8: unable to read RDB block 7 [ 499.358076][T13931] loop8: unable to read partition table [ 499.407176][T13931] loop8: partition table beyond EOD, truncated [ 499.441360][T13931] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 499.798664][T13945] input: syz0 as /devices/virtual/input/input28 [ 499.927602][ T4311] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 500.141633][ T4311] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.163202][ T4311] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.192590][ T4311] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 500.220943][ T4311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.263091][ T4311] usb 10-1: SerialNumber: syz [ 500.442499][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 500.457435][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 500.500378][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 500.508859][ T4311] usb 10-1: 0:2 : does not exist [ 500.531304][ T4311] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 500.563264][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 500.580609][ T4311] usb 10-1: USB disconnect, device number 12 [ 500.589719][T13648] device veth0_vlan entered promiscuous mode [ 500.608399][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 500.632230][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 500.675089][T13648] device veth1_vlan entered promiscuous mode [ 500.777990][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 500.798040][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 500.830989][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 500.851371][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.888560][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 500.920739][T13648] device veth0_macvtap entered promiscuous mode [ 500.952845][T13648] device veth1_macvtap entered promiscuous mode [ 501.037533][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.048397][T13979] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 501.071117][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.093768][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.114792][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.135707][T13980] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 501.183626][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.211152][T13984] loop8: detected capacity change from 0 to 256 [ 501.219332][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.231867][T13984] exfat: Unknown parameter 'âÎa Ú>f' [ 501.248633][T13648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.288801][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 501.316538][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 501.362488][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 501.410112][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 501.435335][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.476974][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.498467][T13993] loop8: detected capacity change from 0 to 64 [ 501.506983][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.529416][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.552127][T13993] hfs: hfs: Invalid key length: 94 [ 501.559137][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.585015][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.586054][ T5587] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 501.620532][T13648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.657950][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 501.672234][ T6045] ------------[ cut here ]------------ [ 501.677738][ T6045] kernel BUG at fs/hfs/inode.c:449! [ 501.690189][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 501.701487][T13648] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.711145][ T6045] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 501.714207][T13999] Bluetooth: hci0: invalid len left 7, exp >= 257 [ 501.717239][ T6045] CPU: 0 PID: 6045 Comm: kworker/u4:23 Not tainted syzkaller #0 [ 501.717262][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 501.728212][T13648] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.731287][ T6045] Workqueue: writeback wb_workfn (flush-7:8) [ 501.731323][ T6045] RIP: 0010:hfs_write_inode+0xa1a/0xa20 [ 501.731354][ T6045] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 60 05 87 ff e9 47 fe ff ff e8 96 19 36 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 501.731371][ T6045] RSP: 0018:ffffc900045f73a0 EFLAGS: 00010293 [ 501.764483][T13648] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.781245][ T6045] RAX: ffffffff824c5a1a RBX: ffff8880240a4918 RCX: ffff88805852bb80 [ 501.781266][ T6045] RDX: 0000000000000000 RSI: ffffffff8cd252e0 RDI: 0000000000000000 [ 501.781281][ T6045] RBP: ffffc900045f7530 R08: ffff88805852bb80 R09: 0000000000000003 [ 501.781295][ T6045] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 501.781308][ T6045] R13: 1ffff920008bee78 R14: 0000000000000000 R15: ffff8880240a48d8 [ 501.781321][ T6045] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 501.781339][ T6045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.781352][ T6045] CR2: 0000557b709c8950 CR3: 0000000056f62000 CR4: 00000000003526f0 [ 501.781372][ T6045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 501.816296][T13648] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.820105][ T6045] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 501.820125][ T6045] Call Trace: [ 501.820133][ T6045] [ 501.820142][ T6045] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 501.820179][ T6045] ? __writeback_single_inode+0x4ae/0x1160 [ 501.820209][ T6045] ? __rwlock_init+0x140/0x140 [ 501.906344][ T6045] __writeback_single_inode+0x75b/0x1160 [ 501.912022][ T6045] writeback_sb_inodes+0xb30/0x1850 [ 501.917272][ T6045] ? queue_io+0x5a0/0x5a0 [ 501.921648][ T6045] ? rcu_is_watching+0x11/0xa0 [ 501.926451][ T6045] wb_writeback+0x482/0xd50 [ 501.930995][ T6045] ? percpu_ref_tryget+0x250/0x250 [ 501.936153][ T6045] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 501.942173][ T6045] ? _raw_spin_unlock_irq+0x1f/0x40 [ 501.947404][ T6045] wb_workfn+0x423/0xee0 [ 501.951695][ T6045] ? inode_wait_for_writeback+0x220/0x220 [ 501.957458][ T6045] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 501.963479][ T6045] ? read_lock_is_recursive+0x10/0x10 [ 501.968883][ T6045] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 501.974806][ T6045] ? _raw_spin_unlock+0x40/0x40 [ 501.979688][ T6045] ? _raw_spin_unlock_irq+0x1f/0x40 [ 501.984914][ T6045] ? process_one_work+0x7b0/0x1160 [ 501.990055][ T6045] process_one_work+0x8a2/0x1160 [ 501.995042][ T6045] ? worker_detach_from_pool+0x240/0x240 [ 502.000717][ T6045] ? _raw_spin_lock_irq+0xb7/0xf0 [ 502.005771][ T6045] ? _raw_spin_lock_irqsave+0x100/0x100 [ 502.011344][ T6045] ? kthread_data+0x4b/0xc0 [ 502.015976][ T6045] worker_thread+0xaa2/0x1270 [ 502.020693][ T6045] kthread+0x29d/0x330 [ 502.024784][ T6045] ? worker_clr_flags+0x1a0/0x1a0 [ 502.029838][ T6045] ? kthread_blkcg+0xd0/0xd0 [ 502.034453][ T6045] ret_from_fork+0x1f/0x30 [ 502.038912][ T6045] [ 502.041953][ T6045] Modules linked in: [ 502.049106][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.051237][ T6045] ---[ end trace 0000000000000000 ]--- [ 502.061039][ T6045] RIP: 0010:hfs_write_inode+0xa1a/0xa20 [ 502.069724][ T6045] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 60 05 87 ff e9 47 fe ff ff e8 96 19 36 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 502.090008][ T6045] RSP: 0018:ffffc900045f73a0 EFLAGS: 00010293 [ 502.106325][T13648] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 502.129927][ T6045] RAX: ffffffff824c5a1a RBX: ffff8880240a4918 RCX: ffff88805852bb80 [ 502.152352][ T5587] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.172111][ T5587] usb 5-1: config 0 interface 0 has no altsetting 0 [ 502.178762][ T5587] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 502.188098][ T6045] RDX: 0000000000000000 RSI: ffffffff8cd252e0 RDI: 0000000000000000 [ 502.196709][ T6045] RBP: ffffc900045f7530 R08: ffff88805852bb80 R09: 0000000000000003 [ 502.197960][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.204734][ T5587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.209988][ T5587] usb 5-1: config 0 descriptor?? [ 502.217014][T13648] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 502.224271][ T6045] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 502.241654][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.254675][ T6045] R13: 1ffff920008bee78 R14: 0000000000000000 R15: ffff8880240a48d8 [ 502.263460][ T6045] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 502.263749][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 502.272478][ T6045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.272496][ T6045] CR2: 00007f68b75e96c0 CR3: 000000007c8aa000 CR4: 00000000003506f0 [ 502.272515][ T6045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 502.272528][ T6045] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 502.272543][ T6045] Kernel panic - not syncing: Fatal exception [ 502.280051][ T6045] Kernel Offset: disabled [ 502.320836][ T6045] Rebooting in 86400 seconds..