last executing test programs: 10.626221464s ago: executing program 3 (id=1289): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x6, 0x0, @void}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r2, 0x6, 0x0, 0x0, &(0x7f000001f380)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 10.172588424s ago: executing program 3 (id=1293): keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='new default user:syz 00000000000'], 0x2a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) request_key(&(0x7f0000000200)='user\x00', 0x0, 0x0, 0x0) 9.795356929s ago: executing program 3 (id=1297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB='\f\x00,'], 0x28}}, 0x0) 9.07974543s ago: executing program 3 (id=1303): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 8.925205541s ago: executing program 3 (id=1305): futex(&(0x7f0000000000)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) 7.94478399s ago: executing program 3 (id=1312): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 6.312026056s ago: executing program 4 (id=1318): ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000002c0)="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") r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 5.170392159s ago: executing program 2 (id=1322): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x22000d5, &(0x7f0000000580)={[{@noblock_validity}, {@noquota}]}, 0xfe, 0x236, &(0x7f0000000300)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="400100001000130700000000000000007f000001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f0000010000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000050001200"], 0x140}}, 0x0) 4.907899417s ago: executing program 4 (id=1323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='nv\x00', 0x3) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3.994932904s ago: executing program 2 (id=1325): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4000, 0x0, @empty}}, 0x3, 0x8}, 0x90) 3.452215415s ago: executing program 4 (id=1327): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) 3.380125198s ago: executing program 0 (id=1328): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) 3.131814971s ago: executing program 1 (id=1329): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, &(0x7f00000002c0)) 2.783344148s ago: executing program 4 (id=1330): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f0000000080)={0x0, 0x584, &(0x7f0000000040)=[{&(0x7f0000000000)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.782884632s ago: executing program 0 (id=1331): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x3, r2, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), 0x0, 0x0, 0x0) 2.782387463s ago: executing program 1 (id=1332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r3, @ANYBLOB="08003500000000001400508005000200f0ffffff08000700010000000a0006009203effbb1bc00000a003400020202020202000008002600"], 0x58}}, 0x0) 2.22245745s ago: executing program 0 (id=1333): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x9}]}, 0x24}}, 0x24044884) 2.216219664s ago: executing program 1 (id=1334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 2.007891108s ago: executing program 2 (id=1335): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000000c001400e9c08f22ae95be8a"], 0x28}}, 0x0) 1.868595246s ago: executing program 4 (id=1336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000001ac0)={0x0, @empty, 0x0, 0x0, 'sh\x00', 0x0, 0x80000001, 0x6e}, 0x2c) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/65}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f00000014c0)=""/105}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f0000001700)=""/94}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x4000000000001dc, 0x0, 0x0) 1.781864489s ago: executing program 1 (id=1337): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'user\x00'}, 0x7a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.678643205s ago: executing program 0 (id=1338): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e23}, 0x6e, 0x0}}], 0x2, 0x0) 1.396718092s ago: executing program 2 (id=1339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x6c}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}]]}, 0x34}}, 0x0) 1.363595157s ago: executing program 1 (id=1340): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 1.219360803s ago: executing program 0 (id=1341): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011) 1.201431052s ago: executing program 4 (id=1342): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r2, 0xfffd}, 0x8) 665.060576ms ago: executing program 2 (id=1343): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) 363.111556ms ago: executing program 1 (id=1344): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2}, 0x40) syz_emit_ethernet(0xe, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 38.878696ms ago: executing program 2 (id=1345): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1f6000000000000000001e00000008000300", @ANYRES32=r1, @ANYBLOB='0\x00/'], 0x4c}}, 0x0) 0s ago: executing program 0 (id=1346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xa8}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): devsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.757014][ T6501] EXT4-fs error (device loop1): __ext4_fill_super:5458: inode #2: comm syz.1.376: iget: special inode unallocated [ 392.812528][ T6501] EXT4-fs (loop1): get root inode failed [ 392.818549][ T6501] EXT4-fs (loop1): mount failed [ 393.038011][ T6516] fuse: Bad value for 'fd' [ 393.458200][ T4550] bridge_slave_1: left allmulticast mode [ 393.464245][ T4550] bridge_slave_1: left promiscuous mode [ 393.470920][ T4550] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.753318][ T4550] bridge_slave_0: left allmulticast mode [ 393.765558][ T4550] bridge_slave_0: left promiscuous mode [ 393.772413][ T4550] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.694609][ T52] Bluetooth: hci2: command tx timeout [ 395.041277][ T6535] loop1: detected capacity change from 0 to 256 [ 395.064442][ T4550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.095630][ T4550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.113298][ T4550] bond0 (unregistering): Released all slaves [ 395.248376][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 395.320366][ T6535] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d) [ 395.525409][ T4550] tipc: Disabling bearer [ 395.531296][ T4550] tipc: Left network mode [ 396.376846][ T4550] hsr_slave_0: left promiscuous mode [ 396.425879][ T4550] hsr_slave_1: left promiscuous mode [ 396.473580][ T4550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.481395][ T4550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.569206][ T4550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.577280][ T4550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.803289][ T4550] veth1_macvtap: left promiscuous mode [ 396.809321][ T4550] veth0_macvtap: left promiscuous mode [ 396.815549][ T4550] veth1_vlan: left promiscuous mode [ 396.821280][ T4550] veth0_vlan: left promiscuous mode [ 396.841815][ T52] Bluetooth: hci2: command tx timeout [ 396.889305][ T6550] loop1: detected capacity change from 0 to 2048 [ 397.147881][ T6550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.258623][ T5242] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 397.492150][ T5242] usb 3-1: Using ep0 maxpacket: 16 [ 397.572644][ T5242] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 397.582935][ T5242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.675129][ T5242] usb 3-1: config 0 descriptor?? [ 397.722555][ T5242] usb 3-1: invalid MIDI EP [ 397.727540][ T5242] usb 3-1: snd-bcd2000: error during probing [ 397.736728][ T5242] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 397.864269][ T5882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.789827][ T4550] team0 (unregistering): Port device team_slave_1 removed [ 398.887700][ T4550] team0 (unregistering): Port device team_slave_0 removed [ 399.086537][ T10] usb 3-1: USB disconnect, device number 4 [ 399.341299][ T52] Bluetooth: hci2: command tx timeout [ 399.873561][ T6505] chnl_net:caif_netlink_parms(): no params data found [ 400.448214][ T6569] loop3: detected capacity change from 0 to 32768 [ 400.905199][ T6585] netlink: 'syz.0.404': attribute type 11 has an invalid length. [ 401.397260][ T52] Bluetooth: hci2: command tx timeout [ 402.587276][ T6606] loop3: detected capacity change from 0 to 2048 [ 402.867936][ T6606] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 402.903145][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.914278][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.924184][ T6505] bridge_slave_0: entered allmulticast mode [ 402.933567][ T6505] bridge_slave_0: entered promiscuous mode [ 402.949444][ T6505] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.957583][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.965507][ T6505] bridge_slave_1: entered allmulticast mode [ 402.965692][ T6606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.978394][ T6505] bridge_slave_1: entered promiscuous mode [ 403.168768][ T6505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.288752][ T6505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.766857][ T6505] team0: Port device team_slave_0 added [ 403.865469][ T6505] team0: Port device team_slave_1 added [ 403.967849][ T6622] loop2: detected capacity change from 0 to 64 [ 404.390824][ T6505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.398387][ T6505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.428414][ T6505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.467075][ T6620] loop3: detected capacity change from 0 to 2048 [ 404.564697][ T6620] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 404.646887][ T6505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.654486][ T6505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.681120][ T6505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.912155][ T6620] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.058353][ T6505] hsr_slave_0: entered promiscuous mode [ 405.116342][ T6505] hsr_slave_1: entered promiscuous mode [ 405.174405][ T6629] netlink: 165 bytes leftover after parsing attributes in process `syz.2.420'. [ 405.192318][ T6505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.200377][ T6505] Cannot create hsr debugfs directory [ 407.138403][ T6654] sctp: [Deprecated]: syz.2.428 (pid 6654) Use of int in max_burst socket option. [ 407.138403][ T6654] Use struct sctp_assoc_value instead [ 407.907104][ T6505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 408.081867][ T6505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 408.213536][ T6505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 408.302283][ T6505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 408.346766][ T6671] netlink: 'syz.0.434': attribute type 29 has an invalid length. [ 408.423865][ T6677] netlink: 'syz.0.434': attribute type 29 has an invalid length. [ 408.461294][ T6671] netlink: 'syz.0.434': attribute type 29 has an invalid length. [ 408.572835][ T6671] netlink: 'syz.0.434': attribute type 29 has an invalid length. [ 409.216060][ T6505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.339056][ T6505] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.370086][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.377984][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.597676][ T6505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.608525][ T6505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.757118][ T6693] loop1: detected capacity change from 0 to 64 [ 409.773750][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.781522][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.943613][ T6693] hfs: unable to locate alternate MDB [ 409.949332][ T6693] hfs: continuing without an alternate MDB [ 411.052467][ T6705] loop1: detected capacity change from 0 to 128 [ 411.112560][ T6705] EXT4-fs: Ignoring removed i_version option [ 411.216976][ T6705] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 411.315415][ T6705] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 411.540811][ T6705] Bluetooth: MGMT ver 1.23 [ 411.794657][ T6713] macvlan2: entered promiscuous mode [ 411.804136][ T6713] team_slave_0: entered promiscuous mode [ 411.810195][ T6713] team_slave_1: entered promiscuous mode [ 411.816306][ T6713] team0: entered promiscuous mode [ 411.826169][ T6713] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 411.843331][ T6713] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 411.945951][ T5882] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.208543][ T6505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.317909][ T6715] loop2: detected capacity change from 0 to 512 [ 412.566375][ T6715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 412.580347][ T6715] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.971365][ T6731] loop1: detected capacity change from 0 to 512 [ 413.096060][ T6731] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 413.228006][ T5905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 413.438404][ T6731] loop1: detected capacity change from 0 to 512 [ 413.518979][ T6731] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 413.595238][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.602953][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 413.605160][ T6731] EXT4-fs (loop1): 1 orphan inode deleted [ 413.615846][ T6731] EXT4-fs (loop1): 1 truncate cleaned up [ 413.623651][ T6731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.656337][ T6731] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 414.074312][ T5882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.130792][ T6741] tracefs: Invalid gid '0x00000000ffffffff' [ 414.361005][ T6743] vlan2: entered promiscuous mode [ 414.366535][ T6743] veth0_virt_wifi: entered promiscuous mode [ 414.540995][ T6743] veth0_virt_wifi: left promiscuous mode [ 414.627950][ T6748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.458'. [ 415.697753][ T6766] loop2: detected capacity change from 0 to 256 [ 416.078088][ T6505] veth0_vlan: entered promiscuous mode [ 416.160298][ T6505] veth1_vlan: entered promiscuous mode [ 416.588517][ T6505] veth0_macvtap: entered promiscuous mode [ 416.687674][ T6505] veth1_macvtap: entered promiscuous mode [ 416.742858][ T6775] atomic_op ffff888040383d28 conn xmit_atomic 0000000000000000 [ 417.110070][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.121547][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.131904][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.142690][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.152853][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.163634][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.173918][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.184757][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.200443][ T6505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.335635][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.346549][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.356835][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.367679][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.377826][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.388718][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.399002][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.409819][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.432018][ T6505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.453214][ T6505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.463490][ T6505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.472759][ T6505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.481952][ T6505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.194777][ T6789] loop3: detected capacity change from 0 to 512 [ 418.286666][ T6783] loop0: detected capacity change from 0 to 4096 [ 418.329348][ T6783] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 418.464261][ T6789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.477548][ T6789] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.829110][ T6789] EXT4-fs error (device loop3): ext4_get_first_dir_block:3543: inode #12: comm syz.3.472: directory missing '.' [ 419.316724][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.346738][ T6175] ntfs3: loop0: mft corrupted [ 419.429874][ T6175] ntfs3: loop0: mft corrupted [ 419.500863][ T6175] ntfs3: loop0: mft corrupted [ 420.098203][ T4550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.132329][ T1821] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 420.308417][ T4550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.346167][ T1821] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 420.358162][ T1821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.369584][ T1821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.379733][ T1821] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 420.395666][ T1821] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 420.405910][ T1821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.517966][ T4550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.585272][ T1821] usb 2-1: config 0 descriptor?? [ 420.709789][ T4550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.178710][ T1821] nintendo 0003:057E:2009.0005: unknown main item tag 0x0 [ 421.188635][ T1821] nintendo 0003:057E:2009.0005: unknown main item tag 0x0 [ 421.196236][ T1821] nintendo 0003:057E:2009.0005: item fetching failed at offset 2/5 [ 421.299347][ T6829] loop2: detected capacity change from 0 to 2048 [ 421.325797][ T4550] bridge_slave_1: left allmulticast mode [ 421.332425][ T4550] bridge_slave_1: left promiscuous mode [ 421.339182][ T4550] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.428590][ T6829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.429026][ T1821] nintendo 0003:057E:2009.0005: HID parse failed [ 421.456574][ T4550] bridge_slave_0: left allmulticast mode [ 421.462815][ T4550] bridge_slave_0: left promiscuous mode [ 421.469509][ T4550] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.493059][ T1821] nintendo 0003:057E:2009.0005: probe - fail = -22 [ 421.500397][ T1821] nintendo 0003:057E:2009.0005: probe with driver nintendo failed with error -22 [ 421.574178][ T1821] usb 2-1: USB disconnect, device number 7 [ 422.243738][ T4550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.299253][ T4550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.327566][ T4550] bond0 (unregistering): Released all slaves [ 423.202410][ T4550] hsr_slave_0: left promiscuous mode [ 423.242204][ T4550] hsr_slave_1: left promiscuous mode [ 423.288772][ T4550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.297046][ T4550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.305708][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 423.329627][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.387735][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 423.397867][ T4550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.405857][ T4550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.526149][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 423.550635][ T4550] veth1_macvtap: left promiscuous mode [ 423.559498][ T4550] veth0_macvtap: left promiscuous mode [ 423.565662][ T4550] veth1_vlan: left promiscuous mode [ 423.571431][ T4550] veth0_vlan: left promiscuous mode [ 423.695638][ T5183] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 423.705309][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 424.766788][ T4550] team0 (unregistering): Port device team_slave_1 removed [ 424.808856][ T4550] team0 (unregistering): Port device team_slave_0 removed [ 425.948224][ T52] Bluetooth: hci0: command tx timeout [ 426.318017][ T6882] loop2: detected capacity change from 0 to 512 [ 426.447805][ T6877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.490'. [ 426.588978][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 427.009307][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.017705][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.163956][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.172601][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.236758][ T6882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.254210][ T6882] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.862126][ T5905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.929906][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.386'. [ 427.939344][ T6898] netlink: 472 bytes leftover after parsing attributes in process `syz.4.386'. [ 428.033911][ T52] Bluetooth: hci0: command tx timeout [ 428.317052][ T6903] loop2: detected capacity change from 0 to 512 [ 428.489201][ T6903] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.497: corrupted in-inode xattr: invalid ea_ino [ 428.512152][ T6903] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.497: couldn't read orphan inode 15 (err -117) [ 428.554033][ T6903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.597547][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.605678][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.613773][ T6845] bridge_slave_0: entered allmulticast mode [ 428.623568][ T6845] bridge_slave_0: entered promiscuous mode [ 428.657090][ T6912] vlan2: entered allmulticast mode [ 428.666737][ T6912] bond0: entered allmulticast mode [ 428.672395][ T6912] bond_slave_0: entered allmulticast mode [ 428.682523][ T6912] bond_slave_1: entered allmulticast mode [ 428.699158][ T6912] bond0: left allmulticast mode [ 428.704805][ T6912] bond_slave_0: left allmulticast mode [ 428.710529][ T6912] bond_slave_1: left allmulticast mode [ 428.736560][ T29] audit: type=1326 audit(1727257321.191:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a037def9 code=0x7ffc0000 [ 428.759693][ T29] audit: type=1326 audit(1727257321.211:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe1a037def9 code=0x7ffc0000 [ 428.784676][ T29] audit: type=1326 audit(1727257321.211:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a037def9 code=0x7ffc0000 [ 428.808078][ T29] audit: type=1326 audit(1727257321.211:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a037def9 code=0x7ffc0000 [ 428.883619][ T29] audit: type=1326 audit(1727257321.341:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fe1a037def9 code=0x7ffc0000 [ 428.907237][ T29] audit: type=1326 audit(1727257321.341:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a037def9 code=0x7ffc0000 [ 428.932922][ T29] audit: type=1326 audit(1727257321.341:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a037def9 code=0x7ffc0000 [ 428.938079][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.968838][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.976823][ T6845] bridge_slave_1: entered allmulticast mode [ 428.992584][ T6845] bridge_slave_1: entered promiscuous mode [ 429.235544][ T5905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.242837][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.354573][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.806676][ T6845] team0: Port device team_slave_0 added [ 429.862026][ T6845] team0: Port device team_slave_1 added [ 429.992599][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.999911][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.030341][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.033327][ T6927] loop1: detected capacity change from 0 to 128 [ 430.094859][ T6927] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.119786][ T52] Bluetooth: hci0: command tx timeout [ 430.122389][ T6927] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.147708][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.155248][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.182033][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.277516][ T6927] EXT4-fs (loop1): shut down requested (0) [ 430.343265][ T6929] EXT4-fs (loop1): shut down requested (0) [ 430.553105][ T6845] hsr_slave_0: entered promiscuous mode [ 430.585026][ T5882] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 430.703252][ T6935] loop2: detected capacity change from 0 to 1024 [ 430.721074][ T6935] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 430.735404][ T6935] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 430.744501][ T6845] hsr_slave_1: entered promiscuous mode [ 430.746172][ T6935] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 430.761542][ T6935] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 430.885613][ T6845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.895906][ T6845] Cannot create hsr debugfs directory [ 430.939487][ T6933] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 430.958308][ T6933] gretap1: entered promiscuous mode [ 430.963960][ T6933] gretap1: entered allmulticast mode [ 431.066042][ T6937] netlink: 864 bytes leftover after parsing attributes in process `syz.4.512'. [ 431.075717][ T6937] netlink: 84 bytes leftover after parsing attributes in process `syz.4.512'. [ 432.249833][ T52] Bluetooth: hci0: command tx timeout [ 432.656017][ T6945] loop3: detected capacity change from 0 to 4096 [ 433.094089][ T6957] pim6reg: entered allmulticast mode [ 433.150089][ T6959] pim6reg: left allmulticast mode [ 433.265635][ T6845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 433.310585][ T6845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 433.403708][ T6845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 433.453278][ T6845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 433.850930][ T6967] mkiss: ax0: crc mode is auto. [ 433.859002][ T6965] input: syz0 as /devices/virtual/input/input8 [ 434.049668][ T6970] mkiss: ax0: crc mode is auto. [ 434.148369][ T6973] loop2: detected capacity change from 0 to 128 [ 434.292487][ T6973] EXT4-fs (loop2): Test dummy encryption mode enabled [ 434.471079][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.540011][ T6973] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 434.600148][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.609145][ T6973] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 434.691674][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.699681][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.862060][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.869998][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.020756][ T6845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.038585][ T5242] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 435.365542][ T5242] usb 2-1: Using ep0 maxpacket: 8 [ 435.611465][ T6973] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 435.682209][ T5242] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 435.692434][ T5242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.700813][ T5242] usb 2-1: Product: syz [ 435.705457][ T5242] usb 2-1: Manufacturer: syz [ 435.710334][ T5242] usb 2-1: SerialNumber: syz [ 435.750154][ T5242] usb 2-1: config 0 descriptor?? [ 435.792169][ T5242] gspca_main: sq930x-2.14.0 probing 2770:930c [ 435.986037][ T5242] gspca_sq930x: reg_r 001f failed -71 [ 435.993285][ T5242] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 436.030747][ T5242] usb 2-1: USB disconnect, device number 8 [ 436.115236][ T5190] Bluetooth: hci1: command 0x0406 tx timeout [ 436.226350][ T5905] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.565513][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.962782][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 437.132156][ T6845] veth0_vlan: entered promiscuous mode [ 437.147100][ T7010] loop1: detected capacity change from 0 to 256 [ 437.195072][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.206886][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.217495][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0062, bcdDevice= 0.00 [ 437.226998][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.285792][ T6845] veth1_vlan: entered promiscuous mode [ 437.307418][ T7010] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 437.318506][ T7010] FAT-fs (loop1): Filesystem has been set read-only [ 437.325723][ T7010] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 437.336397][ T7010] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 437.347951][ T29] audit: type=1800 audit(1727257329.829:17): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.536" name="file1" dev="loop1" ino=1048633 res=0 errno=0 [ 437.354373][ T10] usb 3-1: config 0 descriptor?? [ 437.608548][ T6845] veth0_macvtap: entered promiscuous mode [ 437.699102][ T7010] syz.1.536 (7010) used greatest stack depth: 4024 bytes left [ 437.763415][ T6845] veth1_macvtap: entered promiscuous mode [ 437.906607][ T10] hid-generic 0003:05AC:0062.0006: unbalanced delimiter at end of report description [ 437.940719][ T10] hid-generic 0003:05AC:0062.0006: probe with driver hid-generic failed with error -22 [ 437.969492][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.980564][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.991376][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.007070][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.018688][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.029567][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.040951][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.051945][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.068452][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.114341][ T1821] usb 3-1: USB disconnect, device number 5 [ 438.156932][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.169068][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.180972][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.193378][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.209278][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.222848][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.234430][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.246497][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.264811][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.351310][ T6845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.360725][ T6845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.370011][ T6845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.379275][ T6845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.057630][ T7024] loop4: detected capacity change from 0 to 2048 [ 439.774270][ T7024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.980158][ T7024] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 440.077734][ T7024] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 440.092768][ T7024] EXT4-fs (loop4): This should not happen!! Data will be lost [ 440.092768][ T7024] [ 440.103499][ T7024] EXT4-fs (loop4): Total free blocks count 0 [ 440.109740][ T7024] EXT4-fs (loop4): Free/Dirty block details [ 440.116209][ T7024] EXT4-fs (loop4): free_blocks=66060288 [ 440.122447][ T7024] EXT4-fs (loop4): dirty_blocks=64 [ 440.127808][ T7024] EXT4-fs (loop4): Block reservation details [ 440.134210][ T7024] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 440.346043][ T7024] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 441.685441][ T5243] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 441.756321][ T7069] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 441.875146][ T5243] usb 2-1: Using ep0 maxpacket: 8 [ 441.895027][ T5243] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.905951][ T5243] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 441.915662][ T5243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.974837][ T5243] usb 2-1: config 0 descriptor?? [ 442.002477][ T5243] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 442.003724][ T1821] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 442.475158][ T1821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.486678][ T1821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.496971][ T1821] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 442.508741][ T1821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.585713][ T1821] usb 4-1: config 0 descriptor?? [ 442.620232][ T7079] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 443.049032][ T5243] gspca_vc032x: reg_r err -71 [ 443.054487][ T5243] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 443.094728][ T5243] usb 2-1: USB disconnect, device number 9 [ 443.155876][ T1821] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 443.199927][ T1821] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input9 [ 443.469229][ T1821] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 443.499773][ T1821] usb 4-1: USB disconnect, device number 4 [ 443.788555][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.799115][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.953323][ T3161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.962598][ T3161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.324492][ T7115] netlink: 104 bytes leftover after parsing attributes in process `syz.3.571'. [ 445.692577][ T5243] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 446.026599][ T5243] usb 1-1: Using ep0 maxpacket: 8 [ 446.052107][ T5243] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 446.061504][ T5243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.106165][ T5243] usb 1-1: config 0 descriptor?? [ 446.329763][ T7135] loop2: detected capacity change from 0 to 2048 [ 446.595310][ T7132] loop3: detected capacity change from 0 to 4096 [ 446.686464][ T7135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.851298][ T7142] overlayfs: invalid origin (000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 447.057698][ T5905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.323758][ T5243] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 447.334797][ T5243] asix 1-1:0.0: probe with driver asix failed with error -71 [ 447.413745][ T5243] usb 1-1: USB disconnect, device number 5 [ 448.263083][ T7159] loop1: detected capacity change from 0 to 16 [ 448.275540][ T7159] erofs: (device loop1): mounted with root inode @ nid 36. [ 448.330836][ T7159] syz.1.590: attempt to access beyond end of device [ 448.330836][ T7159] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 448.349503][ T7159] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 448.372349][ T7159] syz.1.590: attempt to access beyond end of device [ 448.372349][ T7159] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 448.386686][ T7159] syz.1.590: attempt to access beyond end of device [ 448.386686][ T7159] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 448.602102][ T1821] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 448.820281][ T1821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.833836][ T1821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.844463][ T1821] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 448.854959][ T1821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.940406][ T1821] usb 1-1: config 0 descriptor?? [ 449.312326][ T29] audit: type=1326 audit(1727257341.789:18): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1a037def9 code=0x0 [ 449.431264][ T1821] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 449.538406][ T7183] Illegal XDP return value 4294967262 on prog (id 54) dev N/A, expect packet loss! [ 449.569008][ T7185] loop1: detected capacity change from 0 to 128 [ 449.675147][ T7185] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 449.815223][ T7185] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 449.848066][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.995325][ T5243] kernel write not supported for file /snd/seq (pid: 5243 comm: kworker/1:4) [ 450.013357][ T1821] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 450.021362][ T1821] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 450.053483][ T1821] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -71 [ 450.133707][ T1821] usb 1-1: USB disconnect, device number 6 [ 450.293130][ T5882] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 450.556589][ T7195] netlink: 52 bytes leftover after parsing attributes in process `syz.1.606'. [ 450.566253][ T7195] netlink: 56 bytes leftover after parsing attributes in process `syz.1.606'. [ 450.576280][ T7195] netlink: 52 bytes leftover after parsing attributes in process `syz.1.606'. [ 451.235252][ T7205] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.610'. [ 451.832761][ T5243] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 451.899713][ T7230] ptrace attach of ""[7231] was attempted by "./syz-executor exec"[7230] [ 451.941294][ T7231] coredump: 20(syz.0.621): written to core: VMAs: 3, size 12439552; core: 6867 bytes, pos 12443648 [ 451.992141][ T1821] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 452.003181][ T5243] usb 3-1: Using ep0 maxpacket: 32 [ 452.081263][ T5243] usb 3-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78 [ 452.091219][ T5243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.099850][ T5243] usb 3-1: Product: syz [ 452.104556][ T5243] usb 3-1: Manufacturer: syz [ 452.109465][ T5243] usb 3-1: SerialNumber: syz [ 452.151193][ T5243] usb 3-1: config 0 descriptor?? [ 452.170818][ T1821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.182468][ T5243] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 452.189759][ T1821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.200190][ T1821] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 452.209690][ T1821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.229529][ T1821] usb 4-1: config 0 descriptor?? [ 452.274404][ T5243] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 452.352402][ T7233] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 452.399720][ T5243] usb 3-1: USB disconnect, device number 6 [ 452.790123][ T1821] waltop 0003:172F:0501.0009: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.3-1/input0 [ 453.054999][ T5243] usb 4-1: USB disconnect, device number 5 [ 453.180811][ T7244] loop0: detected capacity change from 0 to 256 [ 453.267931][ T7244] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 453.472901][ T7248] loop4: detected capacity change from 0 to 2048 [ 453.592444][ T7248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.607172][ T7248] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.985070][ T7262] netlink: 68 bytes leftover after parsing attributes in process `syz.3.632'. [ 454.153251][ T6505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.322384][ T5243] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 454.344594][ T7259] loop1: detected capacity change from 0 to 2048 [ 454.368112][ T7265] loop4: detected capacity change from 0 to 256 [ 454.378311][ T7259] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 454.410655][ T7259] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 454.468303][ T7259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.520448][ T7265] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 454.543848][ T5243] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.554835][ T5243] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.627856][ T5243] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 454.637502][ T5243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 454.645951][ T5243] usb 1-1: SerialNumber: syz [ 454.904921][ T5243] usb 1-1: 0:2 : does not exist [ 455.013734][ T5243] usb 1-1: USB disconnect, device number 7 [ 455.166292][ T7273] loop0: detected capacity change from 0 to 7 [ 455.217176][ T7273] Dev loop0: unable to read RDB block 7 [ 455.223511][ T7273] loop0: AHDI p2 [ 455.227555][ T7273] loop0: partition table partially beyond EOD, truncated [ 455.750962][ T1821] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 455.943972][ T7287] loop2: detected capacity change from 0 to 1024 [ 455.988880][ T1821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.000867][ T1821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.011392][ T1821] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 456.022045][ T1821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.066762][ T1821] usb 5-1: config 0 descriptor?? [ 456.136211][ T29] audit: type=1800 audit(1727257348.609:19): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.644" name=A814F6F2377BCFC78E2E86368C138510A04CEDF7175AF8C2034FAE7413E3ACE8C71AB9A0AF1CA7042011A6ED028E205648535DABF3B2F85196AE18D36B839E3CD54AE4933AD529888FDAC7BB8A70C72BC0FC81BA06506F2D5BC7686E219BBE5283959CBEF9950E071CB6D9F341FC624A5110341F26CEBD71 dev="loop2" ino=25 res=0 errno=0 [ 456.177546][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.542553][ T1821] hid-multitouch 0003:1FD2:6007.000A: unknown main item tag 0x0 [ 456.574601][ T1821] hid-multitouch 0003:1FD2:6007.000A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 456.766738][ T25] usb 5-1: USB disconnect, device number 5 [ 456.801892][ T29] audit: type=1326 audit(1727257349.279:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f204477def9 code=0x0 [ 457.242534][ T5242] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 457.438174][ T5242] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 457.451985][ T5242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 457.463534][ T5242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 457.473803][ T5242] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 457.489052][ T5242] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.498645][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.521195][ T5242] usb 4-1: config 0 descriptor?? [ 457.638684][ T7310] loop1: detected capacity change from 0 to 512 [ 457.677830][ T7310] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 457.709768][ T7312] loop4: detected capacity change from 0 to 64 [ 457.764514][ T7310] EXT4-fs (loop1): 1 truncate cleaned up [ 457.772999][ T7310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.908208][ T7316] loop2: detected capacity change from 0 to 128 [ 457.917502][ T7316] vfat: Unknown parameter '…' [ 458.044916][ T5242] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 458.060249][ T5242] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 458.078438][ T5242] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 458.150849][ T7318] loop2: detected capacity change from 0 to 1024 [ 458.417698][ T7320] loop0: detected capacity change from 0 to 1024 [ 458.438359][ T5882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.466131][ T7320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.787389][ T7320] Process accounting resumed [ 459.354170][ C0] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1 [ 459.841466][ T7341] loop0: detected capacity change from 0 to 128 [ 459.922247][ T7341] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 459.938879][ T7344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.669'. [ 460.040121][ T7341] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 460.403860][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 460.448651][ T7354] loop4: detected capacity change from 0 to 512 [ 460.453941][ T6845] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 460.480112][ T25] usb 4-1: USB disconnect, device number 6 [ 460.719355][ T7354] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.671: invalid block [ 460.743494][ T7354] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.671: invalid indirect mapped block 4294967295 (level 1) [ 460.782143][ T7354] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.671: invalid indirect mapped block 4294967295 (level 1) [ 460.812960][ T7354] EXT4-fs (loop4): 2 truncates cleaned up [ 460.820959][ T7354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.082238][ T7354] EXT4-fs error (device loop4): ext4_get_parent:1860: inode #11: comm syz.4.671: bad parent inode number: 3 [ 461.698553][ T6505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.984692][ T7393] loop1: detected capacity change from 0 to 1764 [ 462.308100][ T7403] loop4: detected capacity change from 0 to 1024 [ 462.704263][ T7417] loop3: detected capacity change from 0 to 256 [ 462.746813][ T7417] vfat: Bad value for 'time_offset' [ 463.060754][ T7421] loop1: detected capacity change from 0 to 1764 [ 463.462553][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 463.549881][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.558517][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.566490][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.574351][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.582313][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.590045][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.599211][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.607043][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.614907][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.618238][ T7439] syzkaller1: entered promiscuous mode [ 463.622706][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.622897][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.623076][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.628595][ T7439] syzkaller1: entered allmulticast mode [ 463.636266][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.636465][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.673848][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.679799][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 463.681756][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.692679][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.701856][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.702053][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.702231][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.702410][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.702589][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.702767][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.702951][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.703128][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.703307][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.703505][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.703695][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.716155][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.722914][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.730362][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 463.738046][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.755950][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 463.761503][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.761832][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.762019][ T1821] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 463.881076][ T25] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 463.889754][ T25] usb 4-1: Manufacturer: syz [ 463.926167][ T25] usb 4-1: config 0 descriptor?? [ 463.960013][ T1821] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 464.202206][ T5242] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 464.403560][ T25] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 464.428251][ T5242] usb 3-1: config 0 has no interfaces? [ 464.434650][ T5242] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 464.444376][ T5242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.448722][ T25] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 464.494119][ T25] appleir 0003:05AC:8243.000D: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 464.531118][ T5242] usb 3-1: config 0 descriptor?? [ 464.657207][ T7469] loop4: detected capacity change from 0 to 512 [ 464.670609][ T7469] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 464.685416][ T5242] usb 4-1: USB disconnect, device number 7 [ 464.699063][ T7468] loop0: detected capacity change from 0 to 1024 [ 464.782814][ T1821] usb 3-1: USB disconnect, device number 7 [ 464.857344][ T7469] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 464.893081][ T7469] EXT4-fs (loop4): 1 truncate cleaned up [ 464.901116][ T7469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.304948][ T6505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.207478][ T7522] loop3: detected capacity change from 0 to 512 [ 466.230826][ T7522] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 466.287205][ T7522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 466.307798][ T7522] System zones: 1-12 [ 466.343681][ T7522] EXT4-fs (loop3): 1 truncate cleaned up [ 466.354035][ T7522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.007558][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.214102][ T5183] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 467.779664][ T7542] loop4: detected capacity change from 0 to 2048 [ 467.824954][ T7542] EXT4-fs: Ignoring removed mblk_io_submit option [ 468.003978][ T7542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.077649][ T7542] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 468.239086][ T6505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.447191][ T7570] loop3: detected capacity change from 0 to 1024 [ 468.489423][ T7570] EXT4-fs: Ignoring removed nobh option [ 468.496556][ T7570] EXT4-fs: Ignoring removed orlov option [ 468.507718][ T7570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 468.716464][ T7570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.698032][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.000052][ T7609] loop1: detected capacity change from 0 to 4096 [ 472.083838][ T7609] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 472.441013][ T7611] loop2: detected capacity change from 0 to 32768 [ 474.611252][ T7636] loop3: detected capacity change from 0 to 2048 [ 474.692816][ T7639] loop1: detected capacity change from 0 to 128 [ 474.702196][ T7639] EXT4-fs: Ignoring removed nobh option [ 474.722282][ T7636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 474.794232][ T7641] loop2: detected capacity change from 0 to 256 [ 474.814823][ T7639] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 474.861726][ T7636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.887053][ T7639] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 474.941795][ T7641] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 474.976584][ T7636] EXT4-fs error (device loop3): ext4_search_dir:1505: inode #12: block 9: comm syz.3.756: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 475.062936][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.070134][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.119240][ T7636] EXT4-fs (loop3): Remounting filesystem read-only [ 475.303272][ T29] audit: type=1800 audit(1727257367.719:21): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.757" name="file2" dev="loop1" ino=12 res=0 errno=0 [ 475.588010][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.630495][ T5882] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 476.934229][ T7661] loop4: detected capacity change from 0 to 1024 [ 477.331347][ T3013] hfsplus: b-tree write err: -5, ino 4 [ 478.177887][ T7678] loop4: detected capacity change from 0 to 64 [ 478.575214][ T7689] loop1: detected capacity change from 0 to 512 [ 478.598662][ T7689] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 478.636166][ T7679] loop2: detected capacity change from 0 to 2048 [ 478.691374][ T7689] EXT4-fs (loop1): 1 truncate cleaned up [ 478.699418][ T7689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.876904][ T7679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.072413][ T7679] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 479.106076][ T5882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.142484][ T7679] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 479.155653][ T7679] EXT4-fs (loop2): This should not happen!! Data will be lost [ 479.155653][ T7679] [ 479.167026][ T7679] EXT4-fs (loop2): Total free blocks count 0 [ 479.173518][ T7679] EXT4-fs (loop2): Free/Dirty block details [ 479.179761][ T7679] EXT4-fs (loop2): free_blocks=2415919104 [ 479.185931][ T7679] EXT4-fs (loop2): dirty_blocks=32 [ 479.191318][ T7679] EXT4-fs (loop2): Block reservation details [ 479.197735][ T7679] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 479.236102][ T7702] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 479.318864][ T7707] loop3: detected capacity change from 0 to 64 [ 479.395209][ T7711] loop0: detected capacity change from 0 to 64 [ 480.351901][ T7722] loop0: detected capacity change from 0 to 128 [ 480.448819][ T7722] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 480.550378][ T7722] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 480.717618][ T7731] loop2: detected capacity change from 0 to 1024 [ 480.739359][ T7722] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.779: No space for directory leaf checksum. Please run e2fsck -D. [ 480.755528][ T7722] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.779: checksumming directory block 0 [ 480.953282][ T7731] hfsplus: request for non-existent node 33554434 in B*Tree [ 480.961163][ T7731] hfsplus: request for non-existent node 33554434 in B*Tree [ 481.172542][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 481.293976][ T6845] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 481.407873][ T7744] loop1: detected capacity change from 0 to 128 [ 481.527158][ T5264] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 481.547475][ T25] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 481.557297][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.565827][ T25] usb 5-1: Product: syz [ 481.570281][ T25] usb 5-1: Manufacturer: syz [ 481.575369][ T25] usb 5-1: SerialNumber: syz [ 481.586828][ T25] usb 5-1: config 0 descriptor?? [ 481.860439][ T5264] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 481.870675][ T5264] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 481.879362][ T5264] usb 4-1: Manufacturer: syz [ 481.906072][ T5264] usb 4-1: config 0 descriptor?? [ 482.459126][ T5264] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 482.620487][ T7756] loop2: detected capacity change from 0 to 2048 [ 482.690499][ T7756] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 482.982834][ T25] usb 5-1: Firmware version (0.0) predates our first public release. [ 482.991450][ T25] usb 5-1: Please update to version 0.2 or newer [ 483.106394][ T5264] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 483.117071][ T5264] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 483.141886][ T5264] usb 4-1: USB disconnect, device number 8 [ 483.170338][ T25] usb 5-1: USB disconnect, device number 6 [ 484.508641][ T7834] netlink: 'syz.3.796': attribute type 5 has an invalid length. [ 484.931872][ T7841] loop2: detected capacity change from 0 to 8 [ 485.719170][ T5183] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 486.227511][ T29] audit: type=1326 audit(1727257378.689:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.4.803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa588f7def9 code=0x0 [ 486.552104][ T7846] loop3: detected capacity change from 0 to 4096 [ 487.676893][ T7876] netlink: 'syz.2.811': attribute type 4 has an invalid length. [ 488.189274][ T7887] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 488.879219][ T7902] loop1: detected capacity change from 0 to 16 [ 488.899113][ T7906] Bluetooth: MGMT ver 1.23 [ 488.904115][ T7906] Bluetooth: hci3: unsupported parameter 64512 [ 488.910538][ T7906] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 488.977500][ T7901] loop2: detected capacity change from 0 to 1024 [ 488.979755][ T7902] erofs: (device loop1): mounted with root inode @ nid 36. [ 489.011199][ T7901] EXT4-fs: Ignoring removed orlov option [ 489.028903][ T7901] EXT4-fs (loop2): Test dummy encryption mode enabled [ 489.058314][ T7901] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 489.129706][ T7901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.715222][ T5905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.959802][ T5243] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 490.002910][ T7927] Zero length message leads to an empty skb [ 490.190907][ T5243] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 490.200581][ T5243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.292370][ T5243] usb 2-1: config 0 descriptor?? [ 490.335094][ T5243] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 490.751002][ T5243] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 491.302146][ T5243] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 491.410234][ T7947] loop0: detected capacity change from 0 to 512 [ 491.412903][ T7947] journal_path: Lookup failure for './file0' [ 491.413081][ T7947] EXT4-fs: error: could not find journal device path [ 491.561352][ T7953] loop3: detected capacity change from 0 to 128 [ 491.605186][ T1821] usb 2-1: USB disconnect, device number 10 [ 491.656331][ T7953] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.658222][ T7953] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 491.724906][ T7947] loop0: detected capacity change from 0 to 2048 [ 491.737777][ T7947] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 491.737934][ T7947] NILFS (loop0): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 491.949183][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.098140][ T5189] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 493.465602][ T7993] loop2: detected capacity change from 0 to 8 [ 493.583962][ T8000] loop3: detected capacity change from 0 to 256 [ 493.584583][ T7990] kvm: kvm [7989]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0xe55 [ 493.690599][ T8000] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 493.709910][ T7988] loop1: detected capacity change from 0 to 2048 [ 493.754947][ T7988] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 493.772375][ T1821] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 493.797609][ T7988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.953493][ T1821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.965186][ T1821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.975402][ T1821] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.989026][ T1821] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.998543][ T1821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.112288][ T1821] usb 1-1: config 0 descriptor?? [ 494.670402][ T1821] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 494.687528][ T1821] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 494.767288][ T1821] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 495.013761][ T5243] usb 1-1: USB disconnect, device number 8 [ 496.272611][ T8046] input: syz1 as /devices/virtual/input/input10 [ 496.659184][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 496.892174][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 496.937737][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 496.948054][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 497.104540][ T25] usb 1-1: New USB device found, idVendor=0499, idProduct=5005, bcdDevice= 8.ff [ 497.114687][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.123261][ T25] usb 1-1: Product: syz [ 497.127804][ T25] usb 1-1: Manufacturer: syz [ 497.132974][ T25] usb 1-1: SerialNumber: syz [ 497.138032][ T8031] loop2: detected capacity change from 0 to 32768 [ 497.217909][ T8060] loop1: detected capacity change from 0 to 256 [ 497.230429][ T8018] loop4: detected capacity change from 0 to 4096 [ 497.247906][ T8060] exfat: Deprecated parameter 'namecase' [ 497.254674][ T8060] exfat: Deprecated parameter 'namecase' [ 497.272485][ T25] usb 1-1: config 0 descriptor?? [ 497.321071][ T8060] exFAT-fs (loop1): bogus sector size bits : 0 [ 497.328688][ T8060] exFAT-fs (loop1): failed to read boot sector [ 497.335289][ T8060] exFAT-fs (loop1): failed to recognize exfat type [ 497.341130][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.352587][ T8018] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 497.438689][ T25] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 497.494477][ T8060] overlayfs: upper fs does not support tmpfile. [ 497.510757][ T25] usb 1-1: USB disconnect, device number 9 [ 497.626846][ T8073] loop3: detected capacity change from 0 to 512 [ 497.669463][ T8073] EXT4-fs: Ignoring removed i_version option [ 497.749710][ T8073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 497.789172][ T8018] ntfs3: loop4: Failed to read $UpCase (-4). [ 497.827325][ T8073] System zones: 1-12 [ 497.904062][ T8073] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.861: bg 0: block 131: padding at end of block bitmap is not set [ 497.953416][ T8073] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 497.972639][ T8073] EXT4-fs (loop3): 1 truncate cleaned up [ 497.980490][ T8073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.237534][ T8085] loop1: detected capacity change from 0 to 512 [ 498.405564][ T8085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.482361][ T8088] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 498.501092][ T8088] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 498.662141][ T1821] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 498.681240][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.848673][ T1821] usb 1-1: Using ep0 maxpacket: 8 [ 498.873069][ T5882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.895151][ T1821] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 498.904276][ T1821] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 498.915101][ T1821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.980895][ T5183] block nbd4: Wrong magic (0x0) [ 498.991780][ T1821] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 499.001468][ T1821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.009945][ T1821] usb 1-1: Product: syz [ 499.014787][ T1821] usb 1-1: Manufacturer: syz [ 499.019662][ T1821] usb 1-1: SerialNumber: syz [ 499.037675][ T8097] block nbd4: shutting down sockets [ 499.703402][ T1821] usb 1-1: 0:2 : does not exist [ 499.909272][ T8112] loop1: detected capacity change from 0 to 4096 [ 499.914845][ T25] usb 1-1: USB disconnect, device number 10 [ 500.361408][ T8112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.088611][ T5882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.317244][ T8152] tipc: Started in network mode [ 501.322574][ T8152] tipc: Node identity , cluster identity 4711 [ 501.328890][ T8152] tipc: Failed to set node id, please configure manually [ 501.337102][ T8152] tipc: Enabling of bearer rejected, failed to enable media [ 501.557027][ T8157] loop0: detected capacity change from 0 to 1024 [ 501.597941][ T8162] loop2: detected capacity change from 0 to 128 [ 501.748165][ T8161] loop1: detected capacity change from 0 to 2048 [ 501.766293][ T8161] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 501.776689][ T8161] NILFS (loop1): mounting unchecked fs [ 501.825295][ T8162] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 501.839166][ T8161] NILFS (loop1): invalid segment: Checksum error in segment payload [ 501.847640][ T8161] NILFS (loop1): unable to fall back to spare super block [ 501.855300][ T8161] NILFS (loop1): error -22 while searching super root [ 501.869661][ T8162] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 502.295893][ T5905] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 502.876098][ T8187] loop0: detected capacity change from 0 to 16 [ 502.894648][ T8187] erofs: (device loop0): erofs_read_inode: bogus i_mode (162700) @ nid 36 [ 505.018890][ T8184] loop2: detected capacity change from 0 to 32768 [ 505.514421][ T8217] Bluetooth: hci3: invalid length 0, exp 2 for type 5 [ 505.611062][ T7704] coredump: 1(syz.4.772): written to core: VMAs: 34, size 97419264; core: 60150726 bytes, pos 97427456 [ 505.717633][ T8221] dlm: non-version read from control device 2147479540 [ 506.406034][ T8231] mmap: syz.0.905 (8231) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 508.199683][ T8265] loop1: detected capacity change from 0 to 256 [ 508.769841][ T8271] loop0: detected capacity change from 0 to 256 [ 509.152654][ T8285] netlink: 'syz.3.922': attribute type 4 has an invalid length. [ 509.773033][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.995353][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.158154][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.316312][ T8302] loop3: detected capacity change from 0 to 1024 [ 510.361879][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.813334][ T59] bridge_slave_1: left allmulticast mode [ 510.819449][ T59] bridge_slave_1: left promiscuous mode [ 510.827894][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.003520][ T59] bridge_slave_0: left allmulticast mode [ 511.013274][ T59] bridge_slave_0: left promiscuous mode [ 511.020036][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.947774][ T8331] loop3: detected capacity change from 0 to 512 [ 512.013621][ T5190] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.059469][ T5190] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.079621][ T5190] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.090182][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.117408][ T8331] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.936: invalid block [ 512.182981][ T8331] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.936: invalid indirect mapped block 4294967295 (level 1) [ 512.205669][ T8331] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.936: invalid indirect mapped block 4294967295 (level 1) [ 512.214561][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.251943][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.269521][ T59] bond0 (unregistering): Released all slaves [ 512.289116][ T8331] EXT4-fs (loop3): 2 truncates cleaned up [ 512.297103][ T8331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.329665][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 512.346822][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.146118][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.151076][ T8370] bridge0: entered allmulticast mode [ 513.204862][ T8379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.938'. [ 513.216641][ T8373] bridge0: left allmulticast mode [ 513.728907][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 513.927636][ T59] hsr_slave_0: left promiscuous mode [ 513.959912][ T59] hsr_slave_1: left promiscuous mode [ 513.994146][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.002167][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.035601][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.043524][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.072693][ T59] veth1_macvtap: left promiscuous mode [ 514.080787][ T59] veth0_macvtap: left promiscuous mode [ 514.087219][ T59] veth1_vlan: left promiscuous mode [ 514.093004][ T59] veth0_vlan: left promiscuous mode [ 514.436749][ T5183] Bluetooth: hci0: command tx timeout [ 514.976204][ T59] team0 (unregistering): Port device team_slave_1 removed [ 515.171419][ T59] team0 (unregistering): Port device team_slave_0 removed [ 516.078967][ T8333] chnl_net:caif_netlink_parms(): no params data found [ 516.514068][ T52] Bluetooth: hci0: command tx timeout [ 516.672329][ T8526] Bluetooth: hci3: unsupported parameter 64512 [ 516.679109][ T8526] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 516.699442][ T5243] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 516.872069][ T5243] usb 5-1: Using ep0 maxpacket: 32 [ 516.902872][ T5243] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 516.911468][ T5243] usb 5-1: config 0 has no interface number 0 [ 516.973621][ T5243] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 516.984276][ T5243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.994653][ T5243] usb 5-1: Product: syz [ 516.999499][ T5243] usb 5-1: Manufacturer: syz [ 517.004698][ T5243] usb 5-1: SerialNumber: syz [ 517.145283][ T5243] usb 5-1: config 0 descriptor?? [ 517.174571][ T5243] smsc95xx v2.0.0 [ 517.387954][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.388490][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.389092][ T8333] bridge_slave_0: entered allmulticast mode [ 517.393067][ T8333] bridge_slave_0: entered promiscuous mode [ 517.402411][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.402961][ T8333] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.403562][ T8333] bridge_slave_1: entered allmulticast mode [ 517.406775][ T8333] bridge_slave_1: entered promiscuous mode [ 517.650665][ T5243] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 517.650850][ T5243] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 517.979097][ T8333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.002358][ T8333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.195877][ T5183] Bluetooth: hci2: command 0x0406 tx timeout [ 518.207772][ T8333] team0: Port device team_slave_0 added [ 518.234928][ T5243] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 518.235756][ T5243] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 518.247704][ T5243] usb 5-1: USB disconnect, device number 7 [ 518.258404][ T8333] team0: Port device team_slave_1 added [ 518.626313][ T5183] Bluetooth: hci0: command tx timeout [ 518.708164][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.708247][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.708404][ T8333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.731411][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.731503][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.731944][ T8333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.354144][ T8333] hsr_slave_0: entered promiscuous mode [ 519.408165][ T8333] hsr_slave_1: entered promiscuous mode [ 519.460863][ T8333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.460950][ T8333] Cannot create hsr debugfs directory [ 520.140561][ T8731] input: syz0 as /devices/virtual/input/input11 [ 520.673557][ T5183] Bluetooth: hci0: command tx timeout [ 520.702526][ T8770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.976'. [ 520.740749][ T8778] loop4: detected capacity change from 0 to 128 [ 520.874915][ T8778] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 521.003967][ T8778] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 521.036234][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.293501][ T8333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 521.335731][ T8333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 521.374567][ T8333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 521.417561][ T8333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 521.586119][ T6505] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 522.615424][ T8333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.668546][ T8333] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.812489][ T8333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 522.824368][ T8333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.879255][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.887245][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.909288][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.917205][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.577013][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.130438][ T8333] veth0_vlan: entered promiscuous mode [ 525.195859][ T8333] veth1_vlan: entered promiscuous mode [ 525.238358][ T8858] loop3: detected capacity change from 0 to 2048 [ 525.342677][ T8858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.536917][ T8333] veth0_macvtap: entered promiscuous mode [ 525.563162][ T8858] Process accounting resumed [ 525.617863][ T8333] veth1_macvtap: entered promiscuous mode [ 525.773659][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.785272][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.795565][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.806441][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.816697][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.827620][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.837830][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.849279][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.869602][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.892581][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.903503][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.913726][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.924345][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.935519][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.945800][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.959912][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.971772][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.984456][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.000107][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.067736][ T8333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.077210][ T8333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.088899][ T8333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.098049][ T8333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.236580][ T8873] loop1: detected capacity change from 0 to 1024 [ 526.346101][ T8873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.051229][ T5882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.092508][ T4812] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 528.340563][ T4812] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 528.351176][ T4812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.479592][ T4812] usb 3-1: config 0 descriptor?? [ 528.531291][ T4812] gspca_main: spca508-2.14.0 probing 8086:0110 [ 528.682130][ T8882] loop3: detected capacity change from 0 to 32768 [ 528.703053][ T8907] loop1: detected capacity change from 0 to 512 [ 528.723714][ T8907] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 528.779002][ T4812] gspca_spca508: reg_read err -32 [ 528.818829][ T4812] gspca_spca508: reg_read err -32 [ 528.872796][ T8907] EXT4-fs (loop1): 1 truncate cleaned up [ 528.880868][ T8907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.913585][ T4812] gspca_spca508: reg_read err -32 [ 529.274021][ T4812] gspca_spca508: reg_read err -71 [ 529.294045][ T4812] gspca_spca508: reg write: error -71 [ 529.300067][ T4812] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 529.364262][ T5882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.404708][ T4812] usb 3-1: USB disconnect, device number 8 [ 532.795073][ T8957] loop3: detected capacity change from 0 to 2048 [ 532.952518][ T8957] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 533.203023][ T5243] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 533.357835][ T8944] loop4: detected capacity change from 0 to 32768 [ 533.443066][ T5243] usb 2-1: Using ep0 maxpacket: 16 [ 533.503243][ T5243] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.514034][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 533.525553][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 533.538380][ T5243] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 533.549575][ T5243] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.722366][ T5243] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 533.732158][ T5243] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 533.743209][ T5243] usb 2-1: Manufacturer: syz [ 533.812438][ T5243] usb 2-1: config 0 descriptor?? [ 534.135238][ T8977] loop2: detected capacity change from 0 to 256 [ 534.207629][ T8977] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 534.386993][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.395373][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.733330][ T5243] rc_core: IR keymap rc-hauppauge not found [ 534.739628][ T5243] Registered IR keymap rc-empty [ 534.745651][ T5243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 534.822883][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.831190][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.847521][ T5243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 534.938073][ T5243] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 534.955305][ T5243] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 535.169583][ T5243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.294160][ T5243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.412451][ T5243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.467338][ T5243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.525407][ T5243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.594221][ T5243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.639763][ T5243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.707403][ T5243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.759455][ T5243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.833054][ T5243] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.882753][ T5243] mceusb 2-1:0.0: Registered 〶 with mce emulator interface version 1 [ 535.898284][ T5243] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 536.007484][ T5243] usb 2-1: USB disconnect, device number 11 [ 536.112364][ T8979] loop3: detected capacity change from 0 to 32768 [ 536.589558][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.597009][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.564198][ T9043] loop2: detected capacity change from 0 to 512 [ 537.589442][ T9043] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 537.666460][ T9043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.680073][ T9043] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.862466][ T9043] EXT4-fs error (device loop2): __ext4_new_inode:1276: comm syz.2.1043: failed to insert inode 16: doubly allocated? [ 537.988933][ T9058] loop3: detected capacity change from 0 to 16 [ 538.164529][ T5905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.881434][ T9079] loop0: detected capacity change from 0 to 512 [ 538.973595][ T9079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 539.043234][ T9079] EXT4-fs (loop0): 1 truncate cleaned up [ 539.051257][ T9079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.191026][ T29] audit: type=1804 audit(1727257687.668:23): pid=9079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1053" name="/newroot/6/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 539.249444][ T9082] loop3: detected capacity change from 0 to 1024 [ 539.322664][ T9082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 539.412829][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 539.422217][ T9094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1057'. [ 539.445542][ T9082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.446442][ T9094] gtp0: entered promiscuous mode [ 539.463832][ T9094] gtp0: entered allmulticast mode [ 539.594577][ T8333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.617630][ T5243] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 539.638189][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.896969][ T5243] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.907807][ T5243] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 539.919936][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 539.931474][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 539.941956][ T5243] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 540.048994][ T5243] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 540.058815][ T5243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 540.067526][ T5243] usb 2-1: Product: syz [ 540.072175][ T5243] usb 2-1: Manufacturer: syz [ 540.077042][ T5243] usb 2-1: SerialNumber: syz [ 540.104353][ T5243] usb 2-1: config 0 descriptor?? [ 540.455105][ T5243] radio-si470x 2-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 540.638643][ T5243] radio-si470x 2-1:0.0: software version 100, hardware version 101 [ 540.663565][ T9122] loop0: detected capacity change from 0 to 512 [ 540.679058][ T9122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 540.774367][ T9122] EXT4-fs (loop0): 1 truncate cleaned up [ 540.784224][ T9122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.846413][ T5243] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 541.109614][ T9126] loop4: detected capacity change from 0 to 512 [ 541.261725][ T9126] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.1065: casefold flag without casefold feature [ 541.298965][ T9126] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1065: couldn't read orphan inode 15 (err -117) [ 541.318080][ T9126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.367052][ T8333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.380232][ T5243] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 541.394098][ T5243] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 541.536771][ T5243] usb 2-1: USB disconnect, device number 12 [ 541.671007][ T9145] loop2: detected capacity change from 0 to 128 [ 542.015079][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 542.074099][ T6505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.884120][ T9168] loop0: detected capacity change from 0 to 2048 [ 542.928200][ T9168] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 543.018316][ T9180] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 543.018693][ T9168] syz.0.1077: attempt to access beyond end of device [ 543.018693][ T9168] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 543.357868][ T9190] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 546.354486][ T9250] loop1: detected capacity change from 0 to 512 [ 547.346213][ T9267] loop3: detected capacity change from 0 to 1024 [ 547.978315][ T9284] loop4: detected capacity change from 0 to 128 [ 549.717327][ T4812] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 549.972636][ T4812] usb 3-1: Using ep0 maxpacket: 32 [ 550.020946][ T4812] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 550.032424][ T4812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.040741][ T4812] usb 3-1: Product: syz [ 550.045908][ T4812] usb 3-1: Manufacturer: syz [ 550.050794][ T4812] usb 3-1: SerialNumber: syz [ 550.166533][ T4812] usb 3-1: config 0 descriptor?? [ 550.218369][ T4812] ums_eneub6250 3-1:0.0: USB Mass Storage device detected [ 550.402213][ T5242] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 550.411010][ T4812] usb 3-1: USB disconnect, device number 9 [ 550.696977][ T9348] loop3: detected capacity change from 0 to 256 [ 550.779427][ T9348] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 550.804129][ T9350] loop4: detected capacity change from 0 to 256 [ 550.962591][ T9348] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000007) [ 550.972744][ T9348] exFAT-fs (loop3): Filesystem has been set read-only [ 551.502746][ T9322] loop0: detected capacity change from 0 to 32768 [ 551.546574][ T5242] usb 2-1: unable to get BOS descriptor or descriptor too short [ 551.566215][ T5242] usb 2-1: not running at top speed; connect to a high speed hub [ 551.588994][ T5242] usb 2-1: config 1 interface 0 has no altsetting 0 [ 551.598790][ T9322] [ 551.598790][ T9322] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 551.598790][ T9322] [ 551.600084][ T9358] option changes via remount are deprecated (pid=9357 comm=syz.3.1136) [ 551.646783][ T5242] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 551.656893][ T5242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.667698][ T5242] usb 2-1: Product: syz [ 551.672234][ T5242] usb 2-1: Manufacturer: syz [ 551.677103][ T5242] usb 2-1: SerialNumber: syz [ 551.699547][ T9322] read_mapping_page failed! [ 551.704538][ T9322] ERROR: (device loop0): txAbort: [ 551.704538][ T9322] [ 551.726927][ T9322] ERROR: (device loop0): remounting filesystem as read-only [ 551.940723][ T4812] usb 2-1: USB disconnect, device number 13 [ 552.824016][ T9402] loop3: detected capacity change from 0 to 2048 [ 552.884687][ T9402] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 553.743420][ T4812] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 553.822177][ T5243] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 554.024933][ T4812] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.038682][ T4812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 554.050607][ T4812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 554.060911][ T4812] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 554.074557][ T4812] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 554.084118][ T4812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.139469][ T9432] loop4: detected capacity change from 0 to 1024 [ 554.161939][ T5243] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 554.171367][ T5243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.179999][ T5243] usb 1-1: Product: syz [ 554.184619][ T5243] usb 1-1: Manufacturer: syz [ 554.189520][ T5243] usb 1-1: SerialNumber: syz [ 554.228862][ T5243] usb 1-1: config 0 descriptor?? [ 554.243697][ T4812] usb 2-1: config 0 descriptor?? [ 554.686828][ T5242] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 554.704140][ T5243] usb 1-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 554.771283][ T4812] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 554.791684][ T4812] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 554.873313][ T5242] usb 4-1: Using ep0 maxpacket: 16 [ 554.888649][ T5242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.900304][ T5242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.910758][ T5242] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 554.923598][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.943830][ T5243] usb 1-1: failed to fetch extended address, random address set [ 555.005456][ T5242] usb 4-1: config 0 descriptor?? [ 555.020226][ T10] usb 2-1: USB disconnect, device number 14 [ 555.130272][ T5243] usb 1-1: USB disconnect, device number 11 [ 555.368103][ T9495] loop4: detected capacity change from 0 to 256 [ 555.442354][ T4812] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 555.529253][ T5242] playstation 0003:054C:05C4.0010: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 555.641471][ T4812] usb 3-1: Using ep0 maxpacket: 16 [ 555.688660][ T4812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.700420][ T4812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.710701][ T4812] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 555.714826][ T5242] playstation 0003:054C:05C4.0010: Invalid reportID received, expected 18 got 0 [ 555.720308][ T4812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.729492][ T5242] playstation 0003:054C:05C4.0010: Failed to retrieve DualShock4 pairing info: -22 [ 555.747640][ T5242] playstation 0003:054C:05C4.0010: Failed to get MAC address from DualShock4 [ 555.759175][ T5242] playstation 0003:054C:05C4.0010: Failed to create dualshock4. [ 555.872715][ T4812] usb 3-1: config 0 descriptor?? [ 555.873566][ T5242] playstation 0003:054C:05C4.0010: probe with driver playstation failed with error -22 [ 555.941667][ T5242] usb 4-1: USB disconnect, device number 9 [ 555.968517][ T9503] loop4: detected capacity change from 0 to 8 [ 556.393539][ T4812] kye 0003:0458:0138.0011: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.2-1/input0 [ 556.429609][ T9526] loop1: detected capacity change from 0 to 8 [ 556.445729][ T9524] loop0: detected capacity change from 0 to 512 [ 556.483717][ T9526] cramfs: Error -5 while decompressing! [ 556.489810][ T9526] cramfs: ffffffff9465f298(26)->ffff888129480000(4096) [ 556.498294][ T9526] cramfs: Error -3 while decompressing! [ 556.504313][ T9526] cramfs: ffffffff9465f2b2(26)->ffff888133ced000(4096) [ 556.511806][ T9526] cramfs: Error -3 while decompressing! [ 556.517598][ T9526] cramfs: ffffffff9465f2cc(16)->ffff888118c02000(4096) [ 556.523383][ T9524] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 556.525933][ T9526] cramfs: Error -5 while decompressing! [ 556.539890][ T9526] cramfs: ffffffff9465f298(26)->ffff888129480000(4096) [ 556.550840][ T9524] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 556.601018][ T9524] System zones: 0-2, 18-18, 34-35 [ 556.622331][ T9524] EXT4-fs (loop0): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.661082][ T4812] usb 3-1: USB disconnect, device number 10 [ 556.702823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 556.711445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 556.810916][ T9524] EXT4-fs (loop0): re-mounted 00000000-0700-0000-0000-000000000000 ro. Quota mode: none. [ 556.899084][ T9548] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 556.949089][ T9548] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 556.960223][ T9548] EXT4-fs (loop0): re-mounted 00000000-0700-0000-0000-000000000000 r/w. Quota mode: none. [ 557.276441][ T8333] EXT4-fs (loop0): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 557.411356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 557.840532][ T9553] loop1: detected capacity change from 0 to 4096 [ 557.868483][ T9568] loop0: detected capacity change from 0 to 256 [ 557.907464][ T9567] loop2: detected capacity change from 0 to 512 [ 558.025561][ T9572] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 558.787384][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 559.376379][ T9591] loop1: detected capacity change from 0 to 2048 [ 559.451176][ T9591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.489341][ T9598] loop0: detected capacity change from 0 to 256 [ 559.617637][ T9586] loop3: detected capacity change from 0 to 4096 [ 559.635176][ T9586] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 559.657643][ T9586] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 559.886787][ T9601] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 559.938353][ T5882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.202923][ T9614] syz.0.1182: attempt to access beyond end of device [ 560.202923][ T9614] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 560.216343][ T9614] (syz.0.1182,9614,1):ocfs2_get_sector:1769 ERROR: status = -5 [ 560.224397][ T9614] (syz.0.1182,9614,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 560.232419][ T9614] (syz.0.1182,9614,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 560.241446][ T9614] (syz.0.1182,9614,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 560.840691][ T9628] loop2: detected capacity change from 0 to 1024 [ 561.175827][ T13] hfsplus: b-tree write err: -5, ino 4 [ 561.772330][ T4812] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 561.811768][ T9649] loop4: detected capacity change from 0 to 64 [ 561.964693][ T4812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.975908][ T4812] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 561.985623][ T4812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.020021][ T4812] usb 3-1: config 0 descriptor?? [ 562.202752][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 562.248788][ T4812] usb 3-1: USB disconnect, device number 11 [ 562.385536][ T5183] Bluetooth: hci0: command tx timeout [ 562.410857][ T9669] loop4: detected capacity change from 0 to 256 [ 562.465409][ T9669] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 562.497898][ T10] usb 1-1: config 0 has no interfaces? [ 562.563544][ T10] usb 1-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 562.573248][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.580348][ T9669] exFAT-fs (loop4): abnormal access to deleted dentry [ 562.581462][ T10] usb 1-1: Product: syz [ 562.592888][ T10] usb 1-1: Manufacturer: syz [ 562.597783][ T10] usb 1-1: SerialNumber: syz [ 562.665991][ T10] usb 1-1: config 0 descriptor?? [ 562.780966][ T9676] syz_tun: refused to change device tx_queue_len [ 562.788559][ T9676] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 563.127228][ T9651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.178614][ T9651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.198086][ T5264] usb 1-1: USB disconnect, device number 12 [ 563.247883][ T9682] loop3: detected capacity change from 0 to 512 [ 563.298197][ T9682] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1204: bad orphan inode 15 [ 563.348414][ T9682] ext4_test_bit(bit=14, block=5) = 0 [ 563.356454][ T9682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.504525][ T9682] EXT4-fs error (device loop3): __ext4_new_inode:1070: comm syz.3.1204: reserved inode found cleared - inode=1 [ 563.553268][ T9682] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 563.920577][ T9700] netlink: 'syz.2.1208': attribute type 3 has an invalid length. [ 563.929670][ T9700] netlink: 'syz.2.1208': attribute type 3 has an invalid length. [ 563.936928][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.075091][ T9703] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1211'. [ 564.860668][ T9722] befs: (loop5): No write support. Marking filesystem read-only [ 564.872423][ T9722] syz.2.1216: attempt to access beyond end of device [ 564.872423][ T9722] loop5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 564.886466][ T9722] befs: (loop5): unable to read superblock [ 565.291170][ T9732] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1221'. [ 565.301035][ T9732] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1221'. [ 565.326971][ T9730] netlink: 'syz.4.1220': attribute type 12 has an invalid length. [ 565.335164][ T9730] netlink: 'syz.4.1220': attribute type 29 has an invalid length. [ 565.343362][ T9730] netlink: 'syz.4.1220': attribute type 2 has an invalid length. [ 565.351252][ T9730] netlink: 'syz.4.1220': attribute type 2 has an invalid length. [ 565.359317][ T9730] netlink: 'syz.4.1220': attribute type 1 has an invalid length. [ 565.367476][ T9730] netlink: 'syz.4.1220': attribute type 37 has an invalid length. [ 565.375731][ T9730] netlink: 'syz.4.1220': attribute type 2 has an invalid length. [ 565.385917][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.393668][ T9730] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1220'. [ 565.783419][ T9735] loop3: detected capacity change from 0 to 512 [ 565.887358][ T9735] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 565.899278][ T9738] tipc: Started in network mode [ 565.899507][ T9738] tipc: Node identity ac14140f, cluster identity 4711 [ 565.900252][ T9738] tipc: New replicast peer: 255.255.255.255 [ 565.905264][ T9738] tipc: Enabled bearer , priority 10 [ 566.004850][ T9735] EXT4-fs (loop3): 1 truncate cleaned up [ 566.012977][ T9735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.226352][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.254206][ T5242] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 566.362398][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 566.467143][ T9760] loop3: detected capacity change from 0 to 128 [ 566.520700][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.532378][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.542679][ T5242] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.556155][ T5242] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.565685][ T5242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.606970][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 566.620807][ T9760] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 566.638220][ T9760] ext4 filesystem being mounted at /283/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 566.675629][ T5242] usb 2-1: config 0 descriptor?? [ 566.684926][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 566.695335][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 566.705571][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 566.717517][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.731305][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 566.740772][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.014156][ T4812] tipc: Node number set to 2886997007 [ 567.048366][ T10] usb 5-1: usb_control_msg returned -32 [ 567.054792][ T10] usbtmc 5-1:16.0: can't read capabilities [ 567.090662][ T5189] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 567.156539][ T5242] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 567.164643][ T5242] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 567.179739][ T5242] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 567.204513][ T5264] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 567.229802][ T5242] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 567.372336][ T5242] usb 2-1: USB disconnect, device number 15 [ 567.495201][ T5264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.507072][ T5264] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 567.521124][ T5264] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 567.531268][ T5264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.552425][ T5264] usb 1-1: config 0 descriptor?? [ 567.983853][ T5264] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 568.005803][ T5264] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 568.025966][ T5264] plantronics 0003:047F:FFFF.0013: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 568.217671][ T5264] usb 1-1: USB disconnect, device number 13 [ 568.686930][ T9834] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1240'. [ 569.161934][ T5264] usb 5-1: USB disconnect, device number 8 [ 569.290490][ T9842] loop2: detected capacity change from 0 to 1024 [ 569.314404][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 569.814667][ T3013] hfsplus: b-tree write err: -5, ino 4 [ 570.373533][ T9872] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1251'. [ 570.655778][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1253'. [ 570.852096][ T5242] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 571.055826][ T5242] usb 5-1: Using ep0 maxpacket: 8 [ 571.098069][ T5242] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.153338][ T5242] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 571.162944][ T5242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 571.171345][ T5242] usb 5-1: SerialNumber: syz [ 571.234671][ T5242] cdc_ether 5-1:1.0: invalid descriptor buffer length [ 571.242189][ T5242] usb 5-1: bad CDC descriptors [ 571.463311][ T5242] usb 5-1: USB disconnect, device number 9 [ 571.574477][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 571.653558][ T9909] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1263'. [ 571.913726][ T5264] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 572.132047][ T29] audit: type=1326 audit(1727257720.608:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.3.1268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1a037def9 code=0x0 [ 572.171818][ T5264] usb 1-1: Using ep0 maxpacket: 8 [ 572.197986][ T5264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.209720][ T5264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.220265][ T5264] usb 1-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 572.229853][ T5264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.305380][ T5264] usb 1-1: config 0 descriptor?? [ 572.383875][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 572.395946][ T9925] bond0: option use_carrier: invalid value (20) [ 572.587406][ T9931] loop2: detected capacity change from 0 to 128 [ 572.591214][ T9928] loop1: detected capacity change from 0 to 2048 [ 572.702899][ T9928] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.808356][ T5264] hid-alps 0003:044E:121E.0014: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.0-1/input0 [ 572.983656][ T10] usb 1-1: USB disconnect, device number 14 [ 573.430785][ T9959] loop4: detected capacity change from 0 to 1024 [ 574.267090][ T9973] loop2: detected capacity change from 0 to 512 [ 574.304432][ T9973] EXT4-fs: Ignoring removed oldalloc option [ 574.325273][ T9973] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 574.413536][ T9973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 574.427117][ T9973] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.495157][ T9986] sch_fq: defrate 2 ignored. [ 574.562028][ T5264] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 574.564959][ T9988] loop1: detected capacity change from 0 to 64 [ 574.747644][ T5264] usb 1-1: Using ep0 maxpacket: 8 [ 574.767105][ T5264] usb 1-1: config 0 has no interfaces? [ 574.773427][ T5264] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 574.783377][ T5264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.823390][ T5264] usb 1-1: config 0 descriptor?? [ 575.180052][ T5905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 575.287633][ T9978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.355201][ T9978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.418105][ T5264] usb 1-1: USB disconnect, device number 15 [ 576.013202][T10026] netlink: 'syz.2.1299': attribute type 34 has an invalid length. [ 576.433595][T10039] loop0: detected capacity change from 0 to 1024 [ 577.569322][ T3013] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.632578][ T5264] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 577.747247][ T3013] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.835475][ T5264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.847049][ T5264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.857480][ T5264] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 577.868827][ T5264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.939528][ T3013] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.983651][ T5264] usb 2-1: config 0 descriptor?? [ 578.037325][ T3013] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.229543][ T5264] usbhid 2-1:0.0: can't add hid device: -71 [ 578.236578][ T5264] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 578.268616][ T5264] usb 2-1: USB disconnect, device number 16 [ 578.345037][ T3013] bridge_slave_1: left allmulticast mode [ 578.351016][ T3013] bridge_slave_1: left promiscuous mode [ 578.358088][ T3013] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.383170][ T3013] bridge_slave_0: left allmulticast mode [ 578.393764][ T3013] bridge_slave_0: left promiscuous mode [ 578.403414][ T3013] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.973209][ T3013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.022263][ T3013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.044998][ T3013] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 579.057153][ T3013] team0: left promiscuous mode [ 579.065356][ T3013] team_slave_0: left promiscuous mode [ 579.071139][ T3013] team_slave_1: left promiscuous mode [ 579.083179][ T3013] bond0 (unregistering): Released all slaves [ 579.542583][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 579.591457][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 579.637241][T10101] loop2: detected capacity change from 0 to 1024 [ 579.647172][T10101] EXT4-fs: Ignoring removed orlov option [ 579.655662][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 579.725677][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 579.743389][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 579.818142][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 580.026331][T10101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.117997][ T3013] hsr_slave_0: left promiscuous mode [ 580.142088][ T3013] hsr_slave_1: left promiscuous mode [ 580.199449][ T3013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.207854][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.245334][ T3013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.253311][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.298040][ T3013] veth1_macvtap: left promiscuous mode [ 580.304170][ T3013] veth0_macvtap: left promiscuous mode [ 580.310320][ T3013] veth1_vlan: left promiscuous mode [ 580.316044][ T3013] veth0_vlan: left promiscuous mode [ 580.427453][ T5905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.895793][T10144] loop2: detected capacity change from 0 to 128 [ 581.014798][T10144] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 581.164111][ T3013] team0 (unregistering): Port device team_slave_1 removed [ 581.190464][ T3013] team0 (unregistering): Port device team_slave_0 removed [ 581.519391][ T3013] lo (unregistering): left allmulticast mode [ 581.573430][T10118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1319'. [ 581.583441][T10118] (unnamed net_device) (uninitialized): option ad_select: invalid value (36) [ 581.777457][ T5905] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 581.795776][T10146] team0: entered promiscuous mode [ 581.801148][T10146] team_slave_0: entered promiscuous mode [ 581.810480][T10146] team_slave_1: entered promiscuous mode [ 581.944381][T10150] team0: left promiscuous mode [ 581.949470][T10150] team_slave_0: left promiscuous mode [ 581.956525][T10150] team_slave_1: left promiscuous mode [ 581.964498][ T52] Bluetooth: hci3: command tx timeout [ 582.782257][T10102] chnl_net:caif_netlink_parms(): no params data found [ 583.525221][T10283] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 584.063221][ T52] Bluetooth: hci3: command tx timeout [ 584.097813][T10102] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.105890][T10102] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.114070][T10102] bridge_slave_0: entered allmulticast mode [ 584.125122][T10102] bridge_slave_0: entered promiscuous mode [ 584.244823][T10102] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.252945][T10102] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.260849][T10102] bridge_slave_1: entered allmulticast mode [ 584.270296][T10102] bridge_slave_1: entered promiscuous mode [ 584.603085][T10102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.693986][T10102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.914972][T10102] team0: Port device team_slave_0 added [ 584.946217][T10102] team0: Port device team_slave_1 added [ 585.133779][T10102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.141028][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.170758][T10102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.211320][T10102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.220816][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.248405][T10102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.498980][T10102] hsr_slave_0: entered promiscuous mode [ 585.536402][T10102] hsr_slave_1: entered promiscuous mode [ 585.618918][T10437] ===================================================== [ 585.626440][T10437] BUG: KMSAN: uninit-value in nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 585.634757][T10437] nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 585.640576][T10437] nf_send_reset6+0xd84/0x15b0 [ 585.645777][T10437] nft_reject_inet_eval+0x3c1/0x880 [ 585.651298][T10437] nft_do_chain+0x426/0x2290 [ 585.656299][T10437] nft_do_chain_inet+0x41a/0x4f0 [ 585.661698][T10437] nf_hook_slow+0xf4/0x400 [ 585.666372][T10437] ip6_xmit+0x2488/0x25d0 [ 585.670959][T10437] tcp_v6_send_synack+0xa7c/0xeb0 [ 585.676316][T10437] tcp_conn_request+0x3cb6/0x4b00 [ 585.681676][T10437] tcp_v6_conn_request+0x2f5/0x3d0 [ 585.687019][T10437] tcp_rcv_state_process+0x2f1/0x4c10 [ 585.692710][T10437] tcp_v6_do_rcv+0xc9b/0x1c30 [ 585.697609][T10437] tcp_v6_rcv+0x43f1/0x4fa0 [ 585.702426][T10437] ip6_protocol_deliver_rcu+0x1ad5/0x2cb0 [ 585.708465][T10437] ip6_input+0x161/0x430 [ 585.713085][T10437] ip6_rcv_finish+0x617/0x970 [ 585.718042][T10437] ipv6_rcv+0xde/0x390 [ 585.722446][T10437] __netif_receive_skb+0x1da/0xa00 [ 585.727863][T10437] netif_receive_skb+0x58/0x660 [ 585.733191][T10437] tun_rx_batched+0x3ee/0x980 [ 585.738130][T10437] tun_get_user+0x5783/0x6c60 [ 585.743194][T10437] tun_chr_write_iter+0x3ac/0x5d0 [ 585.748470][T10437] vfs_write+0xb28/0x1540 [ 585.753126][T10437] ksys_write+0x24f/0x4c0 [ 585.757675][T10437] __x64_sys_write+0x93/0xe0 [ 585.762607][T10437] x64_sys_call+0x306a/0x3ba0 [ 585.767570][T10437] do_syscall_64+0xcd/0x1e0 [ 585.772453][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.778602][T10437] [ 585.781071][T10437] Uninit was stored to memory at: [ 585.786638][T10437] nf_reject_ip6_tcphdr_put+0x60c/0x6c0 [ 585.792643][T10437] nf_send_reset6+0xd84/0x15b0 [ 585.797716][T10437] nft_reject_inet_eval+0x3c1/0x880 [ 585.803258][T10437] nft_do_chain+0x426/0x2290 [ 585.808091][T10437] nft_do_chain_inet+0x41a/0x4f0 [ 585.813399][T10437] nf_hook_slow+0xf4/0x400 [ 585.818071][T10437] ip6_xmit+0x2488/0x25d0 [ 585.822724][T10437] tcp_v6_send_synack+0xa7c/0xeb0 [ 585.827974][T10437] tcp_conn_request+0x3cb6/0x4b00 [ 585.833451][T10437] tcp_v6_conn_request+0x2f5/0x3d0 [ 585.838887][T10437] tcp_rcv_state_process+0x2f1/0x4c10 [ 585.844606][T10437] tcp_v6_do_rcv+0xc9b/0x1c30 [ 585.849501][T10437] tcp_v6_rcv+0x43f1/0x4fa0 [ 585.854323][T10437] ip6_protocol_deliver_rcu+0x1ad5/0x2cb0 [ 585.860302][T10437] ip6_input+0x161/0x430 [ 585.864875][T10437] ip6_rcv_finish+0x617/0x970 [ 585.869781][T10437] ipv6_rcv+0xde/0x390 [ 585.874175][T10437] __netif_receive_skb+0x1da/0xa00 [ 585.879553][T10437] netif_receive_skb+0x58/0x660 [ 585.884770][T10437] tun_rx_batched+0x3ee/0x980 [ 585.889685][T10437] tun_get_user+0x5783/0x6c60 [ 585.894664][T10437] tun_chr_write_iter+0x3ac/0x5d0 [ 585.899952][T10437] vfs_write+0xb28/0x1540 [ 585.904592][T10437] ksys_write+0x24f/0x4c0 [ 585.909136][T10437] __x64_sys_write+0x93/0xe0 [ 585.914048][T10437] x64_sys_call+0x306a/0x3ba0 [ 585.918968][T10437] do_syscall_64+0xcd/0x1e0 [ 585.923780][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.929930][T10437] [ 585.932496][T10437] Uninit was stored to memory at: [ 585.937847][T10437] nf_reject_ip6_tcphdr_put+0x2ca/0x6c0 [ 585.943778][T10437] nf_send_reset6+0xd84/0x15b0 [ 585.948814][T10437] nft_reject_inet_eval+0x3c1/0x880 [ 585.954399][T10437] nft_do_chain+0x426/0x2290 [ 585.959257][T10437] nft_do_chain_inet+0x41a/0x4f0 [ 585.964633][T10437] nf_hook_slow+0xf4/0x400 [ 585.969290][T10437] ip6_xmit+0x2488/0x25d0 [ 585.973965][T10437] tcp_v6_send_synack+0xa7c/0xeb0 [ 585.979204][T10437] tcp_conn_request+0x3cb6/0x4b00 [ 585.984611][T10437] tcp_v6_conn_request+0x2f5/0x3d0 [ 585.989960][T10437] tcp_rcv_state_process+0x2f1/0x4c10 [ 585.995691][T10437] tcp_v6_do_rcv+0xc9b/0x1c30 [ 586.000593][T10437] tcp_v6_rcv+0x43f1/0x4fa0 [ 586.005434][T10437] ip6_protocol_deliver_rcu+0x1ad5/0x2cb0 [ 586.011607][T10437] ip6_input+0x161/0x430 [ 586.016088][T10437] ip6_rcv_finish+0x617/0x970 [ 586.021010][T10437] ipv6_rcv+0xde/0x390 [ 586.023423][T10102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 586.025333][T10437] __netif_receive_skb+0x1da/0xa00 [ 586.025542][T10437] netif_receive_skb+0x58/0x660 [ 586.033541][T10102] Cannot create hsr debugfs directory [ 586.038356][T10437] tun_rx_batched+0x3ee/0x980 [ 586.054528][T10437] tun_get_user+0x5783/0x6c60 [ 586.059473][T10437] tun_chr_write_iter+0x3ac/0x5d0 [ 586.064861][T10437] vfs_write+0xb28/0x1540 [ 586.069444][T10437] ksys_write+0x24f/0x4c0 [ 586.074121][T10437] __x64_sys_write+0x93/0xe0 [ 586.078935][T10437] x64_sys_call+0x306a/0x3ba0 [ 586.084344][T10437] do_syscall_64+0xcd/0x1e0 [ 586.089142][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.095501][T10437] [ 586.097980][T10437] Uninit was created at: [ 586.102669][T10437] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 586.108839][T10437] kmalloc_reserve+0x13d/0x4a0 [ 586.113990][T10437] __alloc_skb+0x363/0x7b0 [ 586.118653][T10437] nf_send_reset6+0x98d/0x15b0 [ 586.123761][T10437] nft_reject_inet_eval+0x3c1/0x880 [ 586.129229][T10437] nft_do_chain+0x426/0x2290 [ 586.134303][T10437] nft_do_chain_inet+0x41a/0x4f0 [ 586.139494][T10437] nf_hook_slow+0xf4/0x400 [ 586.144260][T10437] ip6_xmit+0x2488/0x25d0 [ 586.148836][T10437] tcp_v6_send_synack+0xa7c/0xeb0 [ 586.154189][T10437] tcp_conn_request+0x3cb6/0x4b00 [ 586.159529][T10437] tcp_v6_conn_request+0x2f5/0x3d0 [ 586.165016][T10437] tcp_rcv_state_process+0x2f1/0x4c10 [ 586.170611][T10437] tcp_v6_do_rcv+0xc9b/0x1c30 [ 586.175723][T10437] tcp_v6_rcv+0x43f1/0x4fa0 [ 586.180469][T10437] ip6_protocol_deliver_rcu+0x1ad5/0x2cb0 [ 586.186563][T10437] ip6_input+0x161/0x430 [ 586.191065][T10437] ip6_rcv_finish+0x617/0x970 [ 586.196094][T10437] ipv6_rcv+0xde/0x390 [ 586.200519][T10437] __netif_receive_skb+0x1da/0xa00 [ 586.206022][T10437] netif_receive_skb+0x58/0x660 [ 586.211158][T10437] tun_rx_batched+0x3ee/0x980 [ 586.216250][T10437] tun_get_user+0x5783/0x6c60 [ 586.221198][T10437] tun_chr_write_iter+0x3ac/0x5d0 [ 586.226596][T10437] vfs_write+0xb28/0x1540 [ 586.231167][T10437] ksys_write+0x24f/0x4c0 [ 586.235850][T10437] __x64_sys_write+0x93/0xe0 [ 586.240673][T10437] x64_sys_call+0x306a/0x3ba0 [ 586.245718][T10437] do_syscall_64+0xcd/0x1e0 [ 586.250437][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.256717][T10437] [ 586.259277][T10437] CPU: 0 UID: 0 PID: 10437 Comm: syz.0.1346 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 586.270075][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 586.280430][T10437] ===================================================== [ 586.287640][T10437] Disabling lock debugging due to kernel taint [ 586.294207][T10437] Kernel panic - not syncing: kmsan.panic set ... [ 586.300833][T10437] CPU: 0 UID: 0 PID: 10437 Comm: syz.0.1346 Tainted: G B 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 586.313019][T10437] Tainted: [B]=BAD_PAGE [ 586.317314][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 586.327577][T10437] Call Trace: [ 586.331017][T10437] [ 586.334289][T10437] dump_stack_lvl+0x216/0x2d0 [ 586.339244][T10437] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 586.345378][T10437] dump_stack+0x1e/0x30 [ 586.349748][T10437] panic+0x4e2/0xcf0 [ 586.353907][T10437] ? kmsan_get_metadata+0xd1/0x1c0 [ 586.359316][T10437] kmsan_report+0x2c7/0x2d0 [ 586.364104][T10437] ? kmsan_internal_chain_origin+0x20/0xd0 [ 586.370180][T10437] ? __msan_warning+0x95/0x120 [ 586.375213][T10437] ? nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 586.381227][T10437] ? nf_send_reset6+0xd84/0x15b0 [ 586.386516][T10437] ? nft_reject_inet_eval+0x3c1/0x880 [ 586.392178][T10437] ? nft_do_chain+0x426/0x2290 [ 586.397178][T10437] ? nft_do_chain_inet+0x41a/0x4f0 [ 586.402527][T10437] ? nf_hook_slow+0xf4/0x400 [ 586.407337][T10437] ? ip6_xmit+0x2488/0x25d0 [ 586.412049][T10437] ? tcp_v6_send_synack+0xa7c/0xeb0 [ 586.417455][T10437] ? tcp_conn_request+0x3cb6/0x4b00 [ 586.422985][T10437] ? tcp_v6_conn_request+0x2f5/0x3d0 [ 586.428510][T10437] ? tcp_rcv_state_process+0x2f1/0x4c10 [ 586.434274][T10437] ? tcp_v6_do_rcv+0xc9b/0x1c30 [ 586.439359][T10437] ? tcp_v6_rcv+0x43f1/0x4fa0 [ 586.444266][T10437] ? ip6_protocol_deliver_rcu+0x1ad5/0x2cb0 [ 586.450431][T10437] ? ip6_input+0x161/0x430 [ 586.455090][T10437] ? ip6_rcv_finish+0x617/0x970 [ 586.460184][T10437] ? ipv6_rcv+0xde/0x390 [ 586.464669][T10437] ? __netif_receive_skb+0x1da/0xa00 [ 586.470231][T10437] ? netif_receive_skb+0x58/0x660 [ 586.475621][T10437] ? tun_rx_batched+0x3ee/0x980 [ 586.480834][T10437] ? tun_get_user+0x5783/0x6c60 [ 586.485960][T10437] ? tun_chr_write_iter+0x3ac/0x5d0 [ 586.491418][T10437] ? vfs_write+0xb28/0x1540 [ 586.496162][T10437] ? ksys_write+0x24f/0x4c0 [ 586.500899][T10437] ? __x64_sys_write+0x93/0xe0 [ 586.505873][T10437] ? x64_sys_call+0x306a/0x3ba0 [ 586.510952][T10437] ? do_syscall_64+0xcd/0x1e0 [ 586.515806][T10437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.522194][T10437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.528473][T10437] ? kmem_cache_alloc_node_noprof+0x6df/0xb80 [ 586.534772][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.540201][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.545665][T10437] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 586.551737][T10437] ? csum_partial+0x45e/0x4b0 [ 586.556779][T10437] __msan_warning+0x95/0x120 [ 586.561745][T10437] nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 586.567568][T10437] nf_send_reset6+0xd84/0x15b0 [ 586.572625][T10437] nft_reject_inet_eval+0x3c1/0x880 [ 586.578047][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.583494][T10437] ? __pfx_nft_reject_inet_eval+0x10/0x10 [ 586.589453][T10437] nft_do_chain+0x426/0x2290 [ 586.594265][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.599795][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.605236][T10437] ? ipv6_find_hdr+0xe8d/0x12f0 [ 586.610370][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.615801][T10437] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 586.621863][T10437] nft_do_chain_inet+0x41a/0x4f0 [ 586.627027][T10437] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 586.632702][T10437] nf_hook_slow+0xf4/0x400 [ 586.637337][T10437] ip6_xmit+0x2488/0x25d0 [ 586.641849][T10437] ? kmsan_print_origin+0xa3/0x320 [ 586.647190][T10437] ? __pfx_dst_output+0x10/0x10 [ 586.652293][T10437] tcp_v6_send_synack+0xa7c/0xeb0 [ 586.657517][T10437] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 586.663849][T10437] ? __pfx_tcp_v6_send_synack+0x10/0x10 [ 586.669582][T10437] tcp_conn_request+0x3cb6/0x4b00 [ 586.674821][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.680258][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.685719][T10437] tcp_v6_conn_request+0x2f5/0x3d0 [ 586.691128][T10437] ? __pfx_tcp_v6_conn_request+0x10/0x10 [ 586.696998][T10437] ? tcp_rcv_state_process+0x286/0x4c10 [ 586.702735][T10437] tcp_rcv_state_process+0x2f1/0x4c10 [ 586.708301][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.713742][T10437] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 586.720014][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.725544][T10437] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 586.731638][T10437] tcp_v6_do_rcv+0xc9b/0x1c30 [ 586.736527][T10437] tcp_v6_rcv+0x43f1/0x4fa0 [ 586.741288][T10437] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 586.746345][T10437] ip6_protocol_deliver_rcu+0x1ad5/0x2cb0 [ 586.752433][T10437] ip6_input+0x161/0x430 [ 586.756874][T10437] ? __pfx_ip6_input_finish+0x10/0x10 [ 586.762497][T10437] ? __pfx_ip6_input+0x10/0x10 [ 586.767468][T10437] ip6_rcv_finish+0x617/0x970 [ 586.772374][T10437] ipv6_rcv+0xde/0x390 [ 586.776645][T10437] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 586.782075][T10437] __netif_receive_skb+0x1da/0xa00 [ 586.787453][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.792919][T10437] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 586.799183][T10437] netif_receive_skb+0x58/0x660 [ 586.804268][T10437] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 586.810319][T10437] ? tun_rx_batched+0x37c/0x980 [ 586.815385][T10437] tun_rx_batched+0x3ee/0x980 [ 586.820366][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.825851][T10437] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 586.831931][T10437] tun_get_user+0x5783/0x6c60 [ 586.836845][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.842296][T10437] ? kmsan_get_metadata+0x13e/0x1c0 [ 586.847737][T10437] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 586.854327][T10437] ? ref_tracker_alloc+0x3f0/0x7e0 [ 586.859694][T10437] tun_chr_write_iter+0x3ac/0x5d0 [ 586.864978][T10437] vfs_write+0xb28/0x1540 [ 586.869528][T10437] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 586.875312][T10437] ksys_write+0x24f/0x4c0 [ 586.879854][T10437] __x64_sys_write+0x93/0xe0 [ 586.884664][T10437] x64_sys_call+0x306a/0x3ba0 [ 586.889592][T10437] do_syscall_64+0xcd/0x1e0 [ 586.894301][T10437] ? clear_bhb_loop+0x25/0x80 [ 586.899190][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.905332][T10437] RIP: 0033:0x7f52b697c9df [ 586.909988][T10437] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 586.929808][T10437] RSP: 002b:00007f52b779c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 586.938419][T10437] RAX: ffffffffffffffda RBX: 00007f52b6b35f80 RCX: 00007f52b697c9df [ 586.946575][T10437] RDX: 0000000000000056 RSI: 00000000200003c0 RDI: 00000000000000c8 [ 586.954774][T10437] RBP: 00007f52b69f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 586.963033][T10437] R10: 0000000000000056 R11: 0000000000000293 R12: 0000000000000000 [ 586.971260][T10437] R13: 0000000000000000 R14: 00007f52b6b35f80 R15: 00007ffdc4a95668 [ 586.979404][T10437] [ 586.982892][T10437] Kernel Offset: disabled [ 586.987308][T10437] Rebooting in 86400 seconds..