last executing test programs: 3.874948736s ago: executing program 3 (id=5927): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000f40)=ANY=[@ANYBLOB="726f6469722c757365667265652c696f636861727365743d6370313235352c756e695f786c6174653d312c636f6465706167653d3933362c757466383d302c636865636b3d72656c617865642c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c00ef4965db50a5729e7a3c888b967e9890d33d8e5f495b8deb12e975ae17fd608a3f7d4175910fff826925e0330c7a3ef5"], 0x25, 0x336, &(0x7f0000001200)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 3.029165829s ago: executing program 3 (id=5939): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7b1, 0x0) 2.688247835s ago: executing program 3 (id=5942): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x80201) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000840)="3c9274c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcff}) 2.508833898s ago: executing program 3 (id=5944): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000084010000000600000006000b"], 0x1c}}, 0x0) 2.394466843s ago: executing program 1 (id=5945): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9, 0x0, @opaque="9d"}}}}}, 0x0) 2.264306592s ago: executing program 3 (id=5948): r0 = syz_mount_image$xfs(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x4008, &(0x7f0000000040)={[{@inode32}, {@pquota}]}, 0x1, 0x9825, &(0x7f000001c900)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) sendfile(r0, r1, 0x0, 0x80000001) 2.135471345s ago: executing program 1 (id=5950): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0xff02, 0x4e34, 0x0, 0x5, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x5f) 1.86987225s ago: executing program 1 (id=5952): syz_usb_connect(0x0, 0x24, &(0x7f0000001380)=ANY=[@ANYBLOB="12010000f66e6b401aeb50e3faf8000000010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000) 1.712469775s ago: executing program 5 (id=5954): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b050600f4ff020006004788aa96a13bb1000011000086dd1a00", 0x1001a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.689550316s ago: executing program 4 (id=5955): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000680)='./file1\x00', 0x3000801, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES8=0x0, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="265c375a51dd6e984fce8f35aa96c075b7a81828e19cae434dffff00000000000014aff7565f8f9989ef21cc069e9749731bd1c6a9829f608f227226f10458476d5a0b704f77d9b09077243e32c3c64966b7f87048ae31ebf117f3d51f91ba7edfec2ea21d2382804f40b80f00fc791879137b4c7b40f0fec0ee209e144676e71e63c3d74fc465d09f40982fd6c163c833e2a0c13bcb290e5e727197549ecb61473c5ced3d4d7684d79d50ab63ac97ad2228d9245ea6cd2b2716a000a9834983a3f1a768004374e58bcabab221000000fc0000000000000000000000000f21c0352cd526bfdee0c1be60fa5c002ed9f108f6", @ANYRESOCT], 0x2, 0x1e9, &(0x7f0000000a00)="$eJzsmb9vEzEUx792rkmpUCUWBhYGKlEEvdxdAHXpUCR2pJZfGyd6rQJug66HlERCKGJhYWRAYuUfYGDIxMDGhthgACQ2MrKwGNnny5kkRxKxnOj7SPF9bT8/28+nZykHgiCOLN++/vzy7Mr69gUAx7GCGqpjNtzSn188PP984+rL159evTtYftQftWUApFTKmWl+ZfV2s4LE1KVMR2esmOc2+FBfB8c5o2+CwTX6DjhuGB2B4bbR9yzdOmaEiNy7LbGz2xSRpwpfFYEqGqPrG/QYdgAsmvUxq/+w070fChHFWjhQgiMUYkFm88R/2swvpsVvsMmxYcVPndetp096qp7Fxsvjpw/GN+0NMGwZvY4aXNfNQ2Lt/5ST+688Ltp/ycSJtVIswxLq1SnBMv4zsfxxrlFstEWdyrDl5KD/Pu1ils33iQ5/SSnLEoRioRMXgLGuD0v/5jm7Kiba5MmGOcBZKz851t1QT/Yf1A873bXmfrgX7UUHQdC47F30vEtBfbcp/pb6jP9FnZ+WLP8LBbZVVkU7TJLYbwNJ7A/rQVpaGXfrTeuHHsN1/uNYPZP6UK+K3nZt8hzM/Lh+KrVamboJgiAIgiAIgiAIgiAIgiCImTgNpv8FNR+qZAHBNW39OwAA//8p4GSg") 1.579579964s ago: executing program 5 (id=5956): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0xd00) 1.527095243s ago: executing program 4 (id=5957): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x80201) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="1e9374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcff}) 1.460011838s ago: executing program 5 (id=5958): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 1.397707715s ago: executing program 4 (id=5959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008095}, 0x4) 1.231998191s ago: executing program 2 (id=5961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) 1.225447611s ago: executing program 4 (id=5962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000300)={{0x0, 0x1}, 0x0, 0x400}) 1.213591144s ago: executing program 5 (id=5963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86c0d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.076992648s ago: executing program 2 (id=5965): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="007a93b9d6cfc45636b907277d9dbc239676439a4b03adcc20dc27453a1a833c802e8650810eff9fdc8bb6e768076d890752db516f649dec5891435b1f58f186364bdaa1125ea94a5612d57018cabe3abbf321deff9ed2c8785be41507def3240220d808940ac2bb251873ea3f1bdb0d5ee04cf4ffd184dbadc5c6f95ad3a49841645535cd00151145a07f0000007792c93473b9878343b5f12ef5329eb2f14caa61dc0dd0aa6d91ebd9522a076cb40792e8541570a733ad433f6fc926cfa2890a6005fd74a822076e172f1f5ca254e5936e8c3eb5b4d966f1d6b8772fcc0f000f85bd3ed8c95c267f4cd1acd681b1"], 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x180) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) 971.267688ms ago: executing program 0 (id=5967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711213000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$OBJ_GET_MAP(0x11, &(0x7f0000010f00)=@generic={&(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) 942.830405ms ago: executing program 5 (id=5968): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000010140)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) 901.583088ms ago: executing program 4 (id=5969): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 876.387859ms ago: executing program 5 (id=5970): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407d1eb42d000000090001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="40004f0000004f0ed1abc63f6e866bbc4d"], 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 745.222127ms ago: executing program 0 (id=5971): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) 684.291285ms ago: executing program 4 (id=5972): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$swradio(&(0x7f00000010c0), 0x1, 0x2) read(r0, &(0x7f0000000fc0)=""/4, 0x4) 664.336311ms ago: executing program 0 (id=5973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="24002d8008000200030000000500010000000000050004"], 0x40}}, 0x0) 583.429773ms ago: executing program 2 (id=5974): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 524.92127ms ago: executing program 0 (id=5975): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x48}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 420.635422ms ago: executing program 2 (id=5976): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x20) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "c96c8fe9124f9ba1"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xffff, 0x0, 0x0, 0x0, 0x0, "823af9032ae9da23"}) 419.466142ms ago: executing program 1 (id=5977): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x40, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000001c0)=0x84) 332.489007ms ago: executing program 0 (id=5978): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 288.517199ms ago: executing program 3 (id=5979): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 220.563619ms ago: executing program 2 (id=5980): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r1, &(0x7f0000000180)={0x27}, 0x14) 160.141344ms ago: executing program 1 (id=5981): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$capi20(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0x541b, 0x0) 77.106738ms ago: executing program 0 (id=5982): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x200d54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x9) 58.278827ms ago: executing program 2 (id=5983): sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="e29c891ec90ec2d36cafd60d7434ef14e45bb60341f22328fcbbde877b387f5dbaff7c0dcb4ab16fef4f3c96f07a6a8fff834d6cb4b67c6fd4ab85360eb791f6811c39cf72502cf8bfb6a40496daf2efa219d5f6a53dc79b24fd7f89a54583169f49d3d62d44f525285b7311", 0x6c}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 0s ago: executing program 1 (id=5984): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) kernel console output (not intermixed with test programs): log mount failed [ 602.842415][T18697] loop3: detected capacity change from 0 to 512 [ 602.892524][T18697] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 602.894722][T18702] loop2: detected capacity change from 0 to 47 [ 602.957286][T18697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 602.981739][T18697] System zones: 1-12 [ 603.033018][T18697] EXT4-fs (loop3): 1 truncate cleaned up [ 603.059246][T18697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.076620][T18709] program syz.5.5200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 603.356791][T11726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.439964][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5206'. [ 603.537526][T18732] loop5: detected capacity change from 0 to 64 [ 603.576179][T18730] loop3: detected capacity change from 0 to 2048 [ 603.645966][T18730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 604.200377][T18756] loop3: detected capacity change from 0 to 128 [ 604.218653][T18756] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 605.197365][T18780] netlink: 'syz.0.5232': attribute type 7 has an invalid length. [ 605.522778][T18787] netlink: 'syz.0.5234': attribute type 2 has an invalid length. [ 605.564292][T18787] netlink: 16142 bytes leftover after parsing attributes in process `syz.0.5234'. [ 606.339460][T18811] loop3: detected capacity change from 0 to 512 [ 606.348984][ T5297] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 606.463833][T18811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.478867][T18811] ext4 filesystem being mounted at /492/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 606.554543][ T5297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.565931][ T5297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.576521][ T5297] usb 2-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 606.588837][ T5297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.607953][ T5297] usb 2-1: config 0 descriptor?? [ 606.788954][T11726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.071067][ T5297] hid-generic 0003:0EEF:C002.0030: unbalanced delimiter at end of report description [ 607.091608][ T5297] hid-generic 0003:0EEF:C002.0030: probe with driver hid-generic failed with error -22 [ 607.317601][ T5297] usb 2-1: USB disconnect, device number 34 [ 607.503306][T18823] loop0: detected capacity change from 0 to 32768 [ 607.520006][T18823] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5249 (18823) [ 607.556347][T18823] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 607.578903][T18823] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 607.598607][T18823] BTRFS info (device loop0): using free-space-tree [ 607.727121][ T5296] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 607.846386][T18872] loop5: detected capacity change from 0 to 1024 [ 607.951910][ T5296] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 607.967011][T15149] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 608.003660][ T5296] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.036148][ T5296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.052181][ T5296] usb 4-1: Product: syz [ 608.061799][ T5296] usb 4-1: Manufacturer: syz [ 608.070633][ T5296] usb 4-1: SerialNumber: syz [ 608.085528][T18876] sit0: entered promiscuous mode [ 608.099895][T18852] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 608.106872][T18876] netlink: 'syz.4.5269': attribute type 1 has an invalid length. [ 608.135979][ T5296] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 608.160332][T18876] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5269'. [ 608.394927][T18852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.432265][T18852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.432662][T18882] loop1: detected capacity change from 0 to 512 [ 608.462077][ T5243] usb 4-1: USB disconnect, device number 34 [ 608.507202][T18882] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 608.619383][T18882] EXT4-fs (loop1): 1 truncate cleaned up [ 608.628436][T18882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.659554][ T5335] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 608.682962][T18882] fscrypt (loop1, inode 18): Unsupported encryption flags (0xc5) [ 608.771220][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 608.861474][T14854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.959813][T18894] binder: BC_ACQUIRE_RESULT not supported [ 608.965754][T18894] binder: 18893:18894 ioctl c0306201 20000480 returned -22 [ 609.015161][ T5335] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 609.213711][ T5335] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 609.230293][ T5335] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.256126][ T5335] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 609.283405][ T5335] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.329950][ T5335] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 609.349622][ T5296] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 609.367175][ T5335] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.420092][ T5335] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 609.446730][ T5335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.485954][T18852] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 609.535005][ T5296] usb 2-1: Using ep0 maxpacket: 8 [ 609.580812][ T5296] usb 2-1: config index 0 descriptor too short (expected 7382, got 27) [ 609.606034][ T5296] usb 2-1: config 195 has an invalid descriptor of length 0, skipping remainder of the config [ 609.647550][ T5296] usb 2-1: config 195 has 1 interface, different from the descriptor's value: 23 [ 609.683851][ T5296] usb 2-1: config 195 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.711467][ T5335] usb 4-1: usb_control_msg returned -71 [ 609.717713][ T5296] usb 2-1: config 195 interface 0 has no altsetting 0 [ 609.730974][ T5335] usbtmc 4-1:16.0: can't read capabilities [ 609.747080][ T5335] usbtmc 4-1:16.0: Failed to submit iin_urb [ 609.747107][ T5296] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 609.776203][ T5335] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -90 [ 609.778770][ T5296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.826006][ T5296] usb 2-1: Product: syz [ 609.830204][ T5296] usb 2-1: Manufacturer: syz [ 609.842619][ T5335] usb 4-1: USB disconnect, device number 35 [ 609.860921][ T5296] usb 2-1: SerialNumber: syz [ 609.891074][ T5296] hub 2-1:195.0: bad descriptor, ignoring hub [ 609.906342][ T5296] hub 2-1:195.0: probe with driver hub failed with error -5 [ 609.965589][ T5296] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 610.031666][T18892] loop0: detected capacity change from 0 to 32768 [ 610.058177][T18892] XFS: ikeep mount option is deprecated. [ 610.063846][T18892] XFS: ikeep mount option is deprecated. [ 610.118116][ T5296] gspca_zc3xx: reg_w_i err -71 [ 610.130005][T18892] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 610.164014][T18900] loop2: detected capacity change from 0 to 32768 [ 610.175295][T18900] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5280 (18900) [ 610.207304][T18900] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 610.244828][T18900] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 610.286985][T18900] BTRFS info (device loop2): using free-space-tree [ 610.320692][T18928] netlink: 'syz.3.5288': attribute type 1 has an invalid length. [ 610.330579][T18928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5288'. [ 610.346078][T18892] XFS (loop0): Ending clean mount [ 610.346979][T18928] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5288'. [ 610.472604][T18944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.552353][T15149] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 610.728801][ T5296] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 610.735211][ T5296] gspca_zc3xx 2-1:195.0: probe with driver gspca_zc3xx failed with error -71 [ 610.747702][T17721] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 611.098716][T18926] loop5: detected capacity change from 0 to 32768 [ 611.129466][ T5296] usb 2-1: reset high-speed USB device number 35 using dummy_hcd [ 611.176082][T18926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5286 (18926) [ 611.264880][T18926] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 611.302372][T18926] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 611.346826][T18926] BTRFS info (device loop5): using free-space-tree [ 611.397665][T18962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.609001][T18980] loop4: detected capacity change from 0 to 256 [ 611.685634][T18980] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 611.699259][T18926] BTRFS info (device loop5): Snapshot src from another FS [ 611.879103][ T5229] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 611.968319][ T5296] usb 2-1: USB disconnect, device number 35 [ 612.316921][T18957] loop0: detected capacity change from 0 to 32768 [ 612.424515][T18957] [ 612.424515][T18957] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 612.424515][T18957] [ 612.531407][T18957] find_entry called with index = 0 [ 612.557938][T18957] read_mapping_page failed! [ 612.562482][T18957] ERROR: (device loop0): txCommit: [ 612.562482][T18957] [ 612.663577][T19001] loop1: detected capacity change from 0 to 512 [ 612.719261][T19001] EXT4-fs: Ignoring removed i_version option [ 612.732472][T19001] EXT4-fs: Ignoring removed nobh option [ 612.739677][T15149] [ 612.739677][T15149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 612.739677][T15149] [ 612.779767][T19001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 612.825340][T15149] [ 612.825340][T15149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 612.825340][T15149] [ 612.866577][T19001] EXT4-fs (loop1): 1 truncate cleaned up [ 612.902462][T19001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.950128][T19021] loop5: detected capacity change from 0 to 512 [ 612.958276][T19021] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 612.993731][T19021] EXT4-fs (loop5): 1 truncate cleaned up [ 613.000815][T19021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.179077][T14854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.183902][ T29] audit: type=1800 audit(1724605133.362:291): pid=19021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5319" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 613.236750][T19030] netlink: 'syz.2.5322': attribute type 6 has an invalid length. [ 613.376119][ T5229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.502225][T19040] netlink: 'syz.5.5327': attribute type 3 has an invalid length. [ 613.517062][T19040] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5327'. [ 613.542840][ T5243] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 613.747819][ T5243] usb 4-1: Using ep0 maxpacket: 16 [ 613.759309][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.786530][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.786672][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5331'. [ 613.820994][ T5243] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 613.847278][ T5243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.885578][ T5243] usb 4-1: config 0 descriptor?? [ 614.111208][ T8] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 614.310787][ T5243] razer 0003:1532:010D.0031: unknown main item tag 0x0 [ 614.328173][ T8] usb 6-1: config 0 has no interfaces? [ 614.334061][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=20ee, bcdDevice= 0.00 [ 614.343372][ T5243] razer 0003:1532:010D.0031: unknown main item tag 0x0 [ 614.358186][T19036] loop4: detected capacity change from 0 to 32768 [ 614.359811][ T5243] razer 0003:1532:010D.0031: unknown main item tag 0x0 [ 614.372981][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.389998][ T5243] razer 0003:1532:010D.0031: unknown main item tag 0x0 [ 614.397391][ T5243] razer 0003:1532:010D.0031: unknown main item tag 0x0 [ 614.407570][ T8] usb 6-1: config 0 descriptor?? [ 614.414547][T19036] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5325 (19036) [ 614.418291][ T5243] razer 0003:1532:010D.0031: unknown main item tag 0x0 [ 614.456731][T19036] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 614.465949][ T5243] razer 0003:1532:010D.0031: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.3-1/input0 [ 614.487021][T19036] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 614.499436][T19036] BTRFS info (device loop4): using free-space-tree [ 614.518778][T19067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5337'. [ 614.539196][ T5243] usb 4-1: USB disconnect, device number 36 [ 614.652943][ T8] usb 6-1: USB disconnect, device number 36 [ 614.737384][T19036] BTRFS warning (device loop4): can't set the incompat:0 feature bit while mounted [ 614.807651][T19090] loop2: detected capacity change from 0 to 4096 [ 614.816489][T19090] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 614.889696][T11534] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 614.904387][ T29] audit: type=1804 audit(1724605135.197:292): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5341" name="/newroot/56/file0/bus" dev="loop2" ino=33 res=1 errno=0 [ 615.376409][T19098] loop5: detected capacity change from 0 to 512 [ 615.482998][T19098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.500127][T19098] ext4 filesystem being mounted at /962/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.724063][ T5296] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 615.929095][ T5296] usb 3-1: Using ep0 maxpacket: 32 [ 615.943070][ T5296] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 615.972171][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.002273][ T5296] usb 3-1: Product: syz [ 616.012077][ T5296] usb 3-1: Manufacturer: syz [ 616.031150][ T5296] usb 3-1: SerialNumber: syz [ 616.043591][ T5296] usb 3-1: config 0 descriptor?? [ 616.204159][ T5229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.694567][ T5296] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 616.737093][ T5296] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 616.742917][T19106] loop4: detected capacity change from 0 to 32768 [ 616.792081][ T5296] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 616.803764][T19106] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 616.865563][T19110] loop1: detected capacity change from 0 to 32768 [ 616.918020][T19141] loop3: detected capacity change from 0 to 1024 [ 616.939908][ T5296] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 616.963724][T19110] ERROR: (device loop1): diWrite: ixpxd invalid [ 616.963724][T19110] [ 616.993412][T19110] ERROR: (device loop1): remounting filesystem as read-only [ 617.027797][T19106] XFS (loop4): Ending clean mount [ 617.028084][ T5296] usb 3-1: USB disconnect, device number 31 [ 617.038479][T19110] ERROR: (device loop1): txCommit: [ 617.038479][T19110] [ 617.071933][T19110] ERROR: (device loop1): remounting filesystem as read-only [ 617.118158][ T52] hfsplus: b-tree write err: -5, ino 4 [ 617.152409][T11534] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 617.579498][ T5296] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 617.608385][ T5294] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 617.616653][ T5295] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 617.710206][T19157] loop5: detected capacity change from 0 to 4096 [ 617.726106][T19157] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 617.788732][T19157] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 617.803571][ T5296] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 617.810072][T19157] ntfs3: loop5: Failed to load $Extend (-22). [ 617.817898][T19157] ntfs3: loop5: Failed to initialize $Extend. [ 617.839651][ T5296] usb 4-1: config 0 has no interface number 0 [ 617.865451][ T5296] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 617.909424][ T5296] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 617.941487][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.975468][ T5296] usb 4-1: config 0 descriptor?? [ 618.005739][ T5296] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 618.243023][ T5296] usb 4-1: USB disconnect, device number 37 [ 618.270394][ T5296] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 618.459892][ T5243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.633629][T19185] loop5: detected capacity change from 0 to 256 [ 618.999674][T19168] loop2: detected capacity change from 0 to 32768 [ 619.294634][T19201] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 619.313351][T19201] macsec3: entered promiscuous mode [ 619.393635][T19203] trusted_key: encrypted_key: keyword 'upZate' not recognized [ 619.423905][ T5243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.652491][T19187] loop0: detected capacity change from 0 to 32768 [ 619.684704][T19201] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 619.806276][T19187] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 619.906161][T19187] XFS (loop0): Ending clean mount [ 619.994590][T19187] XFS (loop0): Quotacheck needed: Please wait. [ 620.124227][T19227] geneve2: entered promiscuous mode [ 620.124739][T19187] XFS (loop0): Quotacheck: Done. [ 620.242090][T19230] loop3: detected capacity change from 0 to 2048 [ 620.346228][T19233] loop1: detected capacity change from 0 to 4096 [ 620.354206][T19230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.366413][ T5243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.380705][T19238] loop5: detected capacity change from 0 to 1024 [ 620.398155][T19233] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 620.419309][T15149] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 620.427202][T19233] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 620.440175][T16471] Bluetooth: hci0: command 0x0406 tx timeout [ 620.466568][T19238] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 620.516882][T11726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.585271][T19238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.659727][ T5229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.897465][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.280514][T19260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.342006][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.375087][T19273] netlink: 336 bytes leftover after parsing attributes in process `syz.3.5417'. [ 621.469601][T19275] loop1: detected capacity change from 0 to 2048 [ 621.534684][T19275] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 621.559129][T19275] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 621.627287][T19275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.910784][T19257] loop5: detected capacity change from 0 to 32768 [ 622.022430][T19257] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 622.166097][T19301] netlink: 'syz.3.5426': attribute type 1 has an invalid length. [ 622.213098][T19301] netlink: 9380 bytes leftover after parsing attributes in process `syz.3.5426'. [ 622.292197][T19257] XFS (loop5): Ending clean mount [ 622.305219][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.508368][ T5229] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 622.550260][T19316] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 622.583065][T19316] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 622.686138][T19318] veth1_macvtap: left promiscuous mode [ 622.777609][T19320] loop1: detected capacity change from 0 to 256 [ 622.832027][T19320] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 622.926660][T19281] loop4: detected capacity change from 0 to 32768 [ 622.991251][T19281] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 623.089791][T19281] XFS (loop4): Ending clean mount [ 623.218195][ T5243] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 623.274908][ T5335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.283095][T11534] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 623.412965][ T5243] usb 1-1: Using ep0 maxpacket: 32 [ 623.432506][ T5243] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 623.460145][ T5243] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 623.475051][ T5243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.503864][ T5243] usb 1-1: Product: syz [ 623.515096][ T5243] usb 1-1: Manufacturer: syz [ 623.521849][T19322] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 623.539861][T19322] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 623.547913][ T5243] usb 1-1: SerialNumber: syz [ 623.560301][ T5243] usb 1-1: config 0 descriptor?? [ 623.579623][T19324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 623.606079][ T5243] hub 1-1:0.0: bad descriptor, ignoring hub [ 623.636929][ T5243] hub 1-1:0.0: probe with driver hub failed with error -5 [ 623.676924][T19322] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 623.678877][ T5243] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input62 [ 623.682882][T19322] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 623.726438][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.737267][T19322] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 623.743482][T19336] loop1: detected capacity change from 0 to 32768 [ 623.776633][T19322] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 623.918584][T19336] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 623.949508][T19324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.047797][T19324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.113374][ T5295] usb 1-1: USB disconnect, device number 23 [ 624.119338][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 624.182513][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.230966][T19331] loop2: detected capacity change from 0 to 32768 [ 624.249793][ T5243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.262801][T19331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5439 (19331) [ 624.283399][T19336] XFS (loop1): Ending clean mount [ 624.330462][T19331] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 624.356439][T19336] XFS (loop1): Quotacheck needed: Please wait. [ 624.384403][T19331] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 624.422673][T19331] BTRFS info (device loop2): using free-space-tree [ 624.470789][T19336] XFS (loop1): Quotacheck: Done. [ 624.607180][T14854] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 624.723207][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5448'. [ 624.732846][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5448'. [ 624.925647][T19382] loop0: detected capacity change from 0 to 512 [ 624.944083][T19382] EXT4-fs: Ignoring removed oldalloc option [ 624.981254][T19384] Process accounting resumed [ 625.015445][T19382] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.5450: Parent and EA inode have the same ino 15 [ 625.162036][T19382] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.5450: Parent and EA inode have the same ino 15 [ 625.227431][T17721] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 625.258495][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.259531][T19382] EXT4-fs (loop0): 1 orphan inode deleted [ 625.332241][T19382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.458210][T19394] block nbd1: shutting down sockets [ 625.570958][T19397] loop3: detected capacity change from 0 to 1024 [ 625.596948][T15149] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.757777][T19403] loop5: detected capacity change from 0 to 128 [ 625.773950][ T11] hfsplus: b-tree write err: -5, ino 4 [ 625.838373][T19403] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 625.943186][T19411] loop3: detected capacity change from 0 to 512 [ 625.967577][T19403] ext4 filesystem being mounted at /981/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 625.977623][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.978200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.079010][T19419] loop2: detected capacity change from 0 to 512 [ 626.084672][T19411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.086209][T19419] EXT4-fs: Ignoring removed oldalloc option [ 626.123438][T19419] EXT4-fs (loop2): Invalid log block size: 4294901761 [ 626.189509][T19419] loop2: detected capacity change from 0 to 4096 [ 626.194757][T19411] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 626.241294][T19424] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 626.256618][ T5295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.391976][T19427] loop4: detected capacity change from 0 to 256 [ 626.404689][ T5229] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 626.447838][T19427] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 626.465906][T11726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.557153][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.083787][T19456] loop1: detected capacity change from 0 to 512 [ 627.086187][ T3959] net_ratelimit: 3 callbacks suppressed [ 627.086204][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.105180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.152009][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.160759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.175565][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.184953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.228972][ T5243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.255628][T19456] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 627.274961][T19456] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 627.325701][T19456] System zones: 0-1, 15-15, 18-18, 34-34 [ 627.365932][T19456] EXT4-fs (loop1): orphan cleanup on readonly fs [ 627.392667][T19456] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 627.441113][T19456] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 627.471321][T19472] loop3: detected capacity change from 0 to 4096 [ 627.483063][T19456] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 627.515012][T19456] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.5481: bad orphan inode 16 [ 627.561125][T19456] ext4_test_bit(bit=15, block=18) = 1 [ 627.566558][T19456] is_bad_inode(inode)=0 [ 627.589262][T19456] NEXT_ORPHAN(inode)=0 [ 627.593770][T19456] max_ino=32 [ 627.597174][T19456] i_nlink=2 [ 627.633373][T19456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 627.769469][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.778557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.787666][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.842227][T14854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.117923][T19451] loop5: detected capacity change from 0 to 32768 [ 628.166999][T19451] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5479 (19451) [ 628.240380][T19451] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 628.270290][T19451] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 628.297025][T19451] BTRFS info (device loop5): using free-space-tree [ 628.345407][ T5296] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 628.359397][T19494] loop3: detected capacity change from 0 to 1024 [ 628.416504][T19494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.436488][T19473] loop2: detected capacity change from 0 to 32768 [ 628.448215][T19473] BTRFS: device /dev/loop2 (7:2) using temp-fsid 570af07b-478f-468c-990e-b82b2e6071a0 [ 628.460921][T19473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5489 (19473) [ 628.467741][T19494] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 628.504279][T19473] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 628.506297][T19494] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 628.532774][T19473] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 628.547237][ T5296] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.558163][ T5295] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 628.576183][ T5296] usb 2-1: config 0 interface 0 has no altsetting 0 [ 628.583331][ T5296] usb 2-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 628.594330][T19473] BTRFS info (device loop2): using free-space-tree [ 628.602238][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.613671][ T5296] usb 2-1: config 0 descriptor?? [ 628.631384][T19518] binder: 19515:19518 ioctl c018620c 200005c0 returned -1 [ 628.694359][ T5229] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 628.708673][T11726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.731472][ T5295] usb 5-1: Using ep0 maxpacket: 32 [ 628.741951][ T5295] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 628.753163][ T5295] usb 5-1: config 0 has no interface number 0 [ 628.761434][ T5295] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 628.773260][ T5295] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 628.788565][ T5295] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 628.830840][ T5295] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 628.843953][ T5295] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 628.856806][ T5295] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 628.878713][ T5295] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 628.895632][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.911530][ T5295] usb 5-1: Product: syz [ 628.916758][ T5295] usb 5-1: Manufacturer: syz [ 628.929483][ T5295] usb 5-1: SerialNumber: syz [ 628.938947][ T5295] usb 5-1: config 0 descriptor?? [ 628.951883][T19492] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 628.968366][T19492] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 629.056435][ T5296] wacom 0003:056A:032B.0032: unknown main item tag 0x0 [ 629.146432][ T5296] wacom 0003:056A:032B.0032: hidraw0: USB HID v0.00 Device [HID 056a:032b] on usb-dummy_hcd.1-1/input0 [ 629.176745][T17721] BTRFS info (device loop2): last unmount of filesystem 570af07b-478f-468c-990e-b82b2e6071a0 [ 629.241225][ T5295] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 629.267311][ T5296] usb 2-1: USB disconnect, device number 36 [ 629.281526][T19540] loop0: detected capacity change from 0 to 128 [ 629.383399][T19540] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 629.409397][T19543] loop5: detected capacity change from 0 to 64 [ 629.435020][ T5295] etas_es58x 5-1:0.219: could not parse product info: 'ė†¹' [ 629.527745][T19545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5509'. [ 629.571452][T15149] sysv_free_block: trying to free block not in datazone [ 629.586763][T19545] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5509'. [ 629.590897][T15149] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 629.621111][T19545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5509'. [ 629.716247][ T5295] usb 5-1: USB disconnect, device number 31 [ 629.736751][ T5295] etas_es58x 5-1:0.219: Disconnecting syz syz [ 629.808891][T19549] netlink: 19 bytes leftover after parsing attributes in process `syz.0.5510'. [ 629.884903][T19552] loop2: detected capacity change from 0 to 8 [ 629.897599][T19552] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 629.931827][T19553] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5512'. [ 629.969013][T19553] netem: invalid attributes len -24 [ 629.973194][T19556] loop1: detected capacity change from 0 to 512 [ 629.974238][T19553] netem: change failed [ 630.001714][T19556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 630.023140][T19556] EXT4-fs (loop1): 1 truncate cleaned up [ 630.031450][T19556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.044789][T19560] loop0: detected capacity change from 0 to 128 [ 630.162910][T19560] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 630.182865][T19560] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.358294][T14854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.554120][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5520'. [ 630.576579][T15149] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 630.606302][T19573] loop5: detected capacity change from 0 to 1024 [ 630.774561][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5523'. [ 631.005298][T19592] loop1: detected capacity change from 0 to 256 [ 631.081764][ T29] audit: type=1326 audit(1724605152.567:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.4.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 631.173499][ T29] audit: type=1326 audit(1724605152.567:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.4.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 631.270829][ T29] audit: type=1326 audit(1724605152.599:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.4.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 631.335683][ T29] audit: type=1326 audit(1724605152.599:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.4.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 631.436515][T19608] loop1: detected capacity change from 0 to 128 [ 631.486000][T19608] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 631.559878][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5540'. [ 631.583939][ T2549] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 631.629665][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 631.646579][T19614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5541'. [ 631.881636][ T2549] kworker/u8:8: attempt to access beyond end of device [ 631.881636][ T2549] loop1: rw=1, sector=353, nr_sectors = 688 limit=128 [ 631.924475][ T1115] net_ratelimit: 3 callbacks suppressed [ 631.924497][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.938545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.958693][ T2549] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 632.165194][ T5297] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 632.364950][T19593] loop5: detected capacity change from 0 to 32768 [ 632.383415][T19593] XFS: attr2 mount option is deprecated. [ 632.402022][ T5297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.427272][T19626] loop1: detected capacity change from 0 to 16 [ 632.463741][ T5297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.474272][ T5297] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.485858][T19626] erofs: (device loop1): mounted with root inode @ nid 36. [ 632.487245][ T5297] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 632.505413][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.512316][T19593] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 632.516223][ T5297] usb 3-1: config 0 descriptor?? [ 632.523508][ T2549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.535550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.556810][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.565141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.624956][T19605] loop4: detected capacity change from 0 to 40427 [ 632.681152][T19605] F2FS-fs (loop4): Found nat_bits in checkpoint [ 632.729187][T19593] XFS (loop5): Ending clean mount [ 632.769757][T19593] XFS (loop5): Quotacheck needed: Please wait. [ 632.818533][T19605] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 632.937557][ T5297] glorious 0003:258A:0036.0033: unknown main item tag 0x0 [ 632.986446][T19593] XFS (loop5): Quotacheck: Done. [ 633.013031][ T5297] glorious 0003:258A:0036.0033: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.2-1/input0 [ 633.122515][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.130682][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.139499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.147831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.162053][ T5294] usb 3-1: USB disconnect, device number 32 [ 633.230369][ T5229] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 633.581296][T19621] loop3: detected capacity change from 0 to 40427 [ 633.630646][T19621] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 633.637906][T19621] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 633.677275][T19621] F2FS-fs (loop3): invalid crc value [ 633.765395][T19621] F2FS-fs (loop3): Found nat_bits in checkpoint [ 633.962484][T19621] F2FS-fs (loop3): Start checkpoint disabled! [ 633.976826][T19621] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 633.994636][T19621] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 634.035383][T19644] loop0: detected capacity change from 0 to 32768 [ 634.053046][T19644] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5549 (19644) [ 634.098520][T19644] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 634.119535][T19644] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 634.146716][T19644] BTRFS info (device loop0): using free-space-tree [ 634.188167][ T5294] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 634.365216][ T5294] usb 3-1: Using ep0 maxpacket: 16 [ 634.372653][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.393145][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.411550][ T5294] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 634.413812][ T5296] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 634.420757][ T5294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.429696][T15149] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 634.462023][ T5294] usb 3-1: config 0 descriptor?? [ 634.535534][ T35] kworker/u8:2: attempt to access beyond end of device [ 634.535534][ T35] loop3: rw=2049, sector=40960, nr_sectors = 56 limit=40427 [ 634.573928][ T35] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 634.602086][ T35] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 634.616630][ T35] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 634.623598][ T35] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 634.653829][ T5296] usb 6-1: Using ep0 maxpacket: 16 [ 634.653860][ T35] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 634.668392][ T5296] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.689712][ T5296] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 634.709358][ T35] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 634.741345][ T35] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 634.765629][ T5296] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 634.827440][ T5296] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 634.867541][ T5296] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 634.901383][ T5296] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.912704][ T5294] playstation 0003:054C:05C4.0034: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 634.942523][ T5296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.950542][ T5296] usb 6-1: Product: syz [ 635.007869][ T5296] usb 6-1: Manufacturer: syz [ 635.012517][ T5296] usb 6-1: SerialNumber: syz [ 635.086005][ T5294] playstation 0003:054C:05C4.0034: Invalid byte count transferred, expected 16 got 0 [ 635.138772][ T5294] playstation 0003:054C:05C4.0034: Failed to retrieve DualShock4 pairing info: -22 [ 635.185473][ T5294] playstation 0003:054C:05C4.0034: Failed to get MAC address from DualShock4 [ 635.224556][T19679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5559'. [ 635.231972][ T5294] playstation 0003:054C:05C4.0034: Failed to create dualshock4. [ 635.259369][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5559'. [ 635.271888][T19658] loop4: detected capacity change from 0 to 40427 [ 635.272694][ T5294] playstation 0003:054C:05C4.0034: probe with driver playstation failed with error -22 [ 635.280900][ T5296] cdc_ncm 6-1:1.0: bind() failure [ 635.322661][ T5296] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 635.329341][ T5294] usb 3-1: USB disconnect, device number 33 [ 635.340448][T19658] F2FS-fs (loop4): Found nat_bits in checkpoint [ 635.379319][ T5296] cdc_ncm 6-1:1.1: bind() failure [ 635.446756][ T5296] usb 6-1: USB disconnect, device number 37 [ 635.556997][T19658] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 635.678272][T11534] syz-executor: attempt to access beyond end of device [ 635.678272][T11534] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 635.702789][T11534] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 635.804074][T19687] loop3: detected capacity change from 0 to 2048 [ 635.889783][T19687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 635.992429][ T29] audit: type=1804 audit(1724605157.835:297): pid=19687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5556" name="/newroot/549/file0/file0/file0" dev="loop3" ino=1313 res=1 errno=0 [ 636.422820][T19701] loop2: detected capacity change from 0 to 512 [ 636.520681][T19701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 636.520989][T19705] netlink: 'syz.5.5569': attribute type 1 has an invalid length. [ 636.541768][T19701] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.930125][T17721] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 636.986032][T17721] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 637.023187][T17721] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz-executor: Failed to acquire dquot type 0 [ 637.058121][ T29] audit: type=1400 audit(1724605158.972:298): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=19709 comm="syz.4.5561" [ 637.066942][T19699] loop3: detected capacity change from 0 to 32768 [ 637.300126][ T11] net_ratelimit: 4 callbacks suppressed [ 637.300148][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.314514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.327570][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.336065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.401716][ T8] kernel write not supported for file /amidi2 (pid: 8 comm: kworker/0:0) [ 637.406131][T19699] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 637.601991][T19699] XFS (loop3): Ending clean mount [ 637.619962][T17721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 637.867696][T11726] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 637.888762][ T2549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.897481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.031899][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.485663][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.492013][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.494428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.515233][ T2549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.523574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.655579][T19740] tun0: tun_chr_ioctl cmd 1074025694 [ 638.721738][T19743] loop5: detected capacity change from 0 to 512 [ 638.749006][T19743] EXT4-fs: Ignoring removed mblk_io_submit option [ 638.760047][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.778818][T19743] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 638.809478][T19743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 638.829094][T19743] System zones: 1-12 [ 638.858349][T19743] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.5584: corrupted in-inode xattr: e_value size too large [ 638.897326][T19743] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5584: couldn't read orphan inode 15 (err -117) [ 638.942463][ T5297] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 638.983454][T19743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.028936][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.125020][T16472] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 639.175185][T16472] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 639.184396][ T5297] usb 4-1: Using ep0 maxpacket: 8 [ 639.191470][T16472] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 639.202517][ T5297] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 639.211035][ T5297] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 639.221417][T16472] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 639.228478][ T5297] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 639.238071][ T5297] usb 4-1: config 250 has no interface number 0 [ 639.242384][ T5229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.244835][ T5297] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 639.265392][ T5297] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 639.277683][ T5297] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 639.288204][T16472] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 639.295255][ T5297] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 639.306411][ T5297] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 639.320951][T16472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 639.329151][ T5297] usb 4-1: config 250 interface 228 has no altsetting 0 [ 639.338620][ T5297] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 639.358222][ T5297] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 639.372555][T16471] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 639.379801][ T5297] usb 4-1: Product: syz [ 639.379826][ T5297] usb 4-1: SerialNumber: syz [ 639.384921][ T5297] hub 4-1:250.228: bad descriptor, ignoring hub [ 639.395212][ T5297] hub 4-1:250.228: probe with driver hub failed with error -5 [ 639.398552][T16471] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 639.422522][T16471] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 639.450995][T16471] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 639.467852][T16471] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 639.469412][T19755] loop0: detected capacity change from 0 to 4096 [ 639.482654][T16471] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 639.582630][T19759] loop5: detected capacity change from 0 to 128 [ 639.584744][T19755] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 639.667101][ T5297] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 639.704125][ T11] bridge_slave_1: left allmulticast mode [ 639.743150][ T11] bridge_slave_1: left promiscuous mode [ 639.745670][T19755] ntfs3: loop0: failed to convert "c46c" to macturkish [ 639.750965][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.823312][ T11] bridge_slave_0: left allmulticast mode [ 639.846031][ T11] bridge_slave_0: left promiscuous mode [ 639.853362][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.158578][ T5335] usb 4-1: USB disconnect, device number 38 [ 640.190935][ T5335] usblp0: removed [ 640.496006][T19757] loop4: detected capacity change from 0 to 32768 [ 641.210287][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.223639][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.246325][ T11] bond0 (unregistering): Released all slaves [ 641.472826][T19780] input: syz0 as /devices/virtual/input/input66 [ 641.479656][T16472] Bluetooth: hci4: command tx timeout [ 641.695123][T19784] loop5: detected capacity change from 0 to 512 [ 641.729761][T19784] EXT4-fs: Ignoring removed i_version option [ 641.750714][T19784] EXT4-fs: Ignoring removed nobh option [ 641.780772][T19784] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 641.826415][T19784] EXT4-fs (loop5): 1 truncate cleaned up [ 641.834409][T19784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.046080][ T5229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.144633][ T11] hsr_slave_0: left promiscuous mode [ 642.177176][ T11] hsr_slave_1: left promiscuous mode [ 642.184296][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.202306][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.211114][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.220571][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.283369][ T11] veth0_macvtap: left promiscuous mode [ 642.307319][ T11] veth1_vlan: left promiscuous mode [ 642.312684][ T11] veth0_vlan: left promiscuous mode [ 642.670725][ T35] net_ratelimit: 4 callbacks suppressed [ 642.670752][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.684479][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.692622][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.700806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.708937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.717396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.057491][T19803] loop5: detected capacity change from 0 to 1764 [ 643.154912][T19803] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 643.318407][T19807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.406064][T16472] Bluetooth: hci4: command tx timeout [ 643.854270][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.862881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.892424][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.223192][T16471] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 644.235203][T16471] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 644.244328][T16471] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 644.254068][T16471] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 644.266441][T16471] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 644.282763][T16471] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 644.564171][T19825] loop4: detected capacity change from 0 to 2048 [ 644.599307][T19826] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 644.649608][T19826] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 644.667248][T19826] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 644.683284][T19826] Remounting filesystem read-only [ 644.688406][ T2549] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 644.695587][ T2549] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 644.702970][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.712052][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.726466][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.735562][ T2549] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 644.742333][ T2549] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 644.750194][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.759141][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.768421][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.771272][ T11] team0 (unregistering): Port device team_slave_1 removed [ 644.777443][ T2549] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 644.777469][ T2549] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 644.777492][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.777516][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.777546][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.777599][ T2549] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 644.777621][ T2549] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 644.777644][ T2549] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 644.777738][ T2549] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 644.777762][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.777792][ T2549] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 644.777816][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.777841][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.777865][ T2549] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 644.777887][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.777934][ T2549] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 644.918977][ T2549] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 644.926359][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.935313][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.944267][ T2549] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.953397][T19825] NILFS (loop4): mounting fs with errors [ 644.968799][T19825] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 644.989314][T19825] Remounting filesystem read-only [ 644.994428][T19825] NILFS (loop4): error -5 reading inode: ino=18 [ 645.000777][T19825] NILFS (loop4): cannot mark inode dirty (ino=18): error -5 loading inode block [ 645.036285][ T11] team0 (unregistering): Port device team_slave_0 removed [ 645.049936][T11534] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 645.061514][T11534] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 645.077443][T11534] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 645.085864][T11534] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 645.093440][T11534] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 645.102150][T11534] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 645.344769][T16471] Bluetooth: hci4: command tx timeout [ 646.248060][T16471] Bluetooth: hci6: command tx timeout [ 646.356424][T19749] chnl_net:caif_netlink_parms(): no params data found [ 646.676943][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5635'. [ 646.715983][T19866] kernel profiling enabled (shift: 0) [ 647.094780][T19820] chnl_net:caif_netlink_parms(): no params data found [ 647.137279][T19749] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.145944][T19749] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.170180][T19749] bridge_slave_0: entered allmulticast mode [ 647.194944][T19749] bridge_slave_0: entered promiscuous mode [ 647.219449][T19749] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.237084][T19749] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.252181][T19749] bridge_slave_1: entered allmulticast mode [ 647.260197][T19749] bridge_slave_1: entered promiscuous mode [ 647.286314][T16471] Bluetooth: hci4: command tx timeout [ 647.454299][T19749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.484069][T19749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.511823][ T2549] net_ratelimit: 7 callbacks suppressed [ 647.511853][ T2549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.525986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.683996][T19891] loop0: detected capacity change from 0 to 64 [ 647.763663][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.029081][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.037208][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.045711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.054069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.178562][T16471] Bluetooth: hci6: command tx timeout [ 648.219110][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.295586][T19749] team0: Port device team_slave_0 added [ 648.330314][T19749] team0: Port device team_slave_1 added [ 648.541054][T19866] syz.3.5634: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 648.571615][T19820] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.581444][T19820] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.599238][T19866] CPU: 0 UID: 0 PID: 19866 Comm: syz.3.5634 Not tainted 6.11.0-rc5-syzkaller #0 [ 648.608323][T19866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 648.618406][T19866] Call Trace: [ 648.621695][T19866] [ 648.624640][T19866] dump_stack_lvl+0x241/0x360 [ 648.629348][T19866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.632407][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.634549][T19866] ? __pfx__printk+0x10/0x10 [ 648.642945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.647154][T19866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.660892][T19866] ? __rcu_read_unlock+0xa1/0x110 [ 648.665945][T19866] warn_alloc+0x278/0x410 [ 648.670316][T19866] ? __pfx_warn_alloc+0x10/0x10 [ 648.675294][T19866] ? profile_init+0xb1/0x100 [ 648.679906][T19866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.685571][T19866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.691320][T19866] ? __get_vm_area_node+0x23d/0x270 [ 648.696586][T19866] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 648.702508][T19866] ? _printk+0xd5/0x120 [ 648.706736][T19866] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 648.711065][T19820] bridge_slave_0: entered allmulticast mode [ 648.713147][T19866] ? rcu_is_watching+0x15/0xb0 [ 648.723799][T19866] ? rcu_is_watching+0x15/0xb0 [ 648.728688][T19866] ? profile_init+0xb1/0x100 [ 648.730282][T19820] bridge_slave_0: entered promiscuous mode [ 648.733288][T19866] ? __pfx_sysfs_kf_write+0x10/0x10 [ 648.740085][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 648.744230][T19866] vzalloc_noprof+0x79/0x90 [ 648.753810][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 648.754919][T19866] ? profile_init+0xb1/0x100 [ 648.765799][T19866] profile_init+0xb1/0x100 [ 648.770254][T19866] profiling_store+0x6c/0xf0 [ 648.774896][T19866] kernfs_fop_write_iter+0x3a3/0x500 [ 648.780229][T19866] vfs_write+0xa74/0xc90 [ 648.784511][T19866] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 648.790357][T19866] ? __pfx_vfs_write+0x10/0x10 [ 648.795148][T19866] ? do_futex+0x392/0x560 [ 648.795282][T19893] loop0: detected capacity change from 0 to 32768 [ 648.799508][T19866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.811521][T19866] ksys_write+0x1a0/0x2c0 [ 648.815881][T19866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.821553][T19866] ? __pfx_ksys_write+0x10/0x10 [ 648.826433][T19866] ? do_syscall_64+0x100/0x230 [ 648.831220][T19866] ? do_syscall_64+0xb6/0x230 [ 648.835922][T19866] do_syscall_64+0xf3/0x230 [ 648.840457][T19866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.846379][T19866] RIP: 0033:0x7f976d779e79 [ 648.850810][T19866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.868036][T19893] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5643 (19893) [ 648.870514][T19866] RSP: 002b:00007f976e4ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 648.891785][T19866] RAX: ffffffffffffffda RBX: 00007f976d915f80 RCX: 00007f976d779e79 [ 648.899779][T19866] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000003 [ 648.907772][T19866] RBP: 00007f976d7e793e R08: 0000000000000000 R09: 0000000000000000 [ 648.915766][T19866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.923758][T19866] R13: 0000000000000000 R14: 00007f976d915f80 R15: 00007ffe51ee05b8 [ 648.931772][T19866] [ 648.956312][T19866] Mem-Info: [ 648.959467][T19866] active_anon:10197 inactive_anon:0 isolated_anon:0 [ 648.959467][T19866] active_file:16895 inactive_file:39334 isolated_file:0 [ 648.959467][T19866] unevictable:768 dirty:485 writeback:0 [ 648.959467][T19866] slab_reclaimable:9673 slab_unreclaimable:111210 [ 648.959467][T19866] mapped:24792 shmem:5387 pagetables:684 [ 648.959467][T19866] sec_pagetables:0 bounce:0 [ 648.959467][T19866] kernel_misc_reclaimable:0 [ 648.959467][T19866] free:1310754 free_pcp:1274 free_cma:0 [ 649.023107][T19893] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 649.023208][T19866] Node 0 active_anon:38832kB inactive_anon:0kB active_file:67580kB inactive_file:157228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99168kB dirty:1940kB writeback:0kB shmem:20088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10160kB pagetables:2708kB sec_pagetables:0kB all_unreclaimable? no [ 649.050841][T19893] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 649.076545][T19866] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 649.127539][T19893] BTRFS info (device loop0): using free-space-tree [ 649.139436][ T29] audit: type=1326 audit(1724605171.922:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19905 comm="syz.4.5649" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3120379e79 code=0x0 [ 649.157103][T19866] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 649.184728][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.234487][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.242885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.251387][T19866] lowmem_reserve[]: 0 2561 2562 0 0 [ 649.256694][T19866] Node 0 DMA32 free:1282720kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:34784kB inactive_anon:0kB active_file:67580kB inactive_file:155896kB unevictable:1536kB writepending:1936kB present:3129332kB managed:2651248kB mlocked:0kB bounce:0kB free_pcp:4928kB local_pcp:904kB free_cma:0kB [ 649.291304][T19866] lowmem_reserve[]: 0 0 1 0 0 [ 649.300516][T19820] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.310653][T19820] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.315787][T19866] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1332kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 649.330309][T19820] bridge_slave_1: entered allmulticast mode [ 649.345757][T19866] lowmem_reserve[]: 0 0 0 0 0 [ 649.370610][T19866] Node 1 Normal free:3949204kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:108kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 649.401137][T19820] bridge_slave_1: entered promiscuous mode [ 649.430026][T19866] lowmem_reserve[]: 0 0 0 0 0 [ 649.434835][T19866] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 649.449001][T19866] Node 0 DMA32: 60*4kB (UME) 77*8kB (ME) 61*16kB (ME) 182*32kB (UME) 234*64kB (UME) 89*128kB (UME) 26*256kB (UME) 21*512kB (UME) 11*1024kB (UME) 6*2048kB (ME) 295*4096kB (UM) = 1283304kB [ 649.468556][T19866] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 649.480388][T19866] Node 1 Normal: 5*4kB (UM) 4*8kB (UM) 16*16kB (UM) 5*32kB (UM) 7*64kB (UM) 8*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (U) 6*2048kB (UM) 959*4096kB (M) = 3949204kB [ 649.498661][T19866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 649.508424][T19866] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 649.517991][T19866] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 649.528468][T19866] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 649.541417][T19866] 61376 total pagecache pages [ 649.546197][T19866] 0 pages in swap cache [ 649.550609][T19866] Free swap = 124716kB [ 649.554850][T19866] Total swap = 124996kB [ 649.559148][T19866] 2097051 pages RAM [ 649.562966][T19866] 0 pages HighMem/MovableOnly [ 649.567883][T19866] 402773 pages reserved [ 649.572060][T19866] 0 pages cma reserved [ 649.585666][T19749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.592765][T19749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.636567][T19749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.712632][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.718667][T15149] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 649.892680][T19820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.968440][T19749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.986910][T19749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.070532][T19749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.103738][T19820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.117299][T16471] Bluetooth: hci6: command tx timeout [ 650.387449][T19820] team0: Port device team_slave_0 added [ 650.580211][T19749] hsr_slave_0: entered promiscuous mode [ 650.622002][T19749] hsr_slave_1: entered promiscuous mode [ 650.647864][T19749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.669240][T19749] Cannot create hsr debugfs directory [ 650.742430][T19820] team0: Port device team_slave_1 added [ 650.943658][T19941] loop3: detected capacity change from 0 to 256 [ 651.054137][T19941] FAT-fs (loop3): Directory bread(block 64) failed [ 651.081945][T19941] FAT-fs (loop3): Directory bread(block 65) failed [ 651.081986][T19820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.108654][T19941] FAT-fs (loop3): Directory bread(block 66) failed [ 651.126792][T19941] FAT-fs (loop3): Directory bread(block 67) failed [ 651.146209][T19941] FAT-fs (loop3): Directory bread(block 68) failed [ 651.151492][T19820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.169984][T19941] FAT-fs (loop3): Directory bread(block 69) failed [ 651.225879][T19941] FAT-fs (loop3): Directory bread(block 70) failed [ 651.232480][T19941] FAT-fs (loop3): Directory bread(block 71) failed [ 651.235278][T19820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.263303][T19941] FAT-fs (loop3): Directory bread(block 72) failed [ 651.287463][T19941] FAT-fs (loop3): Directory bread(block 73) failed [ 651.397169][T19820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.431056][T19820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.524352][T19820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.608793][T19931] loop4: detected capacity change from 0 to 32768 [ 651.621747][ T11] nicvf0: left allmulticast mode [ 651.641111][ T11] nicvf0: left promiscuous mode [ 651.646539][ T11] bridge0: port 2(nicvf0) entered disabled state [ 651.685313][ T11] bridge_slave_0: left allmulticast mode [ 651.691474][ T11] bridge_slave_0: left promiscuous mode [ 651.717707][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.039765][T19946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5660'. [ 652.045128][T19939] loop5: detected capacity change from 0 to 32768 [ 652.056309][T16471] Bluetooth: hci6: command tx timeout [ 652.814494][ T61] net_ratelimit: 2 callbacks suppressed [ 652.814518][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.828567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.407585][ T5243] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 653.415123][ T5243] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 653.427023][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.435456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.443560][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.452318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.498621][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.523652][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.539113][T19953] loop4: detected capacity change from 0 to 40427 [ 653.560772][ T11] bond0 (unregistering): Released all slaves [ 653.612535][T19953] F2FS-fs (loop4): Found nat_bits in checkpoint [ 653.651350][T19959] loop0: detected capacity change from 0 to 32768 [ 653.738698][T19959] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 653.757381][T19953] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 653.813455][T19959] XFS (loop0): Ending clean mount [ 653.896370][T15149] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 653.956736][T11534] syz-executor: attempt to access beyond end of device [ 653.956736][T11534] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 653.979142][T11534] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 654.008514][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.016668][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.326040][T19820] hsr_slave_0: entered promiscuous mode [ 654.395785][T19820] hsr_slave_1: entered promiscuous mode [ 654.441600][T19820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.459234][T19820] Cannot create hsr debugfs directory [ 654.862514][T19974] loop3: detected capacity change from 0 to 32768 [ 654.905572][T19974] [ 654.905572][T19974] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.905572][T19974] [ 654.997586][T19974] [ 654.997586][T19974] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.997586][T19974] [ 655.034654][T19974] [ 655.034654][T19974] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.034654][T19974] [ 655.054131][T19974] [ 655.054131][T19974] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.054131][T19974] [ 655.065217][T19974] [ 655.065217][T19974] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.065217][T19974] [ 655.102375][T19974] [ 655.102375][T19974] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.102375][T19974] [ 655.174508][ T11] hsr_slave_0: left promiscuous mode [ 655.192747][ T112] [ 655.192747][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.192747][ T112] [ 655.218025][ T11] hsr_slave_1: left promiscuous mode [ 655.218550][T19974] jfs_rmdir: dtDelete returned -2 [ 655.290204][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.302413][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.344414][T11726] [ 655.344414][T11726] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.344414][T11726] [ 655.358718][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.375441][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.399276][T11726] [ 655.399276][T11726] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.399276][T11726] [ 655.441416][T19978] loop5: detected capacity change from 0 to 32768 [ 655.488937][ T11] veth1_macvtap: left promiscuous mode [ 655.495731][T19978] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 655.513477][ T11] veth0_macvtap: left promiscuous mode [ 655.519265][ T11] veth1_vlan: left promiscuous mode [ 655.541722][ T11] veth0_vlan: left promiscuous mode [ 655.605438][T19978] XFS (loop5): Ending clean mount [ 655.787582][ T5229] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 656.343111][T20001] Falling back ldisc for ttyprintk. [ 656.900560][ T11] team0 (unregistering): Port device team_slave_1 removed [ 656.964017][ T11] team0 (unregistering): Port device team_slave_0 removed [ 657.934083][T20015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.942856][T20015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.995854][T20015] net_ratelimit: 4 callbacks suppressed [ 657.995876][T20015] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 658.189755][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.198312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.769191][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.777353][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.785467][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.794223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.814695][ T2549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.823031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.038299][T19749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 659.138340][T20046] loop3: detected capacity change from 0 to 512 [ 659.172492][T20046] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 659.197071][T20044] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.248374][T19749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 659.267993][T20046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.313115][T19749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 659.346351][T20046] ext4 filesystem being mounted at /570/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 659.382043][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.452607][T19749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 659.712360][T20059] delete_channel: no stack [ 659.742649][T20058] delete_channel: no stack [ 659.750176][T11726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.960202][T20068] loop5: detected capacity change from 0 to 512 [ 659.992502][T20068] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 660.000884][T19749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.031858][T20068] EXT4-fs (loop5): 1 orphan inode deleted [ 660.044084][T20068] EXT4-fs (loop5): 1 truncate cleaned up [ 660.055199][T20068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.188540][ T5229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.281197][T19820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 660.314316][T19820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 660.331465][T19820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 660.363054][T19749] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.384850][T19820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 660.456156][ T3959] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.463395][ T3959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.475472][ T3959] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.482656][ T3959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.946902][T19820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.045803][T19820] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.108274][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.115495][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.197595][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.204826][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.426419][T19820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.478499][T19749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.727939][T19749] veth0_vlan: entered promiscuous mode [ 661.800929][T19749] veth1_vlan: entered promiscuous mode [ 661.804872][T20128] PM: Enabling pm_trace changes system date and time during resume. [ 661.804872][T20128] PM: Correct system time has to be restored manually after resume. [ 661.928999][T19749] veth0_macvtap: entered promiscuous mode [ 661.972129][T19749] veth1_macvtap: entered promiscuous mode [ 662.018711][ T29] audit: type=1326 audit(1724605185.760:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.4.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 662.054833][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.113310][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.119638][ T29] audit: type=1326 audit(1724605185.760:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.4.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 662.148161][T20139] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5735'. [ 662.149610][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.193901][ T29] audit: type=1326 audit(1724605185.824:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.4.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 662.215570][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.232274][ T29] audit: type=1326 audit(1724605185.824:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.4.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 662.255426][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.266086][ T29] audit: type=1326 audit(1724605185.824:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.4.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 662.303766][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.333923][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.360041][ T29] audit: type=1326 audit(1724605185.824:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.4.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 662.384612][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.413560][T19749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.429887][ T29] audit: type=1326 audit(1724605185.824:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.4.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 662.462584][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.476411][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.487020][ T29] audit: type=1326 audit(1724605185.824:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.4.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 662.515256][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.532376][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.547816][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.558519][ T29] audit: type=1326 audit(1724605185.824:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.4.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 662.586263][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.596341][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.609690][ T29] audit: type=1326 audit(1724605185.824:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.4.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3120379e79 code=0x7ffc0000 [ 662.634429][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.654133][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.672196][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.684044][ T5297] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 662.737969][T19749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.790768][T19749] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.821130][T19749] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.829858][T19749] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.839343][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 662.860764][T19749] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.877858][T20124] loop5: detected capacity change from 0 to 32768 [ 662.896509][T20124] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5730 (20124) [ 662.903361][ T5297] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.958518][T20124] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 662.961944][ T5297] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 663.002939][ T5297] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 663.007930][T19820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.012450][ T5297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.030217][ T8] usb 5-1: config index 0 descriptor too short (expected 106, got 36) [ 663.033160][T20124] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 663.039469][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 663.070649][T20124] BTRFS info (device loop5): using free-space-tree [ 663.082807][ T5297] usb 1-1: config 0 descriptor?? [ 663.100721][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33295, setting to 1024 [ 663.115073][ T8] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 663.126781][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.163873][ T2561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.188580][ T8] usb 5-1: config 0 descriptor?? [ 663.205357][ T2561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.322649][ T5294] usb 1-1: USB disconnect, device number 24 [ 663.390358][T19820] veth0_vlan: entered promiscuous mode [ 663.396027][ T2561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.427612][ T2561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.450618][T19820] veth1_vlan: entered promiscuous mode [ 663.548886][ T35] net_ratelimit: 6 callbacks suppressed [ 663.548910][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.563073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.609391][T19820] veth0_macvtap: entered promiscuous mode [ 663.628876][ T2549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.637713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.639724][T19820] veth1_macvtap: entered promiscuous mode [ 663.669394][ T8] corsair 0003:1B1C:1B3E.0035: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 663.704887][ T5229] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 663.765474][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.794115][ T8] usb 5-1: USB disconnect, device number 32 [ 663.821588][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.841131][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.863391][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.884056][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.910285][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.914265][T20177] loop0: detected capacity change from 0 to 128 [ 663.937062][T20177] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 663.937992][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.956971][T20177] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 663.960980][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.976822][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.988644][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.049332][T19820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.074499][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.110424][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.124883][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.138660][ T2561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.147289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.156074][ T2549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.164725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.177375][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.185758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.204261][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.227719][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.246708][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.264597][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.293797][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.312799][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.330411][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.348730][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.372694][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.409045][T19820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.492447][T20183] loop3: detected capacity change from 0 to 1024 [ 664.530037][T19820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.554324][T19820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.573501][T19820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.597843][T19820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.616722][T20183] hfsplus: small dir entry [ 665.067107][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.121778][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.249284][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.281373][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.513272][T20218] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 665.562364][T18049] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 665.778849][T18049] usb 4-1: Using ep0 maxpacket: 16 [ 665.813147][T18049] usb 4-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 665.831502][T18049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.847052][T18049] usb 4-1: Product: syz [ 665.853842][T18049] usb 4-1: Manufacturer: syz [ 665.861888][T18049] usb 4-1: SerialNumber: syz [ 665.881301][T18049] usb 4-1: config 0 descriptor?? [ 666.027201][ T5294] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 666.084744][T18049] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 666.153510][T18049] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 666.164288][T20242] netlink: 'syz.0.5774': attribute type 4 has an invalid length. [ 666.185565][T18049] dib0700: firmware download failed at 7 with -22 [ 666.232211][ T5294] usb 6-1: Using ep0 maxpacket: 8 [ 666.259363][ T5294] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.282251][ T5294] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 666.301997][ T5294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.322543][ T5294] usb 6-1: config 0 descriptor?? [ 666.343513][ T5294] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 666.723094][ T5294] gspca_vc032x: reg_w err -71 [ 666.729443][ T5294] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 666.757271][ T5294] usb 6-1: USB disconnect, device number 38 [ 666.950237][T20240] loop1: detected capacity change from 0 to 32768 [ 667.797921][T20283] loop5: detected capacity change from 0 to 256 [ 667.837088][T20283] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 668.117172][ T5296] usb 4-1: USB disconnect, device number 39 [ 668.280722][T20296] loop2: detected capacity change from 0 to 512 [ 668.356329][T20296] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.5798: corrupted in-inode xattr: invalid ea_ino [ 668.388122][ T61] net_ratelimit: 2 callbacks suppressed [ 668.388143][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.401828][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.409959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.418143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.463184][T20305] loop1: detected capacity change from 0 to 1024 [ 668.490752][T20296] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5798: couldn't read orphan inode 15 (err -117) [ 668.504646][T20296] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.527951][T20305] hfsplus: bad catalog entry type [ 668.569415][T20307] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5801'. [ 668.631851][T19749] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 668.682537][ T3959] hfsplus: b-tree write err: -5, ino 4 [ 668.820970][T20317] loop4: detected capacity change from 0 to 512 [ 668.833247][T20319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5805'. [ 668.853067][T20317] EXT4-fs: Ignoring removed nobh option [ 668.896221][T20317] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 668.933228][T20317] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 668.944519][T20317] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.5806: casefold flag without casefold feature [ 668.975460][T20317] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5806: couldn't read orphan inode 13 (err -117) [ 669.036401][T20317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.051180][T20325] loop1: detected capacity change from 0 to 128 [ 669.068611][T20325] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 669.284416][T19820] sysv_free_block: trying to free block not in datazone [ 669.306306][T11534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.326333][T19820] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 669.505407][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.513707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.542267][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.550671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.559043][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.567806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.100754][T18049] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 670.193580][T20310] loop0: detected capacity change from 0 to 40427 [ 670.220926][T20356] loop5: detected capacity change from 0 to 2048 [ 670.243744][T20310] F2FS-fs (loop0): Found nat_bits in checkpoint [ 670.275081][T20356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.327823][T18049] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 670.350225][T18049] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 670.369172][T18049] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 670.378528][T18049] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.380303][T20310] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 670.391493][T20348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 670.406645][T18049] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 670.430911][T20356] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 670.471253][T20356] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 670.486520][T20356] EXT4-fs (loop5): This should not happen!! Data will be lost [ 670.486520][T20356] [ 670.511839][T20356] EXT4-fs (loop5): Total free blocks count 0 [ 670.517951][T20356] EXT4-fs (loop5): Free/Dirty block details [ 670.529724][T20356] EXT4-fs (loop5): free_blocks=2415919104 [ 670.536396][T20356] EXT4-fs (loop5): dirty_blocks=16 [ 670.543102][T20356] EXT4-fs (loop5): Block reservation details [ 670.553439][T20356] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 670.621167][T15149] syz-executor: attempt to access beyond end of device [ 670.621167][T15149] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 670.654258][T15149] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 670.718915][T18049] usb 3-1: USB disconnect, device number 34 [ 670.742800][ T29] audit: type=1326 audit(1724605195.114:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30eb79e79 code=0x7ffc0000 [ 670.810615][ T5229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.828635][ T29] audit: type=1326 audit(1724605195.114:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30eb79e79 code=0x7ffc0000 [ 670.928825][ T29] audit: type=1326 audit(1724605195.157:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30eb79e79 code=0x7ffc0000 [ 670.984389][ T29] audit: type=1326 audit(1724605195.168:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30eb79e79 code=0x7ffc0000 [ 671.064112][T20373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.093731][ T29] audit: type=1326 audit(1724605195.179:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30eb79e79 code=0x7ffc0000 [ 671.156767][ T29] audit: type=1326 audit(1724605195.179:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30eb79e79 code=0x7ffc0000 [ 671.238840][ T29] audit: type=1326 audit(1724605195.179:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc30eb70e27 code=0x7ffc0000 [ 671.292445][ T29] audit: type=1326 audit(1724605195.179:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc30eb157e9 code=0x7ffc0000 [ 671.362602][ T29] audit: type=1326 audit(1724605195.179:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc30eb70e27 code=0x7ffc0000 [ 671.418530][T20385] team0: Device team_slave_1 failed to change mtu [ 671.448432][ T29] audit: type=1326 audit(1724605195.179:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc30eb157e9 code=0x7ffc0000 [ 671.970884][T20404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5843'. [ 672.000625][T20404] bataNāDž­2žØ_0: renamed from lo (while UP) [ 672.002390][ T5294] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 672.198372][ T5294] usb 2-1: Using ep0 maxpacket: 8 [ 672.228152][ T5294] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 672.236438][ T51] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 672.246070][ T5294] usb 2-1: config 0 has no interface number 0 [ 672.252197][ T5294] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 672.286099][ T5294] usb 2-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 672.309911][ T5294] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 672.336600][T20414] netlink: 'syz.3.5846': attribute type 1 has an invalid length. [ 672.336965][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.363191][ T5294] usb 2-1: config 0 descriptor?? [ 672.367431][T20414] netlink: 9324 bytes leftover after parsing attributes in process `syz.3.5846'. [ 672.374734][ T5294] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 672.392156][T20414] netlink: 'syz.3.5846': attribute type 1 has an invalid length. [ 672.412460][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 672.420890][T20414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5846'. [ 672.426329][ T51] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 672.459026][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.475080][ T51] usb 1-1: Product: syz [ 672.479560][ T51] usb 1-1: Manufacturer: syz [ 672.484170][ T51] usb 1-1: SerialNumber: syz [ 672.503049][ T51] usb 1-1: config 0 descriptor?? [ 672.543232][ T51] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 672.569474][ T5243] usb 2-1: USB disconnect, device number 37 [ 672.730586][T20392] loop4: detected capacity change from 0 to 32768 [ 672.746196][T20392] XFS: ikeep mount option is deprecated. [ 672.753507][T20392] XFS: ikeep mount option is deprecated. [ 672.809408][T20392] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 672.828874][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5850'. [ 673.049812][T20392] XFS (loop4): Ending clean mount [ 673.119907][ T51] gspca_vc032x: reg_r err -71 [ 673.127421][ T51] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 673.205090][ T51] usb 1-1: USB disconnect, device number 25 [ 673.242982][T11534] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 673.684217][ T3959] net_ratelimit: 5 callbacks suppressed [ 673.684239][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.698181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.707744][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.716481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.835123][T20465] loop1: detected capacity change from 0 to 1024 [ 673.841816][T20464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5866'. [ 673.871234][T20465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.914112][T20465] fscrypt (loop1, inode 18): Unsupported encryption flags (0x10) [ 674.011609][T19820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.052095][T20475] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5871'. [ 674.184094][T20478] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5872'. [ 674.329148][T20479] tap0: tun_chr_ioctl cmd 1074025677 [ 674.344031][T20479] tap0: linktype set to 774 [ 674.449544][T20492] loop0: detected capacity change from 0 to 1024 [ 674.457664][T20494] tap0: tun_chr_ioctl cmd 1074025681 [ 674.554095][T20492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.636793][T20502] loop2: detected capacity change from 0 to 64 [ 674.648128][T20502] hfs: gid requires an argument [ 674.653335][T20502] hfs: unable to parse mount options [ 674.669326][T20502] loop2: detected capacity change from 0 to 128 [ 674.676439][T20502] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 674.696726][T20502] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 674.698374][T15149] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.867489][T20507] loop3: detected capacity change from 0 to 1024 [ 674.875038][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.883585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.893296][ T3959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.901580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.911357][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.919823][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.046917][T20507] hfsplus: catalog searching failed [ 675.207627][ T2549] hfsplus: b-tree write err: -5, ino 3 [ 675.308971][T20516] loop4: detected capacity change from 0 to 4096 [ 675.342693][T20522] loop3: detected capacity change from 0 to 256 [ 675.354113][T20516] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 675.368799][T20522] exfat: Deprecated parameter 'utf8' [ 675.384097][T20522] exfat: Deprecated parameter 'namecase' [ 675.442556][T20522] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 675.478933][T20524] loop2: detected capacity change from 0 to 1024 [ 675.485821][T20516] ntfs3: loop4: mft corrupted [ 675.491603][T20516] ntfs3: loop4: Failed to load $Extend (-22). [ 675.499500][T20498] loop1: detected capacity change from 0 to 32768 [ 675.516964][T20516] ntfs3: loop4: Failed to initialize $Extend. [ 675.521466][T20524] hfsplus: request for non-existent node 3 in B*Tree [ 675.530578][T20498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5881 (20498) [ 675.550796][T20524] hfsplus: request for non-existent node 3 in B*Tree [ 675.581284][T20524] hfsplus: request for non-existent node 4 in B*Tree [ 675.590497][T20498] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 675.591470][T20516] ntfs3: loop4: ino=1e, "file1" failed to parse mft record [ 675.601201][T20524] hfsplus: request for non-existent node 4 in B*Tree [ 675.615716][T20498] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 675.626282][T20498] BTRFS info (device loop1): using free-space-tree [ 675.633111][T20516] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 675.663438][T20516] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 675.944783][T20549] pimreg: entered allmulticast mode [ 675.956465][T20545] pimreg: left allmulticast mode [ 675.976378][ T5294] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 676.192166][ T5243] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 676.200722][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 676.217515][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 676.250147][ T5294] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 676.298547][ T5294] usb 4-1: New USB device found, idVendor=18ef, idProduct=e030, bcdDevice=c7.b9 [ 676.304398][T19820] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 676.309336][ T5294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.346811][ T5294] usb 4-1: Product: syz [ 676.351016][ T5294] usb 4-1: Manufacturer: syz [ 676.355629][ T5294] usb 4-1: SerialNumber: syz [ 676.376053][ T5294] usb 4-1: config 0 descriptor?? [ 676.386179][ T5294] cp210x 4-1:0.0: cp210x converter detected [ 676.417332][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.429441][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.440838][ T5243] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 676.450983][ T5243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.509835][ T5243] usb 5-1: config 0 descriptor?? [ 676.607220][ T5294] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 676.614946][ T5294] cp210x 4-1:0.0: querying part number failed [ 676.662101][ T5294] usb 4-1: cp210x converter now attached to ttyUSB0 [ 676.685605][ T5294] usb 4-1: USB disconnect, device number 40 [ 676.704849][ T5294] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 676.768306][ T5294] cp210x 4-1:0.0: device disconnected [ 677.037769][T20564] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 677.040324][ T5243] steelseries 0003:1038:12B6.0036: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 677.339287][T20572] loop5: detected capacity change from 0 to 1024 [ 677.455840][T20572] hfsplus: xattr search failed [ 677.511301][ T8] usb 5-1: USB disconnect, device number 33 [ 677.575212][T20552] loop0: detected capacity change from 0 to 40427 [ 677.616450][T20552] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 677.641834][T20552] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 677.655330][T20583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5912'. [ 677.677173][T20583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5912'. [ 677.697001][T20552] F2FS-fs (loop0): invalid crc value [ 677.725694][T20552] F2FS-fs (loop0): Found nat_bits in checkpoint [ 677.883957][T20589] loop1: detected capacity change from 0 to 1764 [ 677.973978][T20552] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 677.996992][T20552] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 678.137286][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 678.137308][ T29] audit: type=1800 audit(1724605203.053:360): pid=20552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5898" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 678.228783][T20552] syz.0.5898: attempt to access beyond end of device [ 678.228783][T20552] loop0: rw=2049, sector=77824, nr_sectors = 848 limit=40427 [ 678.430609][T20609] loop2: detected capacity change from 0 to 2048 [ 678.466395][T15149] syz-executor: attempt to access beyond end of device [ 678.466395][T15149] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 678.515405][T20609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.517139][T20615] netlink: 'syz.5.5926': attribute type 1 has an invalid length. [ 678.529329][T15149] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 678.555486][T20620] loop3: detected capacity change from 0 to 256 [ 678.579795][T20615] netlink: 9336 bytes leftover after parsing attributes in process `syz.5.5926'. [ 678.590801][T20615] netlink: 'syz.5.5926': attribute type 1 has an invalid length. [ 678.601582][T20615] netlink: 'syz.5.5926': attribute type 1 has an invalid length. [ 678.636007][T20609] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 678.674761][T20609] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 678.704818][T20609] EXT4-fs (loop2): This should not happen!! Data will be lost [ 678.704818][T20609] [ 678.715640][T20620] FAT-fs (loop3): Directory bread(block 64) failed [ 678.722188][T20620] FAT-fs (loop3): Directory bread(block 65) failed [ 678.748007][T20620] FAT-fs (loop3): Directory bread(block 66) failed [ 678.757894][T20609] EXT4-fs (loop2): Total free blocks count 0 [ 678.769716][T20620] FAT-fs (loop3): Directory bread(block 67) failed [ 678.776354][T20620] FAT-fs (loop3): Directory bread(block 68) failed [ 678.788667][T20609] EXT4-fs (loop2): Free/Dirty block details [ 678.796596][T20627] netlink: 'syz.4.5931': attribute type 8 has an invalid length. [ 678.805632][T20609] EXT4-fs (loop2): free_blocks=2415919104 [ 678.822898][T20620] FAT-fs (loop3): Directory bread(block 69) failed [ 678.830164][T20609] EXT4-fs (loop2): dirty_blocks=48 [ 678.840029][T20620] FAT-fs (loop3): Directory bread(block 70) failed [ 678.846998][T20609] EXT4-fs (loop2): Block reservation details [ 678.878492][T20620] FAT-fs (loop3): Directory bread(block 71) failed [ 678.886674][T20609] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 678.903671][T20620] FAT-fs (loop3): Directory bread(block 72) failed [ 678.914538][T20621] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 678.931689][T20620] FAT-fs (loop3): Directory bread(block 73) failed [ 679.038818][T20631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5932'. [ 679.054712][ T2549] net_ratelimit: 4 callbacks suppressed [ 679.054730][ T2549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.069311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.105897][T20635] block nbd4: shutting down sockets [ 679.482410][T20647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5940'. [ 679.581602][T20643] ./file0: Can't open blockdev [ 679.683043][T20651] loop1: detected capacity change from 0 to 256 [ 679.788204][ T8] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 680.002867][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 680.037519][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.074951][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.110746][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 680.128109][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.149793][ T29] audit: type=1326 audit(1724605205.220:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20666 comm="syz.0.5947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb253379e79 code=0x0 [ 680.158750][ T8] usb 3-1: Product: syz [ 680.188202][ T8] usb 3-1: Manufacturer: syz [ 680.201655][ T8] usb 3-1: SerialNumber: syz [ 680.220743][ T8] usb 3-1: selecting invalid altsetting 1 [ 680.271260][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.279639][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.287815][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.296269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.304627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.312975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.414551][ T8] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 680.434256][ T8] cdc_ncm 3-1:1.0: bind() failure [ 680.474495][ T8] usb 3-1: USB disconnect, device number 35 [ 680.692468][T20684] loop4: detected capacity change from 0 to 16 [ 680.712007][T20684] erofs: (device loop4): erofs_read_superblock: dirblkbits 4 isn't supported [ 680.792922][T18049] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 681.000919][T18049] usb 2-1: config 0 has no interfaces? [ 681.018973][T18049] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e350, bcdDevice=f8.fa [ 681.043406][T18049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.065097][T18049] usb 2-1: config 0 descriptor?? [ 681.135913][T20669] loop3: detected capacity change from 0 to 32768 [ 681.207174][T20669] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 681.328823][ T5243] usb 2-1: USB disconnect, device number 38 [ 681.397753][T20669] XFS (loop3): Ending clean mount [ 681.417917][T20717] loop2: detected capacity change from 0 to 22 [ 681.419315][T20669] XFS (loop3): Quotacheck needed: Please wait. [ 681.448768][ T61] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 681.448932][ T2549] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 681.464765][T20717] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 681.539695][T20717] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 681.589059][T20669] XFS (loop3): Quotacheck: Done. [ 681.722017][T20728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5973'. [ 681.818005][ T5243] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 682.025472][ T5243] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.069786][ T5243] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.099564][ T5243] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 682.118566][ T5243] usb 6-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 682.143642][ T5243] usb 6-1: Product: syz [ 682.179038][T11726] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 682.188142][ T5243] usb 6-1: config 0 descriptor?? [ 780.279794][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 780.286775][ C1] rcu: 0-...!: (1 ticks this GP) idle=1a3c/1/0x4000000000000000 softirq=65408/65409 fqs=1 [ 780.299602][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20749/1:b..l [ 780.307619][ C1] rcu: (detected by 1, t=10502 jiffies, g=105001, q=143 ncpus=2) [ 780.315427][ C1] Sending NMI from CPU 1 to CPUs 0: [ 780.320636][ C0] NMI backtrace for cpu 0 [ 780.320650][ C0] CPU: 0 UID: 0 PID: 20746 Comm: syz.0.5982 Not tainted 6.11.0-rc5-syzkaller #0 [ 780.320674][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 780.320688][ C0] RIP: 0010:rb_erase+0xee/0xe70 [ 780.320727][ C0] Code: 68 10 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 d2 48 89 ef e8 7b 74 4b f6 eb c8 48 89 d8 48 c1 e8 03 <49> bd 00 00 00 00 00 fc ff df 42 80 3c 28 00 74 08 48 89 df e8 59 [ 780.320747][ C0] RSP: 0018:ffffc90000007cc8 EFLAGS: 00000012 [ 780.320766][ C0] RAX: 1ffff1100b939e68 RBX: ffff88805c9cf340 RCX: dffffc0000000000 [ 780.320785][ C0] RDX: 0000000000010000 RSI: ffff8880b922c9d0 RDI: ffff88805c9cf348 [ 780.320802][ C0] RBP: dffffc0000000000 R08: ffffffff8bafebf8 R09: 1ffffffff202fefd [ 780.320820][ C0] R10: dffffc0000000000 R11: fffffbfff202fefe R12: 0000000000000000 [ 780.320837][ C0] R13: 1ffff1100b939e6a R14: 0000000000000000 R15: ffff88805c9cf350 [ 780.320861][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 780.320881][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 780.320897][ C0] CR2: 0000001b2dc1dff8 CR3: 000000007c890000 CR4: 0000000000350ef0 [ 780.320916][ C0] Call Trace: [ 780.320926][ C0] [ 780.320937][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 780.320966][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 780.321003][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 780.321032][ C0] ? nmi_handle+0x2a/0x5a0 [ 780.321069][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 780.321099][ C0] ? nmi_handle+0x151/0x5a0 [ 780.321122][ C0] ? nmi_handle+0x2a/0x5a0 [ 780.321146][ C0] ? rb_erase+0xee/0xe70 [ 780.321178][ C0] ? default_do_nmi+0x63/0x160 [ 780.321208][ C0] ? exc_nmi+0x123/0x1f0 [ 780.321237][ C0] ? end_repeat_nmi+0xf/0x53 [ 780.321272][ C0] ? timerqueue_del+0x48/0x100 [ 780.321300][ C0] ? rb_erase+0xee/0xe70 [ 780.321333][ C0] ? rb_erase+0xee/0xe70 [ 780.321367][ C0] ? rb_erase+0xee/0xe70 [ 780.321400][ C0] [ 780.321408][ C0] [ 780.321417][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 780.321456][ C0] timerqueue_del+0xac/0x100 [ 780.321485][ C0] __hrtimer_run_queues+0x3d0/0xd50 [ 780.321511][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 780.321560][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 780.321586][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.321617][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 780.321656][ C0] hrtimer_interrupt+0x396/0x990 [ 780.321701][ C0] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 780.321741][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 780.321777][ C0] [ 780.321785][ C0] [ 780.321795][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 780.321824][ C0] RIP: 0010:lock_acquire+0xdc/0x550 [ 780.321861][ C0] Code: 08 0f 83 f4 02 00 00 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 e8 f7 17 90 be 08 00 00 00 e8 ec 03 8b 00 48 0f a3 1d 7c 29 a8 0e <73> 16 e8 cd f5 09 00 84 c0 75 0d 80 3d a0 f6 91 0e 00 0f 84 f9 02 [ 780.321881][ C0] RSP: 0018:ffffc9000be273c0 EFLAGS: 00000257 [ 780.321900][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff816fce64 [ 780.321916][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9017f7e8 [ 780.321932][ C0] RBP: ffffc9000be27518 R08: ffffffff9017f7ef R09: 1ffffffff202fefd [ 780.321950][ C0] R10: dffffc0000000000 R11: fffffbfff202fefe R12: 1ffff920017c4e80 [ 780.321968][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffea0001e5e7c0 [ 780.321992][ C0] ? lock_acquire+0xd4/0x550 [ 780.322030][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.322066][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 780.322098][ C0] ? pfn_valid+0xf6/0x450 [ 780.322121][ C0] ? __pfx_lock_release+0x10/0x10 [ 780.322160][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.322190][ C0] ? folio_mark_accessed+0x374/0x1ca0 [ 780.322231][ C0] ? page_ext_get+0x20/0x2a0 [ 780.322267][ C0] page_ext_get+0x3d/0x2a0 [ 780.322302][ C0] ? page_ext_get+0x20/0x2a0 [ 780.322340][ C0] page_table_check_clear+0x4b/0x550 [ 780.322367][ C0] unmap_page_range+0x2b48/0x42c0 [ 780.322423][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 780.322454][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.322490][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.322520][ C0] ? mas_next_slot+0xeab/0xf90 [ 780.322559][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.322590][ C0] ? uprobe_munmap+0x183/0x460 [ 780.322619][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.322650][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 780.322683][ C0] unmap_vmas+0x3cc/0x5f0 [ 780.322717][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 780.322759][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.322790][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 780.322822][ C0] exit_mmap+0x264/0xc80 [ 780.322856][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 780.322878][ C0] ? __asan_memset+0x23/0x50 [ 780.322927][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.322958][ C0] ? uprobe_clear_state+0x277/0x290 [ 780.322981][ C0] ? mm_update_next_owner+0xa4/0x810 [ 780.323004][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 780.323035][ C0] __mmput+0x115/0x390 [ 780.323068][ C0] exit_mm+0x220/0x310 [ 780.323092][ C0] ? __pfx_exit_mm+0x10/0x10 [ 780.323113][ C0] ? taskstats_exit+0x326/0xa60 [ 780.323147][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.323183][ C0] do_exit+0x9b2/0x27f0 [ 780.323207][ C0] ? preempt_schedule_common+0x84/0xd0 [ 780.323244][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.323277][ C0] ? __pfx_do_exit+0x10/0x10 [ 780.323296][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 780.323332][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 780.323370][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 780.323401][ C0] do_group_exit+0x207/0x2c0 [ 780.323429][ C0] __x64_sys_exit_group+0x3f/0x40 [ 780.323452][ C0] x64_sys_call+0x2634/0x2640 [ 780.323486][ C0] do_syscall_64+0xf3/0x230 [ 780.323513][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.323541][ C0] RIP: 0033:0x7fb253379e79 [ 780.323559][ C0] Code: Unable to access opcode bytes at 0x7fb253379e4f. [ 780.323571][ C0] RSP: 002b:00007ffebabef4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 780.323594][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb253379e79 [ 780.323611][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 780.323625][ C0] RBP: 00007ffebabef54c R08: 00007ffebabef5df R09: 00000000000b0158 [ 780.323642][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 780.323656][ C0] R13: 00000000000b0158 R14: 00000000000b00cf R15: 00007ffebabef5a0 [ 780.323686][ C0] [ 780.324630][ C1] task:syz.1.5984 state:R running task stack:24576 pid:20749 tgid:20747 ppid:19820 flags:0x00004000 [ 780.976611][ C1] Call Trace: [ 780.979895][ C1] [ 780.982834][ C1] __schedule+0x1800/0x4a60 [ 780.987363][ C1] ? mark_lock+0x9a/0x350 [ 780.991723][ C1] ? __lock_acquire+0x137a/0x2040 [ 780.996782][ C1] ? __pfx___schedule+0x10/0x10 [ 781.001655][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.007318][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.012986][ C1] ? preempt_schedule+0xe1/0xf0 [ 781.017870][ C1] preempt_schedule_common+0x84/0xd0 [ 781.023266][ C1] preempt_schedule+0xe1/0xf0 [ 781.027965][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 781.033360][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.039018][ C1] preempt_schedule_thunk+0x1a/0x30 [ 781.044235][ C1] _raw_spin_unlock+0x3e/0x50 [ 781.048931][ C1] unmap_page_range+0x3818/0x42c0 [ 781.054011][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 781.059404][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.065058][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.070707][ C1] ? mas_next_slot+0xeab/0xf90 [ 781.075508][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.081159][ C1] ? uprobe_munmap+0x183/0x460 [ 781.085941][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.091587][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 781.096638][ C1] unmap_vmas+0x3cc/0x5f0 [ 781.100995][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 781.105878][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.111529][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 781.117007][ C1] exit_mmap+0x264/0xc80 [ 781.121267][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 781.126036][ C1] ? __asan_memset+0x23/0x50 [ 781.130672][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.136319][ C1] ? uprobe_clear_state+0x277/0x290 [ 781.141525][ C1] ? mm_update_next_owner+0xa4/0x810 [ 781.146816][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 781.152030][ C1] __mmput+0x115/0x390 [ 781.156120][ C1] exit_mm+0x220/0x310 [ 781.160200][ C1] ? __pfx_exit_mm+0x10/0x10 [ 781.164798][ C1] ? taskstats_exit+0x326/0xa60 [ 781.169670][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.175329][ C1] do_exit+0x9b2/0x27f0 [ 781.179509][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.185159][ C1] ? __pfx_do_exit+0x10/0x10 [ 781.189756][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 781.195147][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.200797][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 781.206812][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 781.213256][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 781.218396][ C1] do_group_exit+0x207/0x2c0 [ 781.222993][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 781.228207][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.233853][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 781.239166][ C1] get_signal+0x16a1/0x1740 [ 781.243701][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.249350][ C1] ? __pfx_get_signal+0x10/0x10 [ 781.254226][ C1] arch_do_signal_or_restart+0x96/0x860 [ 781.259794][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 781.265962][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 781.271981][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 781.277731][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 781.283305][ C1] do_syscall_64+0x100/0x230 [ 781.287913][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.293818][ C1] RIP: 0033:0x7fc30eb79e79 [ 781.298239][ C1] RSP: 002b:00007fc30f8d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 781.306669][ C1] RAX: fffffffffffffe00 RBX: 00007fc30ed15f88 RCX: 00007fc30eb79e79 [ 781.314646][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc30ed15f88 [ 781.322627][ C1] RBP: 00007fc30ed15f80 R08: 0000000000000000 R09: 0000000000000000 [ 781.330693][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30ed15f8c [ 781.338667][ C1] R13: 0000000000000000 R14: 00007ffda9de50b0 R15: 00007ffda9de5198 [ 781.346663][ C1] [ 781.349685][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g105001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 781.360974][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 781.370940][ C1] rcu: RCU grace-period kthread stack dump: [ 781.376825][ C1] task:rcu_preempt state:R running task stack:25656 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 781.388576][ C1] Call Trace: [ 781.391860][ C1] [ 781.394797][ C1] __schedule+0x1800/0x4a60 [ 781.399346][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.405003][ C1] ? __pfx___schedule+0x10/0x10 [ 781.409878][ C1] ? __pfx_lock_release+0x10/0x10 [ 781.414921][ C1] ? __asan_memset+0x23/0x50 [ 781.419537][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 781.425362][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 781.431712][ C1] ? schedule+0x90/0x320 [ 781.435978][ C1] schedule+0x14b/0x320 [ 781.440160][ C1] schedule_timeout+0x1be/0x310 [ 781.445028][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 781.450419][ C1] ? __pfx_process_timeout+0x10/0x10 [ 781.455734][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.461385][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 781.466959][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 781.471830][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 781.477065][ C1] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 781.483584][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 781.488886][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 781.494806][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.500455][ C1] ? finish_swait+0xd4/0x1e0 [ 781.505069][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 781.509683][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 781.514896][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 781.520815][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.526464][ C1] ? __kthread_parkme+0x169/0x1d0 [ 781.531517][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 781.536736][ C1] kthread+0x2f2/0x390 [ 781.540830][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 781.546046][ C1] ? __pfx_kthread+0x10/0x10 [ 781.550662][ C1] ret_from_fork+0x4d/0x80 [ 781.555101][ C1] ? __pfx_kthread+0x10/0x10 [ 781.559714][ C1] ret_from_fork_asm+0x1a/0x30 [ 781.564528][ C1] [ 781.567547][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 781.573870][ C1] CPU: 1 UID: 0 PID: 2549 Comm: kworker/u8:8 Not tainted 6.11.0-rc5-syzkaller #0 [ 781.582984][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 781.593046][ C1] Workqueue: events_unbound toggle_allocation_gate [ 781.599582][ C1] RIP: 0010:smp_call_function_many_cond+0x1865/0x29d0 [ 781.606359][ C1] Code: 89 e6 83 e6 01 31 ff e8 39 18 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 e4 13 0c 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 c8 13 0c 00 eb e4 44 [ 781.625972][ C1] RSP: 0018:ffffc90008c47700 EFLAGS: 00000293 [ 781.632049][ C1] RAX: 0000000000000000 RBX: 1ffff11017248c59 RCX: ffff88802a5f9e00 [ 781.640030][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 781.648001][ C1] RBP: ffffc90008c478e0 R08: ffffffff81877a17 R09: 1ffffffff26e6908 [ 781.655984][ C1] R10: dffffc0000000000 R11: fffffbfff26e6909 R12: dffffc0000000000 [ 781.663962][ C1] R13: ffff8880b92462c8 R14: ffff8880b933fb40 R15: 0000000000000000 [ 781.671941][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 781.680875][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 781.687461][ C1] CR2: 000000002000f000 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 781.695441][ C1] Call Trace: [ 781.698722][ C1] [ 781.701656][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 781.708004][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.713671][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 781.719412][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.725067][ C1] ? __lock_acquire+0x137a/0x2040 [ 781.730129][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 781.735968][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.741621][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.747268][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 781.753529][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 781.758923][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.764581][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 781.770235][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.775882][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 781.781612][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.787258][ C1] ? acct_account_cputime+0x207/0x210 [ 781.792655][ C1] ? update_process_times+0x1ce/0x230 [ 781.798049][ C1] ? tick_nohz_handler+0x37c/0x500 [ 781.803178][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 781.808651][ C1] ? __hrtimer_run_queues+0x553/0xd50 [ 781.814031][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 781.820049][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 781.825778][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.831425][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 781.837529][ C1] ? hrtimer_interrupt+0x396/0x990 [ 781.842677][ C1] ? __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 781.848862][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 781.854689][ C1] [ 781.857622][ C1] [ 781.860557][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 781.866733][ C1] ? smp_call_function_many_cond+0x1847/0x29d0 [ 781.872900][ C1] ? smp_call_function_many_cond+0x1865/0x29d0 [ 781.879081][ C1] ? kmem_cache_alloc_bulk_noprof+0x146/0x790 [ 781.885165][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 781.890202][ C1] ? kmem_cache_alloc_bulk_noprof+0x146/0x790 [ 781.896297][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.901954][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 781.908291][ C1] ? __pfx___might_resched+0x10/0x10 [ 781.913590][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 781.919145][ C1] ? __pfx___might_resched+0x10/0x10 [ 781.924449][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 781.929489][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 781.934616][ C1] text_poke_bp_batch+0x352/0xb30 [ 781.939657][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.945319][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 781.950879][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 781.955909][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.961562][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.967208][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 781.973483][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.979151][ C1] text_poke_finish+0x30/0x50 [ 781.983842][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 781.989840][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 781.995780][ C1] static_key_enable+0x1a/0x20 [ 782.000567][ C1] toggle_allocation_gate+0xb5/0x250 [ 782.005875][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 782.011799][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 782.018167][ C1] ? process_scheduled_works+0x945/0x1830 [ 782.023902][ C1] process_scheduled_works+0xa2e/0x1830 [ 782.029499][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 782.035506][ C1] ? assign_work+0x364/0x3d0 [ 782.040117][ C1] worker_thread+0x86d/0xd10 [ 782.044829][ C1] ? __kthread_parkme+0x169/0x1d0 [ 782.049881][ C1] ? __pfx_worker_thread+0x10/0x10 [ 782.055013][ C1] kthread+0x2f2/0x390 [ 782.059111][ C1] ? __pfx_worker_thread+0x10/0x10 [ 782.064240][ C1] ? __pfx_kthread+0x10/0x10 [ 782.068859][ C1] ret_from_fork+0x4d/0x80 [ 782.073297][ C1] ? __pfx_kthread+0x10/0x10 [ 782.077911][ C1] ret_from_fork_asm+0x1a/0x30 [ 782.082713][ C1]