last executing test programs: 3.774888934s ago: executing program 4 (id=10049): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001a00040002000c0002009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.641084837s ago: executing program 4 (id=10055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xfec0ffffffffffff, 0xfffffffffffffffe}}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40044) 3.50544097s ago: executing program 4 (id=10057): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a4004040200009002cea19853626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) 3.375587144s ago: executing program 4 (id=10060): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x800, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0), &(0x7f00000007c0)=ANY=[], 0x0, 0x0) 3.271820306s ago: executing program 4 (id=10064): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0xfffffffd, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac01}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.097904941s ago: executing program 4 (id=10068): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1.433081343s ago: executing program 3 (id=10104): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0xff, 0x3}, 0x2) 1.362093595s ago: executing program 3 (id=10105): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 1.241251318s ago: executing program 3 (id=10108): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000061c0)='./file4\x00', 0x8, &(0x7f0000006140)=ANY=[@ANYRES16=0x0], 0x1, 0x1f0, &(0x7f0000000280)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0x3400, 0x1d2) 1.002669774s ago: executing program 3 (id=10112): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x10000, 0x6, 0x0, 'queue0\x00', 0x4}) 984.483674ms ago: executing program 2 (id=10114): r0 = socket(0x25, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) 898.995037ms ago: executing program 3 (id=10116): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2000) 898.467687ms ago: executing program 2 (id=10117): setuid(0xee01) fanotify_init(0xa00, 0x0) 831.785909ms ago: executing program 3 (id=10119): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xc0, 0x3b, 0x63, 0x10, 0x16c0, 0x5df, 0x2b48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x6, 0x10, 0x4, "", [{{0x9, 0x4, 0x7f, 0x7, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) 783.4888ms ago: executing program 2 (id=10122): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 607.962175ms ago: executing program 1 (id=10127): r0 = syz_init_net_socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000001900)={0x1, &(0x7f00000018c0)=[{@none}]}) 555.134005ms ago: executing program 1 (id=10128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000039780000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004c00038048000080440001803d0001"], 0x5f8}}, 0x0) 486.645687ms ago: executing program 0 (id=10129): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) read(r0, 0x0, 0x0) 484.460127ms ago: executing program 1 (id=10130): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x1}, @IFLA_VTI_OKEY={0x8, 0x3, 0xfffffffc}, @IFLA_VTI_IKEY={0x8}], @IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}]}, 0x50}}, 0x4044004) 474.184578ms ago: executing program 2 (id=10131): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7704, 0x0) 439.823639ms ago: executing program 0 (id=10132): r0 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}}) 342.624021ms ago: executing program 0 (id=10133): r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000003c0)='+\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c) 342.492751ms ago: executing program 2 (id=10134): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2a3}) 316.604952ms ago: executing program 0 (id=10135): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) 311.063882ms ago: executing program 1 (id=10136): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x44, 0x1, 0x0, "ff75a740ff672a4fe8e3563f8cea843b9fb065cc6ef1bb8000006e00"}) 238.551593ms ago: executing program 2 (id=10137): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3, 0x51a, &(0x7f0000000700)="$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") rmdir(&(0x7f0000000380)='./file0/../file0\x00') 209.099855ms ago: executing program 0 (id=10138): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 194.706275ms ago: executing program 1 (id=10139): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1208002, &(0x7f0000000100), 0x1, 0x5d8, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x6100000000000, 0x1000000000044c8, 0x0, 0x7, 0x8000000000000001, 0x3, 0x100000001, 0x5166}) 98.791777ms ago: executing program 0 (id=10140): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25NOUID(r0, 0x89e3, 0xfffffffffffffffc) 0s ago: executing program 1 (id=10141): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 733][T16822] usb 1-1: USB disconnect, device number 21 [ 673.472009][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7241'. [ 673.516057][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7241'. [ 673.602887][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7241'. [ 673.639085][T20172] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 673.664408][T20183] ieee802154 phy0 wpan0: encryption failed: -22 [ 673.794561][T20187] netlink: 'syz.1.7249': attribute type 1 has an invalid length. [ 673.836803][T20187] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.7249'. [ 673.847022][T20187] netlink: 'syz.1.7249': attribute type 1 has an invalid length. [ 673.893181][T20194] netlink: 'syz.4.7251': attribute type 1 has an invalid length. [ 674.098842][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7258'. [ 674.155610][T20209] netlink: 'syz.1.7259': attribute type 10 has an invalid length. [ 674.218120][T20209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.254986][T20209] team0: Port device bond0 added [ 674.337332][T20220] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7263'. [ 674.647346][T20239] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7271'. [ 674.871564][T20251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7278'. [ 674.908650][T20251] netlink: 'syz.1.7278': attribute type 1 has an invalid length. [ 675.278666][T20270] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.7290'. [ 676.127045][T20304] netlink: 'syz.3.7306': attribute type 5 has an invalid length. [ 676.136436][T20304] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.7306'. [ 676.277554][ T26] audit: type=1326 audit(2000001245.202:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.3.7309" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793e9fa019 code=0x7ffc0000 [ 676.378736][ T26] audit: type=1326 audit(2000001245.221:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.3.7309" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f793e9fa019 code=0x7ffc0000 [ 676.510625][ T26] audit: type=1326 audit(2000001245.221:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.3.7309" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793e9fa019 code=0x7ffc0000 [ 676.695854][T20324] netlink: 'syz.1.7316': attribute type 11 has an invalid length. [ 676.830167][T20333] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[20333] [ 677.464022][T20378] xt_nat: multiple ranges no longer supported [ 678.286585][T20434] loop3: detected capacity change from 0 to 512 [ 678.392138][T20441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.486501][T20393] loop2: detected capacity change from 0 to 32768 [ 678.598725][T20393] XFS (loop2): Mounting V5 Filesystem [ 678.726179][T20463] device gtp0 entered promiscuous mode [ 678.734924][T20393] XFS (loop2): Ending clean mount [ 678.861065][T20472] netlink: 'syz.0.7385': attribute type 1 has an invalid length. [ 678.898840][ T4187] XFS (loop2): Unmounting Filesystem [ 679.083123][T20482] loop3: detected capacity change from 0 to 256 [ 679.430765][T20498] __nla_validate_parse: 2 callbacks suppressed [ 679.430784][T20498] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7398'. [ 679.893998][T20518] device bond1 entered promiscuous mode [ 679.905182][T20518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.382406][ T4465] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 680.412086][T20548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7422'. [ 680.562115][T20559] xt_CT: You must specify a L4 protocol and not use inversions on it [ 680.685281][T20565] netlink: 'syz.3.7431': attribute type 4 has an invalid length. [ 680.693325][ T4465] usb 2-1: Using ep0 maxpacket: 16 [ 680.735112][T20533] loop2: detected capacity change from 0 to 32768 [ 680.761938][T20533] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.7387 (20533) [ 680.788552][T16920] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 680.833949][T20533] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 680.850788][T20533] BTRFS info (device loop2): using free space tree [ 680.864945][ T4465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.885777][T20533] BTRFS info (device loop2): has skinny extents [ 680.888625][ T4465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.944075][ T4465] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.983673][ T4465] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 681.002542][T20586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7437'. [ 681.007114][ T4465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.055767][T16920] usb 5-1: Using ep0 maxpacket: 16 [ 681.074888][ T4465] usb 2-1: config 0 descriptor?? [ 681.131002][T20533] BTRFS info (device loop2): enabling ssd optimizations [ 681.170369][ T4465] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46 [ 681.184240][T16920] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 681.192475][T16920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.207543][ T3544] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 681.250809][T16920] usb 5-1: config 0 has no interface number 0 [ 681.291185][ T3544] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 681.303275][ T3544] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 681.315523][ T3544] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 681.462152][T16920] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 681.480677][T16920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.504646][T16920] usb 5-1: Product: syz [ 681.523211][T16920] usb 5-1: Manufacturer: syz [ 681.535052][T16920] usb 5-1: SerialNumber: syz [ 681.554985][T20614] loop3: detected capacity change from 0 to 64 [ 681.567643][T16920] usb 5-1: config 0 descriptor?? [ 681.731848][T20530] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 681.765850][ T4489] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 681.776480][ T3544] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 681.779367][ T4230] usb 2-1: USB disconnect, device number 22 [ 681.798810][ T3544] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 681.836924][T16920] usb 5-1: USB disconnect, device number 15 [ 681.930419][T20622] loop2: detected capacity change from 0 to 256 [ 682.039283][ T7032] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 682.424939][T20643] comedi comedi2: board detection failed [ 682.439144][T20644] loop3: detected capacity change from 0 to 16 [ 682.488505][ T7032] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 682.520343][ T7032] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 682.536583][T20644] erofs: (device loop3): mounted with root inode @ nid 36. [ 682.766501][ T7032] usb 1-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 682.786525][ T7032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.822521][ T7032] usb 1-1: Product: syz [ 682.830316][ T7032] usb 1-1: Manufacturer: syz [ 682.836610][ T7032] usb 1-1: SerialNumber: syz [ 682.873444][ T7032] usb 1-1: config 0 descriptor?? [ 683.146338][ T7020] usb 1-1: USB disconnect, device number 22 [ 683.218270][T20675] binfmt_misc: register: failed to install interpreter file ./file0 [ 683.279499][ T4230] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 683.358245][T20684] netlink: 'syz.3.7480': attribute type 46 has an invalid length. [ 683.370888][T20684] netlink: 'syz.3.7480': attribute type 28 has an invalid length. [ 683.380002][T20684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7480'. [ 683.547960][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 683.662219][T20703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7490'. [ 683.676620][ T4230] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 683.688862][ T4230] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 683.706148][ T4230] usb 2-1: config 8 has no interface number 0 [ 683.766561][ T4230] usb 2-1: config 8 interface 206 altsetting 1 has an invalid endpoint with address 0xF7, skipping [ 683.799377][ T4230] usb 2-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 683.834424][ T4230] usb 2-1: config 8 interface 206 has no altsetting 0 [ 683.958949][T20711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7494'. [ 683.969899][T20717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7497'. [ 684.019514][ T4230] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 684.070675][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.084061][T20722] xt_TPROXY: Can be used only with -p tcp or -p udp [ 684.092189][T20723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7500'. [ 684.095455][ T4230] usb 2-1: Product: syz [ 684.138152][ T4230] usb 2-1: Manufacturer: syz [ 684.142853][ T4230] usb 2-1: SerialNumber: syz [ 684.229361][T20730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7503'. [ 684.489672][ T4230] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 684.530268][ T4230] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 684.546694][ T4230] garmin_gps: probe of ttyUSB0 failed with error -22 [ 684.580668][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7515'. [ 684.591492][ T4230] usb 2-1: USB disconnect, device number 23 [ 684.616094][ T4230] garmin_gps 2-1:8.206: device disconnected [ 684.786958][ T7020] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 684.815249][T20766] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7522'. [ 685.075449][ T7020] usb 5-1: Using ep0 maxpacket: 32 [ 685.203978][ T7020] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 685.212159][ T7020] usb 5-1: config 0 has no interface number 0 [ 685.251566][ T7020] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.277514][ T7020] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 685.308645][ T7020] usb 5-1: config 0 interface 85 has no altsetting 0 [ 685.330908][T20801] xt_TCPMSS: Only works on TCP SYN packets [ 685.549167][ T7020] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 685.564938][ T7020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.592240][ T7020] usb 5-1: Product: syz [ 685.610642][ T7020] usb 5-1: Manufacturer: syz [ 685.615786][ T7020] usb 5-1: SerialNumber: syz [ 685.627168][ T7020] usb 5-1: config 0 descriptor?? [ 686.188104][ T7020] appletouch 5-1:0.85: Failed to request geyser raw mode [ 686.200188][ T7020] appletouch: probe of 5-1:0.85 failed with error -5 [ 686.298850][ T7020] usb 5-1: USB disconnect, device number 16 [ 686.839555][T20890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7576'. [ 686.863445][T20892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 686.997540][T20899] comedi comedi0: adq12b: I/O port conflict (0x4,16) [ 687.416610][ T4230] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 687.683936][ T4230] usb 3-1: Using ep0 maxpacket: 32 [ 687.728282][T20943] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 687.736180][T20943] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 687.754694][T20945] futex_wake_op: syz.1.7602 tries to shift op by 144; fix this program [ 687.768098][T20945] futex_wake_op: syz.1.7602 tries to shift op by 144; fix this program [ 687.855296][ T4230] usb 3-1: unable to get BOS descriptor or descriptor too short [ 687.940590][ T4230] usb 3-1: config 6 has an invalid interface number: 49 but max is 0 [ 687.959740][ T4230] usb 3-1: config 6 has no interface number 0 [ 687.983368][ T4230] usb 3-1: config 6 interface 49 altsetting 14 has an invalid endpoint descriptor of length 2, skipping [ 688.009702][ T4230] usb 3-1: config 6 interface 49 altsetting 14 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 688.080842][ T4230] usb 3-1: config 6 interface 49 has no altsetting 0 [ 688.231848][T20969] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7616'. [ 688.254850][T20969] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7616'. [ 688.261684][ T4230] usb 3-1: New USB device found, idVendor=0c45, idProduct=602d, bcdDevice=fa.ff [ 688.293382][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.312567][ T4230] usb 3-1: Product: syz [ 688.334487][ T4230] usb 3-1: Manufacturer: syz [ 688.344521][ T4230] usb 3-1: SerialNumber: syz [ 688.494745][T20985] loop3: detected capacity change from 0 to 64 [ 688.517883][T16920] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 688.566568][T20989] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7625'. [ 688.602329][T20991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7626'. [ 688.661460][ T4230] gspca_main: sonixb-2.14.0 probing 0c45:602d [ 688.699928][ T4230] sonixb 3-1:6.49: Error reading register 00: -71 [ 688.733438][ T4230] usb 3-1: USB disconnect, device number 9 [ 688.878239][T20997] loop3: detected capacity change from 0 to 4096 [ 688.935093][T16920] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 688.951411][T16920] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 688.986518][T20997] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 689.104160][T20997] ntfs3: loop3: failed to convert "c46c" to macinuit [ 689.127588][T16920] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 689.158822][T16920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.197753][T16920] usb 1-1: Product: syz [ 689.216689][T16920] usb 1-1: Manufacturer: syz [ 689.239864][T16920] usb 1-1: SerialNumber: syz [ 689.434584][T21026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7642'. [ 689.455557][T21026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.642078][T21038] netlink: 'syz.2.7649': attribute type 4 has an invalid length. [ 689.672496][T16920] usb 1-1: Can't get UAC3 power state for id 10 [ 689.682415][T21038] netlink: 'syz.2.7649': attribute type 3 has an invalid length. [ 689.723427][T21044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7651'. [ 689.740153][T21038] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7649'. [ 689.779271][T16920] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 689.803274][T16920] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 689.836731][T21048] netlink: 'syz.1.7653': attribute type 3 has an invalid length. [ 689.899206][T21048] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.7653'. [ 689.963678][T21052] usb usb8: usbfs: process 21052 (syz.4.7655) did not claim interface 0 before use [ 689.983189][T16920] usb 1-1: USB disconnect, device number 23 [ 690.193020][T21066] loop2: detected capacity change from 0 to 256 [ 690.272466][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.420250][T21080] netlink: 'syz.4.7670': attribute type 3 has an invalid length. [ 690.457230][T21088] __nla_validate_parse: 1 callbacks suppressed [ 690.457251][T21088] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7671'. [ 690.793269][T21114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7686'. [ 690.812974][T21114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7686'. [ 690.893905][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7688'. [ 691.344264][T21154] loop2: detected capacity change from 0 to 4096 [ 691.432273][T21169] netlink: 'syz.1.7713': attribute type 32 has an invalid length. [ 691.460130][T21154] NILFS (loop2): invalid segment: Checksum error in segment payload [ 691.483101][T21171] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7714'. [ 691.492916][T21154] NILFS (loop2): trying rollback from an earlier position [ 691.525867][T21154] NILFS (loop2): recovery complete [ 691.541703][T21174] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 691.610376][T21178] loop0: detected capacity change from 0 to 64 [ 691.626694][T21176] loop3: detected capacity change from 0 to 1024 [ 691.688783][T21176] EXT4-fs (loop3): barriers disabled [ 691.709955][T21176] JBD2: no valid journal superblock found [ 691.729247][T21176] EXT4-fs (loop3): error loading journal [ 692.073948][T21212] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7734'. [ 692.451954][ T7032] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 692.509864][T21242] vxcan1 speed is unknown, defaulting to 1000 [ 692.537773][T21242] vxcan1 speed is unknown, defaulting to 1000 [ 692.567039][T21242] vxcan1 speed is unknown, defaulting to 1000 [ 692.765736][ T7032] usb 2-1: Using ep0 maxpacket: 16 [ 692.811405][T21253] loop0: detected capacity change from 0 to 16 [ 692.904190][T21253] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 692.933432][ T7032] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.977284][ T7032] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.151706][T21222] loop3: detected capacity change from 0 to 32768 [ 693.199282][ T4230] vxcan1 speed is unknown, defaulting to 1000 [ 693.217918][T21242] infiniband syz2: set active [ 693.244657][ T7032] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 693.249406][T21242] infiniband syz2: added vxcan1 [ 693.296396][ T7032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.338892][ T7032] usb 2-1: Product: syz [ 693.380538][ T7032] usb 2-1: Manufacturer: syz [ 693.413016][ T7032] usb 2-1: SerialNumber: syz [ 693.609612][T21242] RDS/IB: syz2: added [ 693.615073][T21242] smc: adding ib device syz2 with port count 1 [ 693.683993][T21242] smc: ib device syz2 port 1 has pnetid [ 693.709793][T16920] vxcan1 speed is unknown, defaulting to 1000 [ 693.761800][T21242] vxcan1 speed is unknown, defaulting to 1000 [ 693.876099][T16822] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 693.910018][T21274] loop0: detected capacity change from 0 to 16 [ 693.947054][T21274] erofs: (device loop0): mounted with root inode @ nid 36. [ 693.959754][ T7032] usb 2-1: 0:2 : does not exist [ 694.011332][ T7032] usb 2-1: USB disconnect, device number 24 [ 694.071958][ T4191] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4868] [ 694.102833][T21274] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 694.151849][T16822] usb 4-1: Using ep0 maxpacket: 32 [ 694.172238][ T26] audit: type=1800 audit(2000001261.927:47): pid=21274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7756" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 694.312250][T16822] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 694.324011][T16822] usb 4-1: config 0 has no interface number 0 [ 694.366403][T16822] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 694.419862][T16822] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 694.501526][T16822] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 694.573241][T16822] usb 4-1: config 0 interface 196 has no altsetting 0 [ 694.646365][T21242] vxcan1 speed is unknown, defaulting to 1000 [ 694.795683][T16822] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 694.814498][T16822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.846674][T16822] usb 4-1: Product: syz [ 694.851514][T16822] usb 4-1: Manufacturer: syz [ 694.880056][T16822] usb 4-1: SerialNumber: syz [ 694.901598][T16822] usb 4-1: config 0 descriptor?? [ 694.913073][T21300] unsupported nlmsg_type 40 [ 694.921769][T21268] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 695.017802][ T4230] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 695.086710][T21242] vxcan1 speed is unknown, defaulting to 1000 [ 695.221055][T16822] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 695.228736][T16822] ipheth: probe of 4-1:0.196 failed with error -71 [ 695.292041][T16822] usb 4-1: USB disconnect, device number 7 [ 695.403008][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.431755][ T4230] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 695.498208][T21242] vxcan1 speed is unknown, defaulting to 1000 [ 695.514527][T21324] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7780'. [ 695.554747][ T4230] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 695.584369][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 695.621403][ T4230] usb 1-1: SerialNumber: syz [ 695.862625][T21242] vxcan1 speed is unknown, defaulting to 1000 [ 695.934212][ T4230] usb 1-1: 0:2 : does not exist [ 695.983140][ T4230] usb 1-1: USB disconnect, device number 24 [ 696.170291][T21352] overlayfs: empty lowerdir [ 696.187951][T21350] loop3: detected capacity change from 0 to 512 [ 696.268239][T21350] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 696.291179][ T7034] udevd[7034]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 696.339591][T21350] EXT4-fs (loop3): inline encryption not supported [ 696.367843][T21350] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 696.390175][T21350] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 696.400986][T21350] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 696.417640][T21350] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 696.441391][T21350] EXT4-fs (loop3): orphan cleanup on readonly fs [ 696.451954][T21350] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.7794: bg 0: block 34: padding at end of block bitmap is not set [ 696.559940][T21350] Quota error (device loop3): write_blk: dquota write failed [ 696.610591][T21350] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 696.620676][T21350] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.7794: Failed to acquire dquot type 1 [ 696.712374][T21350] EXT4-fs (loop3): 1 truncate cleaned up [ 696.771255][T21350] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue. Quota mode: writeback. [ 696.944630][T21350] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 696.970972][T21383] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 697.171415][T21389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7812'. [ 697.578663][T21413] loop2: detected capacity change from 0 to 512 [ 697.675618][T21413] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 698.052948][T21441] netlink: 'syz.1.7838': attribute type 3 has an invalid length. [ 698.083355][T21441] netlink: 'syz.1.7838': attribute type 1 has an invalid length. [ 698.117942][T21445] netlink: 'syz.3.7840': attribute type 1 has an invalid length. [ 698.297182][T21457] IPv6: Can't replace route, no match found [ 698.436094][T21469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7851'. [ 698.585012][T21477] bond0: option use_carrier: invalid value (9) [ 699.005746][ T7032] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 699.297995][T21465] loop0: detected capacity change from 0 to 32768 [ 699.353397][T21465] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7850 (21465) [ 699.435260][T21465] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 699.466128][ T7032] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 699.475659][ T7032] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 699.507492][T21465] BTRFS info (device loop0): using free space tree [ 699.514254][T21465] BTRFS info (device loop0): has skinny extents [ 699.540413][ T7032] usb 3-1: config 8 has no interface number 0 [ 699.592595][ T7032] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 699.631306][ T7032] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 699.669950][ T4487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.686898][ T7032] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 699.699418][ T4487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.726798][T21522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.733492][T21516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.757423][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 699.775188][ T7032] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 699.804908][T21527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7874'. [ 699.814165][ T7032] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 699.826155][ T7032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.893319][ T7032] usb 3-1: NFC: intf ffff88805f893000 id ffffffff8cb63280 [ 699.981028][T21465] BTRFS info (device loop0): enabling ssd optimizations [ 700.027088][T21539] netlink: 'syz.1.7877': attribute type 1 has an invalid length. [ 700.039779][T21539] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7877'. [ 700.051109][T21539] NCSI netlink: No device for ifindex 0 [ 700.130895][T16485] usb 3-1: USB disconnect, device number 10 [ 700.147360][ T7020] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 700.515809][T21552] netlink: 'syz.4.7882': attribute type 3 has an invalid length. [ 700.749876][T21564] netlink: 'syz.4.7889': attribute type 15 has an invalid length. [ 700.757760][T21564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7889'. [ 700.833675][ T7020] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 700.854133][ T7020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.880644][ T7020] usb 4-1: Product: syz [ 700.884877][ T7020] usb 4-1: Manufacturer: syz [ 700.916571][ T7020] usb 4-1: SerialNumber: syz [ 700.962703][ T7020] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 701.090091][ T4462] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 701.138322][T21590] No such timeout policy "syz1" [ 701.243389][T21596] netlink: 'syz.2.7904': attribute type 25 has an invalid length. [ 701.261311][T21596] netlink: 'syz.2.7904': attribute type 3 has an invalid length. [ 701.358686][T21602] loop2: detected capacity change from 0 to 256 [ 701.379062][ T4462] usb 2-1: Using ep0 maxpacket: 16 [ 701.560735][ T4462] usb 2-1: unable to get BOS descriptor or descriptor too short [ 701.678852][ T4462] usb 2-1: config 1 has an invalid interface number: 153 but max is 0 [ 701.691047][ T4462] usb 2-1: config 1 has no interface number 0 [ 701.699347][ T7020] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 701.712269][T21620] netlink: 'syz.4.7917': attribute type 3 has an invalid length. [ 701.720140][T21620] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7917'. [ 701.730933][ T4462] usb 2-1: config 1 interface 153 has no altsetting 0 [ 701.807581][T16485] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 701.851551][T21626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7920'. [ 701.862734][T21626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7920'. [ 701.945266][ C0] usb 4-1: ath: unknown panic pattern! [ 701.958180][ T4462] usb 2-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=cc.c5 [ 701.968824][ T4462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.980756][ T4462] usb 2-1: Product: syz [ 701.984973][ T4462] usb 2-1: Manufacturer: syz [ 701.994061][ T4462] usb 2-1: SerialNumber: syz [ 702.073510][T16485] usb 3-1: Using ep0 maxpacket: 32 [ 702.154414][ T7032] usb 4-1: USB disconnect, device number 8 [ 702.201962][T16485] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 702.224761][T16485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.246594][T16485] usb 3-1: config 0 descriptor?? [ 702.271953][T21568] udc-core: couldn't find an available UDC or it's busy [ 702.281902][T21568] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 702.300398][T16485] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 702.405059][ T4462] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 702.412789][ T4462] visor 2-1:1.153: missing endpoints [ 702.443797][T21654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7934'. [ 702.456411][ T4462] usb 2-1: USB disconnect, device number 25 [ 702.466637][T21654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.534956][T16485] gspca_nw80x: reg_w err -71 [ 702.539796][T16485] nw80x: probe of 3-1:0.0 failed with error -71 [ 702.551628][T16485] usb 3-1: USB disconnect, device number 11 [ 702.886044][ T7020] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 702.897330][ T7020] ath9k_htc: Failed to initialize the device [ 702.903982][ T7032] usb 4-1: ath9k_htc: USB layer deinitialized [ 703.142566][T16485] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 703.381908][T21706] netlink: 'syz.2.7959': attribute type 4 has an invalid length. [ 703.409901][T21706] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7959'. [ 703.444429][T21706] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 703.580994][T16485] usb 5-1: unable to get BOS descriptor or descriptor too short [ 703.634530][T16485] usb 5-1: not running at top speed; connect to a high speed hub [ 703.720055][T16485] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 703.742042][T16485] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 704.021433][T16485] usb 5-1: string descriptor 0 read error: -22 [ 704.043026][T16485] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 704.072554][T16485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.097740][T21738] netlink: 'syz.1.7976': attribute type 9 has an invalid length. [ 704.132543][T21738] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7976'. [ 704.142528][T21714] loop0: detected capacity change from 0 to 32768 [ 704.188685][T21742] netlink: 'syz.1.7978': attribute type 1 has an invalid length. [ 704.217630][T21714] [ 704.217630][T21714] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 704.217630][T21714] [ 704.221449][T21744] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 704.237529][T21742] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.7978'. [ 704.300040][T21714] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 704.300040][T21714] [ 704.347901][T21714] ERROR: (device loop0): remounting filesystem as read-only [ 704.533057][T21754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7983'. [ 704.614784][ T4829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.630714][ T4829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.659626][ T4462] usb 5-1: USB disconnect, device number 17 [ 704.677621][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 704.693831][T21761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.747111][T21759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.165905][T21787] IPv6: sit1: Disabled Multicast RS [ 705.473080][ T7032] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 705.880151][T21830] netlink: 'syz.3.8017': attribute type 1 has an invalid length. [ 705.917687][T21830] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.8017'. [ 705.931425][ T7032] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 705.962297][ T7032] usb 1-1: too many endpoints for config 2 interface 0 altsetting 78: 39, using maximum allowed: 30 [ 706.014576][ T7032] usb 1-1: config 2 interface 0 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 706.052394][ T7032] usb 1-1: config 2 interface 0 has no altsetting 0 [ 706.192052][T21847] ipt_CLUSTERIP: Please specify destination IP [ 706.264470][ T7032] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 706.283175][ T7032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.302477][ T7032] usb 1-1: Product: syz [ 706.317967][ T7032] usb 1-1: Manufacturer: syz [ 706.322613][ T7032] usb 1-1: SerialNumber: syz [ 706.392817][ T7020] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 706.417052][ T7032] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 706.437051][ T7032] usb 1-1: selecting invalid altsetting 0 [ 706.448777][ T7032] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 706.543654][T21867] (unnamed net_device) (uninitialized): option mode: invalid value (8) [ 706.648022][T16920] usb 1-1: USB disconnect, device number 25 [ 706.681342][ T7020] usb 2-1: Using ep0 maxpacket: 16 [ 706.841884][ T7020] usb 2-1: config 0 has no interfaces? [ 707.023482][ T7020] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 707.043807][ T7020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.088214][ T7020] usb 2-1: Product: syz [ 707.093278][ T7020] usb 2-1: Manufacturer: syz [ 707.111774][ T7020] usb 2-1: SerialNumber: syz [ 707.121949][T21906] netlink: 'syz.2.8056': attribute type 11 has an invalid length. [ 707.131911][T21906] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.8056'. [ 707.135206][ T7020] r8152-cfgselector 2-1: config 0 descriptor?? [ 707.192981][T21909] loop2: detected capacity change from 0 to 256 [ 707.294228][T21913] qrtr: Invalid version 0 [ 707.472430][ T7020] r8152-cfgselector 2-1: Unknown version 0x0000 [ 707.557719][T16485] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 707.693913][T16920] r8152-cfgselector 2-1: USB disconnect, device number 26 [ 707.705787][T21936] loop0: detected capacity change from 0 to 256 [ 707.774973][T21936] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 707.797555][T21936] FAT-fs (loop0): Filesystem has been set read-only [ 707.809966][T21939] netlink: 'syz.2.8071': attribute type 2 has an invalid length. [ 707.809966][T21936] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 707.942682][T16485] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.974387][T16485] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 708.003288][T16485] usb 5-1: config 1 interface 0 has no altsetting 0 [ 708.061114][T21950] netlink: 'syz.3.8076': attribute type 30 has an invalid length. [ 708.077420][T21950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8076'. [ 708.087561][T21950] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 708.098058][T21950] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 708.140202][T21953] binder: 21952:21953 ioctl c018620c 2000000004c0 returned -1 [ 708.274182][T16485] usb 5-1: string descriptor 0 read error: -22 [ 708.295415][T16485] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 708.319132][T16485] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 708.377737][T21969] netlink: 136 bytes leftover after parsing attributes in process `syz.0.8086'. [ 708.405186][T16485] usb 5-1: 0:2 : does not exist [ 708.410428][T21969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8086'. [ 708.431598][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8086'. [ 708.443458][T16485] usb-storage 5-1:1.1: USB Mass Storage device detected [ 708.511060][T21977] SET target dimension over the limit! [ 708.573599][ T7020] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 708.763074][T21994] netlink: 'syz.0.8098': attribute type 1 has an invalid length. [ 708.904825][T16485] us122l: couldn't allocate write buffer [ 708.910779][T16485] snd-usb-us122l: probe of 5-1:1.1 failed with error -22 [ 708.941178][T16485] usb 5-1: USB disconnect, device number 18 [ 709.040727][T22009] usb usb1: usbfs: process 22009 (syz.0.8106) did not claim interface 0 before use [ 709.045118][ T7020] usb 3-1: config index 0 descriptor too short (expected 65152, got 36) [ 709.074699][ T7020] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.221189][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.324331][ T7020] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 709.364353][ T7020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.372428][ T7020] usb 3-1: Product: syz [ 709.420072][ T7020] usb 3-1: Manufacturer: syz [ 709.430068][ T7020] usb 3-1: SerialNumber: syz [ 709.517703][ T7020] rtl8150 3-1:1.0: couldn't find required endpoints [ 709.524484][ T7020] rtl8150: probe of 3-1:1.0 failed with error -5 [ 709.673179][T22040] __nla_validate_parse: 1 callbacks suppressed [ 709.673200][T22040] netlink: 344 bytes leftover after parsing attributes in process `syz.0.8120'. [ 709.758959][ T7032] usb 3-1: USB disconnect, device number 12 [ 709.927116][T22055] netlink: 'syz.0.8128': attribute type 21 has an invalid length. [ 709.979371][T22055] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8128'. [ 710.364290][T22086] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8141'. [ 710.393285][T16920] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 710.402458][T22086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 710.491428][T22092] rdma_rxe: rxe_register_device failed with error -23 [ 710.513355][T22092] rdma_rxe: failed to add vxcan1 [ 710.636599][T16485] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 710.778669][T22109] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8155'. [ 710.788160][T16920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 710.794910][T16920] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 710.811614][T16920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.818813][T22112] syz.2.8156 uses obsolete (PF_INET,SOCK_PACKET) [ 710.853840][T16920] usb 5-1: config 0 descriptor?? [ 710.908654][T16485] usb 4-1: Using ep0 maxpacket: 32 [ 711.043159][T16485] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 711.063156][T16485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.129362][T16920] (null): keene_cmd_main failed (-71) [ 711.137272][T16485] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 711.171733][T16920] video4linux radio48: keene_cmd_main failed (-71) [ 711.184845][T16920] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 711.223684][T16920] usb 5-1: USB disconnect, device number 19 [ 711.235745][T22140] CIFS mount error: No usable UNC path provided in device string! [ 711.235745][T22140] [ 711.268168][T22140] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 711.598900][T16485] gspca_nw80x: reg_r err -71 [ 711.616167][T16485] nw80x: probe of 4-1:3.0 failed with error -71 [ 711.656360][T16485] usb 4-1: USB disconnect, device number 9 [ 711.964484][T22180] netlink: 'syz.1.8189': attribute type 21 has an invalid length. [ 711.972373][T22180] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8189'. [ 712.027918][T22180] netlink: 'syz.1.8189': attribute type 4 has an invalid length. [ 712.043275][T22180] netlink: 'syz.1.8189': attribute type 5 has an invalid length. [ 712.059081][T22180] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8189'. [ 712.230733][T22195] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8196'. [ 712.658291][T22231] netlink: 'syz.2.8215': attribute type 8 has an invalid length. [ 712.699993][T22231] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8215'. [ 713.075139][ T7032] kernel write not supported for file /3159/net/rt_acct (pid: 7032 comm: kworker/0:16) [ 713.633305][T22298] netlink: 'syz.3.8247': attribute type 7 has an invalid length. [ 713.760078][T22311] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8254'. [ 713.805895][T22313] netlink: 'syz.2.8255': attribute type 4 has an invalid length. [ 713.848418][T22313] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8255'. [ 714.356900][T16485] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 714.624511][T16485] usb 4-1: Using ep0 maxpacket: 32 [ 714.731432][ T4230] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 714.795672][T16485] usb 4-1: unable to get BOS descriptor or descriptor too short [ 714.880988][T16485] usb 4-1: config 3 has an invalid interface number: 223 but max is 1 [ 714.897028][T16485] usb 4-1: config 3 has an invalid interface number: 25 but max is 1 [ 714.906670][T16485] usb 4-1: config 3 has an invalid interface number: 223 but max is 1 [ 714.917954][T16920] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 714.926281][T16485] usb 4-1: config 3 has no interface number 0 [ 714.932407][T16485] usb 4-1: config 3 has no interface number 1 [ 714.939334][T16485] usb 4-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 714.950833][T16485] usb 4-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 714.963023][T16485] usb 4-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 714.977583][T16485] usb 4-1: config 3 interface 223 has no altsetting 1 [ 714.984401][T16485] usb 4-1: config 3 interface 25 has no altsetting 0 [ 715.009175][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 715.057557][T22353] loop2: detected capacity change from 0 to 32768 [ 715.119919][T22353] XFS: ikeep mount option is deprecated. [ 715.173641][T16485] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 715.183372][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 715.191196][T16920] usb 5-1: Using ep0 maxpacket: 32 [ 715.197237][T16485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.240070][T16485] usb 4-1: Product: syz [ 715.249599][T16485] usb 4-1: Manufacturer: syz [ 715.254268][T16485] usb 4-1: SerialNumber: syz [ 715.276876][ T4230] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 715.285145][ T4230] usb 1-1: config 6 has no interface number 0 [ 715.306247][ T4230] usb 1-1: config 6 interface 200 has no altsetting 0 [ 715.319683][T16920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.341005][T16920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.357385][T16920] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 715.369417][T16920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.391741][T22353] XFS (loop2): Mounting V5 Filesystem [ 715.402447][T16920] usb 5-1: config 0 descriptor?? [ 715.448735][T22353] XFS (loop2): Ending clean mount [ 715.456118][T22353] XFS (loop2): Quotacheck needed: Please wait. [ 715.462794][T16920] hub 5-1:0.0: USB hub found [ 715.506871][ T4230] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=65.08 [ 715.518588][T22404] __nla_validate_parse: 3 callbacks suppressed [ 715.518609][T22404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8296'. [ 715.537028][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.546611][ T4230] usb 1-1: Product: syz [ 715.561237][ T4230] usb 1-1: Manufacturer: syz [ 715.565997][ T4230] usb 1-1: SerialNumber: syz [ 715.572919][T22353] XFS (loop2): Quotacheck: Done. [ 715.636101][ T4187] XFS (loop2): Unmounting Filesystem [ 715.656924][T16485] usb 4-1: USB disconnect, device number 10 [ 715.693590][T16920] hub 5-1:0.0: 1 port detected [ 715.928638][T16920] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 715.937545][T16920] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 715.947767][ T4230] bfusb: probe of 1-1:6.200 failed with error -5 [ 715.981061][ T4230] usb 1-1: USB disconnect, device number 26 [ 716.056774][ T4295] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 716.056934][T16920] usbhid 5-1:0.0: can't add hid device: -71 [ 716.057029][T16920] usbhid: probe of 5-1:0.0 failed with error -71 [ 716.089340][T16920] usb 5-1: USB disconnect, device number 20 [ 716.441930][ T4295] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 716.464167][ T4295] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.496342][ T4295] usb 2-1: config 0 has no interface number 0 [ 716.502587][ T4295] usb 2-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 716.762570][ T4295] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 716.771684][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.809353][ T4295] usb 2-1: Product: syz [ 716.813599][ T4295] usb 2-1: Manufacturer: syz [ 716.861473][ T4295] usb 2-1: SerialNumber: syz [ 716.891162][ T4295] usb 2-1: config 0 descriptor?? [ 716.934486][ T4295] asix: probe of 2-1:0.251 failed with error -22 [ 717.157996][ T7032] usb 2-1: USB disconnect, device number 27 [ 717.663693][T22492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8340'. [ 718.130787][ T4295] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 718.145308][T22525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8357'. [ 718.152386][ T7032] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 718.188134][T22525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.397931][ T4295] usb 4-1: Using ep0 maxpacket: 8 [ 718.451474][ T7032] usb 5-1: Using ep0 maxpacket: 8 [ 718.633715][ T7032] usb 5-1: unable to get BOS descriptor or descriptor too short [ 718.703828][ T4295] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 718.718786][ T4295] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 718.720100][ T7032] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 718.741624][ T4295] usb 4-1: Product: syz [ 718.745836][ T4295] usb 4-1: Manufacturer: syz [ 718.785932][T22562] netlink: 'syz.1.8374': attribute type 79 has an invalid length. [ 718.805062][ T4295] usb 4-1: SerialNumber: syz [ 718.832457][ T4295] usb 4-1: config 0 descriptor?? [ 718.892163][ T4295] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 718.986383][ T7032] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 718.995485][ T7032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.048617][ T7032] usb 5-1: Product: syz [ 719.052992][ T7032] usb 5-1: Manufacturer: syz [ 719.057628][ T7032] usb 5-1: SerialNumber: syz [ 719.065680][T22573] loop2: detected capacity change from 0 to 16 [ 719.127231][T22573] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 719.279712][T22581] IPv6: sit1: Disabled Multicast RS [ 719.360516][ T4295] gspca_zc3xx: reg_r err -71 [ 719.365296][T16920] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 719.373530][ T4295] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 719.400143][ T4295] usb 4-1: USB disconnect, device number 11 [ 719.515598][ T7032] usb 5-1: USB disconnect, device number 21 [ 719.599340][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.618780][T16485] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 719.648904][T16920] usb 1-1: Using ep0 maxpacket: 32 [ 719.948281][T16920] usb 1-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 719.968400][T16920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.985468][T16920] usb 1-1: Product: syz [ 720.000840][T16920] usb 1-1: Manufacturer: syz [ 720.005846][T16485] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.027045][T16920] usb 1-1: SerialNumber: syz [ 720.032980][T16485] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 720.065146][T16485] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 720.096323][T16485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.122797][T16485] usb 3-1: config 0 descriptor?? [ 720.340574][T22602] loop3: detected capacity change from 0 to 32768 [ 720.395774][T22602] XFS (loop3): Mounting V5 Filesystem [ 720.418624][ T4462] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 720.440090][T16920] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 720.461429][T16920] usb 1-1: 2:1 : unknown format tag 0x804 is detected. processed as MPEG. [ 720.481515][T16920] usb 1-1: found format II with max.bitrate = 32769, frame size=255 [ 720.504034][T16920] usb 1-1: 2:1: All rates were zero [ 720.512075][T22602] XFS (loop3): Ending clean mount [ 720.533413][T16920] usb 1-1: USB disconnect, device number 27 [ 720.675231][T16485] Bluetooth: Can't get version to change to load ram patch err [ 720.682895][T16485] Bluetooth: Loading patch file failed [ 720.708755][T16485] ath3k: probe of 3-1:0.0 failed with error -71 [ 720.729620][ T4199] XFS (loop3): Unmounting Filesystem [ 720.743731][T16485] usb 3-1: USB disconnect, device number 13 [ 720.818770][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.901906][ T4462] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 720.919456][ T4462] usb 5-1: config 0 has no interface number 0 [ 720.931958][ T4462] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.953958][ T4462] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 721.068433][T22631] program syz.0.8404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 721.199298][ T4462] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 721.208570][ T4462] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.223565][T22636] ip6t_srh: unknown srh invflags 4000 [ 721.261664][ T4462] usb 5-1: Product: syz [ 721.272458][ T4462] usb 5-1: Manufacturer: syz [ 721.282891][ T4462] usb 5-1: SerialNumber: syz [ 721.317454][ T4462] usb 5-1: config 0 descriptor?? [ 721.382624][ T4462] yurex 5-1:0.50: Could not submitting URB [ 721.391413][ T4462] yurex: probe of 5-1:0.50 failed with error -5 [ 721.523583][T22654] netlink: 'syz.1.8415': attribute type 12 has an invalid length. [ 721.613804][ T7020] usb 5-1: USB disconnect, device number 22 [ 721.653414][T22659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8417'. [ 721.716259][T22662] netlink: 45 bytes leftover after parsing attributes in process `syz.1.8418'. [ 721.735830][ T4462] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 721.826165][T22668] netlink: 'syz.0.8421': attribute type 10 has an invalid length. [ 721.948518][T22676] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 721.948518][T22676] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 722.249323][ T4462] usb 3-1: unable to get BOS descriptor or descriptor too short [ 722.386023][ T4462] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 722.405760][ T4462] usb 3-1: config 0 has no interface number 0 [ 722.423507][ T4462] usb 3-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 722.444490][ T4462] usb 3-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 722.468517][ T4462] usb 3-1: config 0 interface 86 has no altsetting 0 [ 722.598191][T22705] netlink: 'syz.1.8439': attribute type 1 has an invalid length. [ 722.663625][ T7032] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 722.695775][ T4462] usb 3-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 722.739199][ T4462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.747254][ T4462] usb 3-1: Product: syz [ 722.773206][ T4462] usb 3-1: Manufacturer: syz [ 722.794824][ T4462] usb 3-1: SerialNumber: syz [ 722.832993][ T4462] usb 3-1: config 0 descriptor?? [ 722.860515][T22715] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 722.877733][T22647] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 722.906540][T22647] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 722.941096][T22722] IPv6: sit1: Disabled Multicast RS [ 722.952443][T22724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8447'. [ 723.263389][ T4462] omninet 3-1:0.86: ZyXEL - omni.net usb converter detected [ 723.280526][ T4462] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 723.305275][ T7032] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 723.325709][ T4462] usb 3-1: USB disconnect, device number 14 [ 723.336319][ T7032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.371592][ T4462] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 723.380906][ T7032] usb 4-1: Product: syz [ 723.385244][ T7032] usb 4-1: Manufacturer: syz [ 723.400580][ T4462] omninet 3-1:0.86: device disconnected [ 723.407487][ T7032] usb 4-1: SerialNumber: syz [ 723.425945][ T7032] usb 4-1: config 0 descriptor?? [ 723.705334][ T4462] usb 4-1: USB disconnect, device number 12 [ 723.713590][T22764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8465'. [ 724.258279][ T7020] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 724.384814][ T4462] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 724.641832][ T4462] usb 5-1: Using ep0 maxpacket: 8 [ 724.685575][ T7020] usb 1-1: config index 0 descriptor too short (expected 16480, got 96) [ 724.698714][ T7020] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.730898][ T7020] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 724.792804][ T4462] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 724.802175][ T4462] usb 5-1: config 0 has no interface number 0 [ 724.808313][ T4462] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 724.851038][ T4462] usb 5-1: config 0 interface 200 has no altsetting 0 [ 724.942408][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.948822][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 724.975525][ T7020] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 724.994019][ T7020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.007256][ T7020] usb 1-1: Product: syz [ 725.011483][ T7020] usb 1-1: Manufacturer: syz [ 725.022967][T22833] loop2: detected capacity change from 0 to 4096 [ 725.032400][ T7020] usb 1-1: SerialNumber: syz [ 725.071398][T22833] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 725.083655][ T4462] usb 5-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9 [ 725.101860][ T4462] usb 5-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3 [ 725.118114][T22833] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 725.131555][ T4462] usb 5-1: Product: syz [ 725.139188][ T4462] usb 5-1: Manufacturer: syz [ 725.144641][ T4462] usb 5-1: SerialNumber: syz [ 725.159040][ T4462] usb 5-1: config 0 descriptor?? [ 725.180207][T22833] ntfs: volume version 3.1. [ 725.456432][ T7020] usb 1-1: MIDIStreaming interface descriptor not found [ 725.475790][T22779] udc-core: couldn't find an available UDC or it's busy [ 725.482798][T22779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 725.496851][ T7020] usb 1-1: 0:2 : does not exist [ 725.562464][ T7020] usb 1-1: USB disconnect, device number 28 [ 725.595293][ T4462] usbhid 5-1:0.200: couldn't find an input interrupt endpoint [ 725.645682][ T4462] usb 5-1: USB disconnect, device number 23 [ 726.043308][T22860] delete_channel: no stack [ 726.409011][T22878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8520'. [ 726.484203][T22856] loop2: detected capacity change from 0 to 32768 [ 726.553900][T22887] netlink: 'syz.1.8524': attribute type 1 has an invalid length. [ 726.563657][T22856] XFS (loop2): sunit and swidth must be specified together [ 726.593487][T22890] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8526'. [ 726.603850][T22887] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8524'. [ 726.627177][T22887] block nbd0: not configured, cannot reconfigure [ 726.634033][T22890] openvswitch: netlink: Key type 541 is out of range max 29 [ 726.827672][T22905] netlink: 'syz.0.8533': attribute type 4 has an invalid length. [ 726.872342][T22905] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8533'. [ 726.914264][T22906] netlink: 'syz.2.8531': attribute type 1 has an invalid length. [ 727.346862][T22932] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 727.394051][T22936] xt_bpf: check failed: parse error [ 728.222797][ T4462] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 728.308363][ T7020] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 728.532959][ T4462] usb 5-1: Using ep0 maxpacket: 32 [ 728.709725][ T4462] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.730598][ T4462] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.745647][T23012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8586'. [ 728.821614][ T7020] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 728.830403][ T7020] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 728.832661][T16912] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 728.875086][ T7020] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 728.895543][ T7020] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 728.928453][ T4462] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 728.937596][ T4462] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 728.949215][ T4462] usb 5-1: Product: syz [ 728.958364][ T4462] usb 5-1: Manufacturer: syz [ 729.004744][ T4462] hub 5-1:4.0: USB hub found [ 729.024888][ T7020] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 729.024922][ T7020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 729.024946][ T7020] usb 1-1: SerialNumber: syz [ 729.079688][ T7020] cdc_acm 1-1:1.0: invalid descriptor buffer length [ 729.079714][ T7020] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 729.079732][ T7020] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 729.079757][ T7020] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 729.138969][T16912] usb 4-1: Using ep0 maxpacket: 16 [ 729.249192][ T4462] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 729.309165][ T7032] usb 1-1: USB disconnect, device number 29 [ 729.441484][T16912] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 729.450843][T16912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.459335][T16912] usb 4-1: Product: syz [ 729.463760][T16912] usb 4-1: Manufacturer: syz [ 729.468418][T16912] usb 4-1: SerialNumber: syz [ 729.476822][T16912] usb 4-1: config 0 descriptor?? [ 729.537719][ T7020] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 729.569693][ T4295] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 729.591378][ T4462] usb 5-1: USB disconnect, device number 24 [ 729.773547][T16912] usb-storage 4-1:0.0: USB Mass Storage device detected [ 729.782153][T16912] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 729.791670][T16912] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 89) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 729.791670][T16912] Please send a copy of this message to and [ 729.826481][ T7020] usb 3-1: Using ep0 maxpacket: 16 [ 729.847634][ T4295] usb 2-1: Using ep0 maxpacket: 16 [ 729.890211][T16912] usb 4-1: USB disconnect, device number 13 [ 729.976115][ T4295] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 729.976335][ T7020] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.985192][ T4295] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 730.012678][ T4295] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 730.022580][ T7020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 730.022613][ T7020] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 730.022640][ T7020] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.034671][ T4295] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 730.065676][ T4295] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 730.104180][ T4295] usb 2-1: config 1 interface 0 has no altsetting 0 [ 730.115528][ T4295] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 730.163206][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.223818][ T4295] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 730.299555][ T7020] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 730.363121][ T7020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.371190][ T7020] usb 3-1: Product: syz [ 730.408742][ T7020] usb 3-1: Manufacturer: syz [ 730.408766][ T7020] usb 3-1: SerialNumber: syz [ 730.419825][ T7020] usb 3-1: config 0 descriptor?? [ 730.467371][ T4295] scsi host1: usb-storage 2-1:1.0 [ 730.712543][ T4295] usb 2-1: USB disconnect, device number 28 [ 730.806317][ T7020] usb 3-1: USB disconnect, device number 15 [ 730.841963][T16485] Bluetooth: hci0: command 0x0401 tx timeout [ 731.275819][T23121] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8638'. [ 731.304455][T23121] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 731.659792][T23147] netlink: 'syz.3.8650': attribute type 3 has an invalid length. [ 732.237483][T23186] sock: sock_timestamping_bind_phc: sock not bind to device [ 732.575440][T23204] trusted_key: encrypted_key: insufficient parameters specified [ 733.172616][T16485] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 733.375629][ T7032] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 733.439951][T16485] usb 5-1: Using ep0 maxpacket: 32 [ 733.653634][ T7032] usb 4-1: Using ep0 maxpacket: 8 [ 733.739704][T16485] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 733.758472][T16485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.771004][T16485] usb 5-1: Product: syz [ 733.775235][T16485] usb 5-1: Manufacturer: syz [ 733.824865][T16485] usb 5-1: SerialNumber: syz [ 733.870381][ T7032] usb 4-1: unable to get BOS descriptor or descriptor too short [ 733.967095][T23291] overlayfs: missing 'workdir' [ 733.974655][ T7032] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 733.993737][ T7032] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 734.008448][ T7032] usb 4-1: config 4 has no interface number 0 [ 734.209769][T16485] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 734.231170][T16485] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 734.301745][T16485] usb 5-1: USB disconnect, device number 25 [ 734.348813][ T7032] usb 4-1: string descriptor 0 read error: -22 [ 734.377385][ T7032] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 734.409736][ T7032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.494673][ T7032] uvcvideo 4-1:4.147: Found multiple Units with ID 6 [ 734.503714][ T7032] usb 4-1: Found UVC 0.02 device (04f2:b746) [ 734.516102][ T7032] usb 4-1: No valid video chain found. [ 734.596288][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.735403][ T7020] usb 4-1: USB disconnect, device number 14 [ 734.765488][ T4462] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 734.860234][T23341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8747'. [ 735.065021][ T7032] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 735.235818][ T4462] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.253731][ T4462] usb 2-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 735.267200][ T4462] usb 2-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.284408][ T4462] usb 2-1: config 0 interface 0 altsetting 91 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 735.351088][ T4462] usb 2-1: config 0 interface 0 has no altsetting 0 [ 735.374897][ T7032] usb 3-1: Using ep0 maxpacket: 16 [ 735.443605][ T4462] usb 2-1: New USB device found, idVendor=0404, idProduct=c294, bcdDevice= 0.00 [ 735.453035][ T4462] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 735.492191][ T4462] usb 2-1: Manufacturer: syz [ 735.500827][ T4462] usb 2-1: config 0 descriptor?? [ 735.506550][ T7032] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 735.526957][ T7032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.527208][T23385] netlink: 'syz.4.8763': attribute type 2 has an invalid length. [ 735.561192][ T7032] usb 3-1: config 0 descriptor?? [ 735.586674][T23385] netlink: 'syz.4.8763': attribute type 1 has an invalid length. [ 735.606626][T23385] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8763'. [ 735.618939][ T7032] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 735.818604][ T7020] usb 2-1: USB disconnect, device number 29 [ 735.845259][ T7032] gspca_sonixj: reg_w1 err -71 [ 735.862853][ T7032] sonixj: probe of 3-1:0.0 failed with error -71 [ 735.920465][ T7032] usb 3-1: USB disconnect, device number 16 [ 736.750561][T23446] comedi comedi4: commands at RT priority not supported in this driver [ 736.823008][ T150] block nbd0: Attempted send on invalid socket [ 736.829458][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 736.841262][T23450] XFS (nbd0): SB validate failed with error -5. [ 737.157601][T23480] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8795'. [ 737.202857][ T4295] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 737.352756][T23488] netlink: 'syz.4.8798': attribute type 49 has an invalid length. [ 737.547660][T23488] device ip6gretap0 entered promiscuous mode [ 737.598639][ T4295] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 737.614887][ T4295] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 737.656379][ T4295] usb 4-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 737.688829][ T4295] usb 4-1: config 0 has no interface number 0 [ 737.819052][T23514] device veth0_vlan left promiscuous mode [ 737.878987][ T4295] usb 4-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28 [ 737.910877][ T4295] usb 4-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 737.943310][ T4295] usb 4-1: Product: syz [ 737.947532][ T4295] usb 4-1: Manufacturer: syz [ 737.975992][ T4295] usb 4-1: SerialNumber: syz [ 737.999406][ T4295] usb 4-1: config 0 descriptor?? [ 738.060335][ T4295] usb 4-1: Found UVC 0.00 device syz (006d:0800) [ 738.077764][ T4295] usb 4-1: No valid video chain found. [ 738.289166][ T4295] usb 4-1: USB disconnect, device number 15 [ 738.412997][T23546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8820'. [ 738.456040][T23546] tc_dump_action: action bad kind [ 738.535565][T23554] loop2: detected capacity change from 0 to 256 [ 738.596288][T23560] netlink: 'syz.0.8827': attribute type 8 has an invalid length. [ 738.660092][T23554] exfat: Deprecated parameter 'namecase' [ 738.719149][T23554] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 739.741546][T23638] openvswitch: netlink: Missing key (keys=40, expected=100) [ 739.879176][T23646] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8862'. [ 739.924100][T23646] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8862'. [ 740.252993][T16912] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 740.463526][T16485] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 740.495850][ T4295] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 740.506592][ T4230] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 740.647885][T16912] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 740.661010][T16912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.688975][T16912] usb 5-1: config 0 descriptor?? [ 740.719993][T16485] usb 3-1: Using ep0 maxpacket: 32 [ 740.763443][ T4295] usb 4-1: Using ep0 maxpacket: 8 [ 740.848706][T16485] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.862925][T16485] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.885285][T16485] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 740.894712][T16485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.906348][ T4230] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 740.916374][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 740.930231][ T4230] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 740.941476][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 740.968530][T16485] usb 3-1: config 0 descriptor?? [ 740.974381][ T4295] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 740.986859][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 741.001378][ T4295] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 741.011937][ T4295] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 741.025328][T16485] hub 3-1:0.0: USB hub found [ 741.034272][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.047914][ T4295] usb 4-1: config 0 descriptor?? [ 741.073209][T23671] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 741.158674][ T4230] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 741.175130][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.185319][ T4230] usb 2-1: Product: syz [ 741.189653][ T4230] usb 2-1: Manufacturer: syz [ 741.201132][T16912] ath6kl: Failed to submit usb control message: -71 [ 741.207802][T16912] ath6kl: unable to send the bmi data to the device: -71 [ 741.217870][ T4230] usb 2-1: SerialNumber: syz [ 741.223147][T16912] ath6kl: Unable to send get target info: -71 [ 741.230288][ T4230] usb 2-1: config 0 descriptor?? [ 741.239795][T16912] ath6kl: Failed to init ath6kl core: -71 [ 741.256085][T23673] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 741.261823][T16485] hub 3-1:0.0: 3 ports detected [ 741.264205][T23673] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 741.276319][T16912] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 741.294518][T16912] usb 5-1: USB disconnect, device number 26 [ 741.481356][T16485] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 741.487987][T16485] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 741.532923][ T4230] dm9601: probe of 2-1:0.0 failed with error -71 [ 741.553328][T16921] usb 4-1: USB disconnect, device number 16 [ 741.569782][ T4230] usb 2-1: USB disconnect, device number 30 [ 741.596640][T16485] usbhid 3-1:0.0: can't add hid device: -71 [ 741.602675][T16485] usbhid: probe of 3-1:0.0 failed with error -71 [ 741.654308][T16485] usb 3-1: USB disconnect, device number 17 [ 742.089618][ T4295] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 742.185399][T23747] debugfs: Directory '1^!l1*$pOcɔGt:u^' with parent 'ieee80211' already present! [ 742.353942][ T4295] usb 5-1: Using ep0 maxpacket: 16 [ 742.385037][T23761] device ip6tnl2 entered promiscuous mode [ 742.502851][T23767] x_tables: unsorted underflow at hook 4 [ 742.527670][T23771] netlink: 'syz.1.8913': attribute type 21 has an invalid length. [ 742.536257][ T4295] usb 5-1: unable to get BOS descriptor or descriptor too short [ 742.539698][T23771] IPv6: NLM_F_CREATE should be specified when creating new route [ 742.586285][T23771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8913'. [ 742.642028][ T4295] usb 5-1: config 25 has an invalid interface number: 91 but max is 0 [ 742.657229][ T4295] usb 5-1: config 25 has no interface number 0 [ 742.687006][ T4295] usb 5-1: config 25 interface 91 altsetting 7 bulk endpoint 0xE has invalid maxpacket 64 [ 742.718408][ T4295] usb 5-1: config 25 interface 91 altsetting 7 bulk endpoint 0xD has invalid maxpacket 16 [ 742.745527][ T4295] usb 5-1: config 25 interface 91 has no altsetting 0 [ 742.831352][T23789] netlink: 'syz.1.8922': attribute type 1 has an invalid length. [ 742.869293][T23789] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8922'. [ 742.933179][ T4295] usb 5-1: New USB device found, idVendor=0421, idProduct=00ab, bcdDevice=ee.96 [ 742.944960][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.953019][ T4295] usb 5-1: Product: syz [ 742.991173][ T4295] usb 5-1: Manufacturer: syz [ 742.995834][ T4295] usb 5-1: SerialNumber: syz [ 743.083524][T23733] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 743.090826][T23733] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 743.099986][T23803] loop0: detected capacity change from 0 to 512 [ 743.175275][T23803] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 743.244260][T23803] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1: comm syz.0.8929: invalid block [ 743.294648][T23803] EXT4-fs (loop0): Remounting filesystem read-only [ 743.305560][T23803] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.8929: couldn't read orphan inode 11 (err -117) [ 743.318925][T23803] EXT4-fs (loop0): Remounting filesystem read-only [ 743.325483][T23803] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000010001ff,noblock_validity,max_dir_size_kb=0x0000000000000009,nodioread_nolock,jqfmt=vfsold,. Quota mode: none. [ 743.443396][ T4295] usb 5-1: bad CDC descriptors [ 743.473047][ T4295] usb 5-1: bad CDC descriptors [ 743.518545][ T4295] usb 5-1: USB disconnect, device number 27 [ 743.827849][T23843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8946'. [ 743.910571][T23846] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 744.263356][T23859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8954'. [ 744.276798][T23867] loop0: detected capacity change from 0 to 128 [ 744.304284][T23856] syz.1.8953 (23856) used greatest stack depth: 19472 bytes left [ 744.345037][T23867] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 744.467833][T23876] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 744.566593][T23880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8963'. [ 744.978862][T23907] dlm: plock device version mismatch: kernel (1.2.0), user (1952804395.1769107551.1915428975) [ 745.586213][ T3852] device veth0_vlan left promiscuous mode [ 745.614175][T23940] delete_channel: no stack [ 745.627025][ T3852] device veth0_vlan entered promiscuous mode [ 745.634544][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 745.668324][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 745.696013][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 745.939813][T23958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8995'. [ 746.322096][T16485] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 746.367177][T23993] xt_l2tp: invalid flags combination: 0 [ 746.380470][T23988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9008'. [ 746.589075][T16485] usb 1-1: Using ep0 maxpacket: 8 [ 746.717807][T16485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 746.777773][T16485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 746.831753][T16485] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 746.865897][T16485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 746.910575][T16485] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 746.927607][T24021] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.9019'. [ 746.940732][T16485] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 746.953379][T24021] openvswitch: netlink: ct_state flags 00030000 unsupported [ 746.969616][T16485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.035821][T16485] usb 1-1: config 0 descriptor?? [ 747.081358][T23967] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 747.131119][T24028] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 747.404885][T24032] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 747.607203][ T4462] usb 1-1: USB disconnect, device number 30 [ 747.633514][T24059] loop2: detected capacity change from 0 to 1764 [ 747.683303][T24069] SET target dimension over the limit! [ 748.304957][T24108] netlink: 'syz.1.9060': attribute type 13 has an invalid length. [ 748.496069][T24120] ipt_ECN: cannot use operation on non-tcp rule [ 748.626692][T24129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9069'. [ 748.916137][T24148] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9079'. [ 748.967123][T24148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9079'. [ 749.016713][T24148] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9079'. [ 749.025735][T24148] netlink: 'syz.4.9079': attribute type 2 has an invalid length. [ 749.092764][T24148] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9079'. [ 749.112469][T24157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9084'. [ 749.256983][T24168] netlink: 'syz.1.9089': attribute type 30 has an invalid length. [ 749.294073][T24168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9089'. [ 749.852338][T24204] netlink: 'syz.4.9107': attribute type 3 has an invalid length. [ 749.961936][T24211] tmpfs: Bad value for 'mpol' [ 750.239102][T24222] loop2: detected capacity change from 0 to 4096 [ 750.273512][T24222] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 750.282910][T24222] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 750.296673][T24222] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 750.312408][T24222] ntfs: volume version 3.1. [ 750.343063][T24222] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 750.354920][T24222] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x44, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 750.398466][ T4187] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 750.502518][ T4230] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 750.659622][T24229] binder: 24228:24229 ioctl c018620c 0 returned -14 [ 750.758504][ T4230] usb 5-1: Using ep0 maxpacket: 8 [ 750.889348][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 750.914527][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 750.946021][ T4230] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 750.965687][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 750.979197][ T4230] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 750.991902][ T4230] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 751.031943][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.061780][ T4230] usb 5-1: config 0 descriptor?? [ 751.090406][T24224] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 751.191397][T24258] SET target dimension over the limit! [ 751.508791][T24280] device batadv0 entered promiscuous mode [ 751.575999][ T7020] usb 5-1: USB disconnect, device number 28 [ 751.617985][T24282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9144'. [ 751.661188][ T26] audit: type=1326 audit(710.847:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24283 comm="syz.2.9145" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb79e8c8019 code=0x0 [ 751.710126][ T7028] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 751.977645][ T7028] usb 2-1: Using ep0 maxpacket: 16 [ 752.145311][ T7028] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 752.202257][ T7028] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 752.223484][ T7028] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 752.240040][ T7028] usb 2-1: config 1 interface 2 has no altsetting 0 [ 752.358562][T24327] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 752.454084][T24330] loop2: detected capacity change from 0 to 4096 [ 752.460005][ T7028] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 752.472989][ T7028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.494759][ T7028] usb 2-1: Product: syz [ 752.498991][ T7028] usb 2-1: Manufacturer: syz [ 752.504151][ T7028] usb 2-1: SerialNumber: syz [ 752.714863][T16921] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 752.843629][T24347] IPVS: length: 77 != 8 [ 752.880744][ T7028] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 752.898992][ T7028] usb 2-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 752.931268][ T7028] usb 2-1: found format II with max.bitrate = 3, frame size=7 [ 752.938995][ T7028] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 752.962224][T24351] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9170'. [ 752.982548][T24351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9170'. [ 752.995768][ T7028] usb 2-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 753.007865][ T7028] usb 2-1: found format II with max.bitrate = 3, frame size=7 [ 753.041354][ T7028] usb 2-1: selecting invalid altsetting 0 [ 753.089762][ T7028] usb 2-1: selecting invalid altsetting 0 [ 753.142547][T16921] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 753.166923][T16921] usb 4-1: can't read configurations, error -71 [ 753.173865][ T7028] usb 2-1: USB disconnect, device number 31 [ 753.464951][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.522672][T24384] netlink: 'syz.4.9185': attribute type 21 has an invalid length. [ 753.570107][T16921] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 753.680305][T24394] device vti1 entered promiscuous mode [ 753.968119][T16921] usb 4-1: config 7 descriptor has 1 excess byte, ignoring [ 753.975572][T16921] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 754.203343][T16921] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 754.231859][T16921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.253492][T16921] usb 4-1: Product: syz [ 754.270777][T16921] usb 4-1: Manufacturer: syz [ 754.285818][T16921] usb 4-1: SerialNumber: syz [ 754.377474][T16921] rndis_wlan 4-1:7.0: skipping garbage [ 754.385016][T16921] usb 4-1: bad CDC descriptors [ 754.396526][T16921] rndis_host 4-1:7.0: skipping garbage [ 754.402042][T16921] usb 4-1: bad CDC descriptors [ 754.458720][T16921] option 4-1:7.0: GSM modem (1-port) converter detected [ 754.562147][T24448] device batadv0 entered promiscuous mode [ 754.573357][T16916] usb 4-1: USB disconnect, device number 18 [ 754.584374][T16916] option 4-1:7.0: device disconnected [ 754.936682][T24475] device wlan0 entered promiscuous mode [ 755.321121][T24499] device batadv2 entered promiscuous mode [ 755.410744][T24505] SET target dimension over the limit! [ 755.567361][ T1092] block nbd2: Attempted send on invalid socket [ 755.573673][ T1092] blk_update_request: I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 755.585974][ T1092] gfs2: error 10 reading superblock [ 755.721498][T24522] netlink: 'syz.2.9245': attribute type 1 has an invalid length. [ 755.729406][T24522] __nla_validate_parse: 1 callbacks suppressed [ 755.729421][T24522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9245'. [ 755.743590][T24524] netlink: 'syz.3.9248': attribute type 12 has an invalid length. [ 756.151841][ T26] audit: type=1326 audit(715.047:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24549 comm="syz.4.9260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b43e019 code=0x7ffc0000 [ 756.175367][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.221471][ T26] audit: type=1326 audit(715.047:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24549 comm="syz.4.9260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b43e019 code=0x7ffc0000 [ 756.245018][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.278821][ T26] audit: type=1326 audit(715.084:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24549 comm="syz.4.9260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc90b43e019 code=0x7ffc0000 [ 756.371300][ T26] audit: type=1326 audit(715.084:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24549 comm="syz.4.9260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b43e019 code=0x7ffc0000 [ 756.451235][ T26] audit: type=1326 audit(715.084:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24549 comm="syz.4.9260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b43e019 code=0x7ffc0000 [ 756.474881][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.526332][T24564] openvswitch: netlink: EtherType 0 is less than min 600 [ 756.652250][T24570] netlink: 200 bytes leftover after parsing attributes in process `syz.3.9270'. [ 757.024323][T24596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9283'. [ 757.577096][T24631] overlayfs: missing 'lowerdir' [ 757.780450][T24649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9306'. [ 758.027752][T24667] openvswitch: netlink: Actions may not be safe on all matching packets [ 758.189710][T24681] Restarting kernel threads ... done. [ 758.251422][T24684] overlayfs: unrecognized mount option "smackfsfloor=\{" or missing value [ 758.617573][T24704] loop0: detected capacity change from 0 to 2048 [ 758.896671][T24724] netlink: 'syz.2.9340': attribute type 1 has an invalid length. [ 758.933491][T24724] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.9340'. [ 759.084428][T24735] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 759.206191][T24739] loop3: detected capacity change from 0 to 4096 [ 759.275680][T24739] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 759.496323][ T4199] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 759.531879][T24761] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9359'. [ 759.873651][T24780] loop0: detected capacity change from 0 to 512 [ 759.995213][T16916] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 760.018855][T24780] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 760.024055][T24780] EXT4-fs error (device loop0): ext4_xattr_block_list:713: inode #12: comm syz.0.9365: corrupted xattr block 6 [ 760.029202][T24780] EXT4-fs (loop0): Remounting filesystem read-only [ 760.251838][T16916] usb 2-1: Using ep0 maxpacket: 8 [ 760.301134][ T4295] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 760.380290][T16916] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 760.394896][T16916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.422137][T16916] usb 2-1: config 0 descriptor?? [ 760.561866][ T4295] usb 3-1: Using ep0 maxpacket: 32 [ 760.698425][ T4295] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.713375][ T4295] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 760.723709][ T4295] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 11 [ 760.734062][ T4295] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 760.754266][T16916] usb 2-1: string descriptor 0 read error: -71 [ 760.760514][T16916] uvcvideo 2-1:0.0: Found multiple Units with ID 1 [ 760.775558][T16916] usb 2-1: Found UVC 0.00 device (2833:0201) [ 760.786832][T16916] usb 2-1: No valid video chain found. [ 760.800860][T16916] usb 2-1: USB disconnect, device number 32 [ 760.829247][ T4295] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 760.848152][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 760.857165][ T4295] usb 3-1: SerialNumber: syz [ 760.887321][T24790] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 760.904890][T24790] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 760.926140][ T4295] hub 3-1:1.0: bad descriptor, ignoring hub [ 760.938107][ T4295] hub: probe of 3-1:1.0 failed with error -5 [ 760.960489][ T4295] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 761.161308][ T4295] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 761.218216][ T4295] usb 3-1: USB disconnect, device number 18 [ 761.388442][T24863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9401'. [ 761.716833][T24889] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 761.791429][ T4462] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 762.007776][T24905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9421'. [ 762.020775][T24902] loop0: detected capacity change from 0 to 4096 [ 762.044859][T24907] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 762.058153][T24907] FAT-fs (loop5): unable to read boot sector [ 762.109627][T24911] netlink: 'syz.3.9424': attribute type 2 has an invalid length. [ 762.123795][T24902] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 762.240257][T24902] ntfs3: loop0: failed to convert "c46c" to cp850 [ 762.454320][ T4462] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 762.477234][ T4462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.485430][ T4462] usb 2-1: Product: syz [ 762.514122][ T4462] usb 2-1: Manufacturer: syz [ 762.551115][ T4462] usb 2-1: SerialNumber: syz [ 762.561951][ T4462] usb 2-1: config 0 descriptor?? [ 762.569239][T24935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 762.602855][T24935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 762.618087][ T4462] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 762.626107][T24935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 762.944784][T24955] SET target dimension over the limit! [ 763.058699][T24963] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 763.087250][ T4462] gspca_sunplus: reg_w_riv err -71 [ 763.091630][T24965] loop3: detected capacity change from 0 to 256 [ 763.092730][ T4462] sunplus: probe of 2-1:0.0 failed with error -71 [ 763.106268][T24963] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 763.138801][ T4462] usb 2-1: USB disconnect, device number 33 [ 763.205919][T24965] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 763.279838][T24977] SET target dimension over the limit! [ 763.285790][T24975] x_tables: unsorted underflow at hook 3 [ 763.396851][T24983] usb usb8: usbfs: process 24983 (syz.3.9459) did not claim interface 0 before use [ 763.483313][T24991] program syz.3.9463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 763.964649][T25019] netlink: 'syz.1.9476': attribute type 1 has an invalid length. [ 764.295105][T25040] netlink: 'syz.2.9486': attribute type 3 has an invalid length. [ 764.342489][T25046] device bridge3 entered promiscuous mode [ 764.415352][T25050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9491'. [ 764.495980][T16921] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 764.552743][T25054] loop2: detected capacity change from 0 to 1024 [ 764.661925][T25062] device geneve1 entered promiscuous mode [ 764.905517][T25076] loop2: detected capacity change from 0 to 1024 [ 764.990881][T25076] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 765.052738][T16921] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 765.061878][T16921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.100038][T16921] usb 4-1: Product: syz [ 765.104694][T16921] usb 4-1: Manufacturer: syz [ 765.120373][T16921] usb 4-1: SerialNumber: syz [ 765.138808][T16921] usb 4-1: config 0 descriptor?? [ 765.206185][T16921] usb 4-1: selecting invalid altsetting 1 [ 765.213350][T16921] technisat-usb2: could not set alternate setting to 0 [ 765.284295][T25090] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.417801][ T4230] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 765.447489][T16921] technisat-usb2: firmware version: 0.0 [ 765.453304][T16921] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 765.509557][T25102] Cannot find del_set index 1 as target [ 765.589053][T25110] netlink: 'syz.4.9521': attribute type 1 has an invalid length. [ 765.698264][T16921] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 765.750532][T16921] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 765.809879][T16921] usb 4-1: USB disconnect, device number 19 [ 765.823947][ T4230] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 765.852015][ T4230] usb 3-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 765.920478][ T4230] usb 3-1: config 0 has no interface number 0 [ 766.121132][ T4230] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 766.146485][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.166095][ T4230] usb 3-1: Product: syz [ 766.170675][ T4230] usb 3-1: Manufacturer: syz [ 766.227701][ T4230] usb 3-1: SerialNumber: syz [ 766.236603][ T4230] usb 3-1: config 0 descriptor?? [ 766.249426][ T4462] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 766.319172][T25148] x_tables: duplicate underflow at hook 3 [ 766.395826][T25154] netlink: 'syz.3.9543': attribute type 3 has an invalid length. [ 766.409763][T25154] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9543'. [ 766.548762][ T4230] qmi_wwan: probe of 3-1:0.207 failed with error -22 [ 766.580982][ T4230] usb 3-1: USB disconnect, device number 19 [ 766.687468][ T4462] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 766.695600][ T4462] usb 1-1: config 0 has no interface number 0 [ 766.713452][ T4462] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 766.729275][ T4462] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid maxpacket 246, setting to 64 [ 766.848395][T25176] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 766.862901][T25176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 766.872285][T25176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 766.896687][T25176] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 766.933841][ T4462] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 766.942939][ T4462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.963463][ T4462] usb 1-1: Product: syz [ 766.969160][ T4462] usb 1-1: Manufacturer: syz [ 766.973807][ T4462] usb 1-1: SerialNumber: syz [ 766.983777][ T4462] usb 1-1: config 0 descriptor?? [ 767.019426][T25127] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 767.042321][ T4462] redrat3 1-1:0.83: Couldn't find all endpoints [ 767.187551][T25183] device ipip0 entered promiscuous mode [ 767.242748][T25186] device geneve1 entered promiscuous mode [ 767.310550][T16916] usb 1-1: USB disconnect, device number 31 [ 767.412196][T25192] netlink: 'syz.4.9561': attribute type 1 has an invalid length. [ 767.451782][T25192] netlink: 'syz.4.9561': attribute type 2 has an invalid length. [ 767.497848][T25192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9561'. [ 767.609964][T25204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9567'. [ 767.728308][T25214] device geneve1 entered promiscuous mode [ 768.002766][T16916] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 768.023915][T25230] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 768.287792][T25247] loop0: detected capacity change from 0 to 512 [ 768.350818][T25253] netlink: 'syz.3.9591': attribute type 1 has an invalid length. [ 768.366319][T25253] netlink: 'syz.3.9591': attribute type 2 has an invalid length. [ 768.374806][T25247] EXT4-fs (loop0): orphan cleanup on readonly fs [ 768.405125][T25247] EXT4-fs error (device loop0): ext4_find_extent:929: inode #4: comm syz.0.9588: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 768.409632][T16916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.447326][T16916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 768.539632][T25247] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 768.567735][T25247] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 768.586440][T25247] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 768.593219][T25247] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,journal_ioprio=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 768.616757][T25247] EXT4-fs error (device loop0): ext4_lookup:1855: inode #2: comm syz.0.9588: 'file0' linked to parent dir [ 768.629539][T16916] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 768.645813][T16916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.664870][T16916] usb 3-1: Product: syz [ 768.669182][T16916] usb 3-1: Manufacturer: syz [ 768.673816][T16916] usb 3-1: SerialNumber: syz [ 768.742360][T25273] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9602'. [ 768.770368][T25273] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9602'. [ 768.857776][ T4230] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 769.125037][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 769.242819][T16916] usb 3-1: cannot find UAC_HEADER [ 769.253530][ T4230] usb 2-1: config 2 has an invalid interface number: 222 but max is 0 [ 769.261744][ T4230] usb 2-1: config 2 has no interface number 0 [ 769.297434][T16916] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 769.305760][ T4230] usb 2-1: config 2 interface 222 has no altsetting 0 [ 769.319109][T16916] usb 3-1: USB disconnect, device number 20 [ 769.332203][T25305] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9617'. [ 769.334124][ T7034] udevd[7034]: setting mode of /dev/bus/usb/003/020 to 020664 failed: No such file or directory [ 769.352708][ T7034] udevd[7034]: setting owner of /dev/bus/usb/003/020 to uid=0, gid=0 failed: No such file or directory [ 769.499390][ T4230] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=af.17 [ 769.519823][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.542827][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.563473][ T4230] usb 2-1: Product: syz [ 769.567679][ T4230] usb 2-1: Manufacturer: syz [ 769.592870][ T4230] usb 2-1: SerialNumber: syz [ 769.633900][T25322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9625'. [ 769.974741][ T4230] usb 2-1: USB disconnect, device number 34 [ 770.105543][T25355] sctp: [Deprecated]: syz.2.9640 (pid 25355) Use of int in maxseg socket option. [ 770.105543][T25355] Use struct sctp_assoc_value instead [ 770.546913][T16485] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 770.607742][T25385] vxcan1 speed is unknown, defaulting to 1000 [ 770.658351][T25389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9657'. [ 770.931922][T16485] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 770.942778][T16485] usb 3-1: config 0 has no interface number 0 [ 771.135035][T16485] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 771.144184][T16485] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.170103][T16485] usb 3-1: Product: syz [ 771.178293][T16485] usb 3-1: Manufacturer: syz [ 771.197899][T16485] usb 3-1: SerialNumber: syz [ 771.233749][T16485] usb 3-1: config 0 descriptor?? [ 771.600029][T25434] tmpfs: Bad value for 'mpol' [ 771.746506][T16485] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 771.772978][T25447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9685'. [ 771.791113][T16485] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 771.821322][T16485] asix: probe of 3-1:0.251 failed with error -5 [ 771.860264][T16485] usb 3-1: USB disconnect, device number 21 [ 772.064025][T25469] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 772.070599][T25469] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 772.087406][T25469] vhci_hcd vhci_hcd.0: Device attached [ 772.114901][T25469] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 772.121478][T25469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 772.133761][T25469] vhci_hcd vhci_hcd.0: Device attached [ 772.141774][T25473] vhci_hcd: connection closed [ 772.143911][ T1236] vhci_hcd: stop threads [ 772.160387][T25470] vhci_hcd: connection closed [ 772.162041][ T1236] vhci_hcd: release socket [ 772.182873][ T1236] vhci_hcd: disconnect device [ 772.210261][ T1236] vhci_hcd: stop threads [ 772.223937][ T1236] vhci_hcd: release socket [ 772.230069][ T1236] vhci_hcd: disconnect device [ 772.302453][T16916] vhci_hcd: vhci_device speed not set [ 772.465839][T25495] Cannot find del_set index 4 as target [ 772.568951][T25502] netlink: 'syz.3.9710': attribute type 1 has an invalid length. [ 772.598779][T25502] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9710'. [ 772.600554][T16485] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 772.620971][T25502] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9710'. [ 772.888155][T16485] usb 5-1: Using ep0 maxpacket: 16 [ 773.018658][T25521] __nla_validate_parse: 1 callbacks suppressed [ 773.018678][T25521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9719'. [ 773.187692][T16485] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 773.196828][T16485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.234756][T16485] usb 5-1: Product: syz [ 773.247152][T16485] usb 5-1: Manufacturer: syz [ 773.261487][T16485] usb 5-1: SerialNumber: syz [ 773.303044][T16485] usb 5-1: config 0 descriptor?? [ 773.343470][T25533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9724'. [ 773.371496][T16485] gspca_main: spca508-2.14.0 probing 041e:4018 [ 773.576974][T25547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9731'. [ 773.759328][T25556] netlink: 'syz.1.9737': attribute type 5 has an invalid length. [ 773.839690][T16485] gspca_spca508: reg_read err -71 [ 773.861374][T16485] gspca_spca508: reg_read err -71 [ 773.885331][T16485] gspca_spca508: reg_read err -71 [ 773.914384][T16485] gspca_spca508: reg_read err -71 [ 773.946604][T16485] gspca_spca508: reg write: error -71 [ 773.954735][T16485] spca508: probe of 5-1:0.0 failed with error -71 [ 774.009334][T16485] usb 5-1: USB disconnect, device number 29 [ 774.147131][T25571] loop0: detected capacity change from 0 to 2048 [ 774.210212][T25571] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 774.313256][T25580] Cannot find map_set index 135 as target [ 774.617166][T25596] tmpfs: Bad value for 'uid' [ 774.955055][T25623] netlink: 'syz.4.9768': attribute type 1 has an invalid length. [ 774.996588][T25623] netlink: 'syz.4.9768': attribute type 3 has an invalid length. [ 775.026666][T25623] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9768'. [ 775.058342][T25623] NCSI netlink: No device for ifindex 55159 [ 775.645318][T25675] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 775.684512][T25675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 775.713842][T25675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 775.806229][T25687] netlink: 'syz.1.9800': attribute type 12 has an invalid length. [ 775.842120][T25687] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9800'. [ 776.130594][T25707] loop2: detected capacity change from 0 to 128 [ 776.207472][T25707] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 776.247351][T25707] hpfs: filesystem error: improperly stopped [ 776.253414][T25707] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 776.287035][T25707] hpfs: You really don't want any checks? You are crazy... [ 776.335713][T25721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9817'. [ 776.350901][T25707] hpfs: Code page index out of array [ 776.370697][T25707] hpfs: code page support is disabled [ 776.391729][T25707] hpfs: hpfs_map_4sectors(): unaligned read [ 776.400512][T25707] hpfs: hpfs_map_4sectors(): unaligned read [ 776.409219][T25707] hpfs: filesystem error: unable to find root dir [ 776.448006][T16916] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 776.458018][T25725] netlink: 'syz.0.9820': attribute type 6 has an invalid length. [ 776.483031][T25728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 776.492433][T25728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 776.499927][T25728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 776.833192][T16916] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 776.859676][T16916] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 776.875021][T16921] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 776.926393][T16916] usb 5-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 776.942148][T16916] usb 5-1: config 0 has no interfaces? [ 776.959199][T16916] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 776.980857][T16916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.007142][T16916] usb 5-1: config 0 descriptor?? [ 777.270472][ T7032] usb 5-1: USB disconnect, device number 30 [ 777.282143][T16921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 777.405806][T25786] tmpfs: Bad value for 'mpol' [ 777.474603][T16921] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 777.519322][T16921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.538626][T16916] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 777.560408][T16921] usb 1-1: Product: syz [ 777.564623][T16921] usb 1-1: Manufacturer: syz [ 777.596749][T16921] usb 1-1: SerialNumber: syz [ 777.616028][T16921] usb 1-1: config 0 descriptor?? [ 777.690178][T16921] powermate: probe of 1-1:0.0 failed with error -5 [ 777.795390][T16916] usb 4-1: Using ep0 maxpacket: 32 [ 777.907850][T16921] usb 1-1: USB disconnect, device number 32 [ 777.923676][T16916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.945187][T16916] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.079351][T25807] device xfrm0 entered promiscuous mode [ 778.169404][T16916] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 778.191671][T16916] usb 4-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 778.215856][T16916] usb 4-1: Product: syz [ 778.220089][T16916] usb 4-1: Manufacturer: syz [ 778.265024][T16916] usb 4-1: SerialNumber: syz [ 778.333343][T16916] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input55 [ 778.587869][T16916] usb 4-1: USB disconnect, device number 20 [ 778.610769][T16916] appletouch 4-1:1.0: input: appletouch disconnected [ 779.133129][T25821] loop2: detected capacity change from 0 to 32768 [ 779.407156][T25872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9890'. [ 779.431884][T25874] ieee802154 phy0 wpan0: encryption failed: -22 [ 779.679125][T25891] 9pnet: Insufficient options for proto=fd [ 779.922532][T25908] netlink: 'syz.3.9908': attribute type 10 has an invalid length. [ 779.965950][T25908] bond0: (slave wlan1): Opening slave failed [ 780.288298][ T7020] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 780.370287][T25934] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 780.574102][T25948] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.9929'. [ 780.768460][ T7020] usb 2-1: unable to get BOS descriptor or descriptor too short [ 780.833792][ T7020] usb 2-1: not running at top speed; connect to a high speed hub [ 780.941550][ T7020] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.961495][ T7020] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 780.996376][ T7020] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 781.172658][T25979] kAFS: unable to lookup cell '.,' [ 781.217140][T25983] ip6t_srh: unknown srh match flags 4001 [ 781.251127][ T7020] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 781.268731][ T7020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.302952][ T7020] usb 2-1: Product: syz [ 781.307204][ T7020] usb 2-1: Manufacturer: syz [ 781.311841][ T7020] usb 2-1: SerialNumber: syz [ 781.336926][T25987] netlink: 'syz.0.9948': attribute type 1 has an invalid length. [ 781.376464][T25987] netlink: 'syz.0.9948': attribute type 2 has an invalid length. [ 781.423700][T25987] netlink: 'syz.0.9948': attribute type 2 has an invalid length. [ 781.432875][T25987] netlink: 'syz.0.9948': attribute type 2 has an invalid length. [ 781.444070][T25987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9948'. [ 781.737338][T26007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9958'. [ 781.821920][ T7020] usb 2-1: USB disconnect, device number 35 [ 782.128011][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 782.253176][ T7032] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 782.509879][ T7032] usb 5-1: Using ep0 maxpacket: 32 [ 782.648966][ T7032] usb 5-1: config 5 has an invalid interface number: 130 but max is 0 [ 782.657236][ T7032] usb 5-1: config 5 has no interface number 0 [ 782.727707][ T7032] usb 5-1: config 5 interface 130 has no altsetting 0 [ 782.887236][T26083] xt_recent: Unsupported userspace flags (000000b1) [ 782.958860][ T7032] usb 5-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=8b.61 [ 782.984476][ T7032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.033378][ T7032] usb 5-1: Product: syz [ 783.037593][ T7032] usb 5-1: Manufacturer: syz [ 783.042211][ T7032] usb 5-1: SerialNumber: syz [ 783.183612][T26103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 783.190940][T26103] IPv6: NLM_F_CREATE should be set when creating new route [ 783.198329][T26103] IPv6: NLM_F_CREATE should be set when creating new route [ 783.242980][T26108] netlink: 'syz.2.10009': attribute type 12 has an invalid length. [ 783.253876][T26106] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10007'. [ 783.307276][T26111] futex_wake_op: syz.0.10010 tries to shift op by 144; fix this program [ 783.352735][T26113] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10011'. [ 783.365263][T26111] futex_wake_op: syz.0.10010 tries to shift op by 144; fix this program [ 783.419612][ T7032] mct_u232 5-1:5.130: MCT U232 converter detected [ 783.426842][ T7032] mct_u232 ttyUSB0: expected endpoint missing [ 783.482196][ T7032] usb 5-1: USB disconnect, device number 31 [ 783.492387][ T7032] mct_u232 5-1:5.130: device disconnected [ 783.721593][T26133] loop2: detected capacity change from 0 to 2048 [ 783.769425][T26133] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 783.805662][T26137] netlink: 766 bytes leftover after parsing attributes in process `syz.3.10022'. [ 783.833538][T26133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 783.912373][T16916] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 784.061208][T26151] loop3: detected capacity change from 0 to 24 [ 784.120408][T26157] netlink: 'syz.4.10032': attribute type 1 has an invalid length. [ 784.139675][T26157] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10032'. [ 784.201040][T16916] usb 2-1: Using ep0 maxpacket: 8 [ 784.284661][ T4230] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 784.328289][T16916] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.360158][T16916] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.385465][T16916] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 784.418857][T16916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 784.455303][T16916] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 3.00 [ 784.464404][T16916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.506721][T16916] usb 2-1: config 0 descriptor?? [ 784.568346][T16916] usbhid 2-1:0.0: can't add hid device: -22 [ 784.586713][T16916] usbhid: probe of 2-1:0.0 failed with error -22 [ 784.682523][ T4230] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 784.703657][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.733357][ T4230] usb 3-1: config 0 has no interface number 0 [ 784.746376][ T4230] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 784.786704][ T4230] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 784.835367][T16916] usb 2-1: USB disconnect, device number 36 [ 784.928088][T26193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10049'. [ 785.004033][ T4230] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 785.023331][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.042764][ T4230] usb 3-1: Product: syz [ 785.051642][ T4230] usb 3-1: Manufacturer: syz [ 785.062647][ T4230] usb 3-1: SerialNumber: syz [ 785.081280][ T4230] usb 3-1: config 0 descriptor?? [ 785.173251][T26208] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 785.196443][T26208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 785.409458][T26224] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.10063'. [ 785.463014][T26228] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10064'. [ 785.612209][ T4230] usbtouchscreen: probe of 3-1:0.117 failed with error -71 [ 785.638380][ T4230] usb 3-1: USB disconnect, device number 22 [ 785.650557][T26236] netlink: 'syz.3.10069': attribute type 1 has an invalid length. [ 785.909177][ T4462] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 786.036294][ T26] audit: type=1400 audit(742.997:54): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=26253 comm="syz.3.10078" [ 786.176612][T16916] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 786.316332][ T4462] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.345695][T26264] loop3: detected capacity change from 0 to 4096 [ 786.347099][T26244] loop0: detected capacity change from 0 to 32768 [ 786.388338][T26264] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 786.455440][T26244] ERROR: (device loop0): diAllocAG: error reading iag [ 786.455440][T26244] [ 786.473643][T26264] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 786.489681][T26244] ialloc: diAlloc returned -5! [ 786.530403][ T4462] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 786.563157][ T4462] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.571206][ T4462] usb 5-1: Product: syz [ 786.582936][T16916] usb 2-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config [ 786.595862][ T4462] usb 5-1: Manufacturer: syz [ 786.600524][ T4462] usb 5-1: SerialNumber: syz [ 786.616438][T16916] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 116, changing to 10 [ 786.641820][ T4462] usb 5-1: config 0 descriptor?? [ 786.668617][T16916] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 51186, setting to 1024 [ 786.693106][ T4462] CoreChips: probe of 5-1:0.0 failed with error -22 [ 786.892991][T16916] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 786.903816][T26284] UBIFS error (pid: 26284): cannot open "(null)", error -22 [ 786.912963][T16916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.962632][T16916] usb 2-1: Product: syz [ 786.967917][T16916] usb 2-1: Manufacturer: syz [ 786.972558][T16916] usb 2-1: SerialNumber: syz [ 787.032243][T26238] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 787.101203][T26294] netlink: 'syz.3.10098': attribute type 2 has an invalid length. [ 787.188379][T26301] loop2: detected capacity change from 0 to 256 [ 787.242104][T26305] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 787.257184][T26301] exfat: Deprecated parameter 'utf8' [ 787.263036][T26301] exfat: Deprecated parameter 'utf8' [ 787.293574][T26309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 787.321609][T26301] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 787.364383][T26301] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 787.376988][T16916] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 787.400953][T16916] usb 2-1: USB disconnect, device number 37 [ 787.451954][T26313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10107'. [ 787.471234][T26315] loop3: detected capacity change from 0 to 16 [ 787.484433][T26313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10107'. [ 787.529804][T26315] erofs: (device loop3): mounted with root inode @ nid 36. [ 787.684354][T26326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10113'. [ 788.143624][ T4462] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 788.265511][T26362] device vti0 entered promiscuous mode [ 788.424966][ T4462] usb 4-1: Using ep0 maxpacket: 16 [ 788.439481][T26374] loop2: detected capacity change from 0 to 512 [ 788.477550][T26376] netlink: 'syz.0.10138': attribute type 1 has an invalid length. [ 788.492328][T26376] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10138'. [ 788.608177][T26374] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 788.635673][ T4462] usb 4-1: unable to get BOS descriptor or descriptor too short [ 788.673316][T26374] [ 788.675713][T26374] ====================================================== [ 788.682950][T26374] WARNING: possible circular locking dependency detected [ 788.690011][T26374] syzkaller #0 Not tainted [ 788.694476][T26374] ------------------------------------------------------ [ 788.701521][T26374] syz.2.10137/26374 is trying to acquire lock: [ 788.707728][T26374] ffff88806fd24428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 788.716741][T26374] [ 788.716741][T26374] but task is already holding lock: [ 788.724142][T26374] ffff88806ff03e48 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 788.733579][T26374] [ 788.733579][T26374] which lock already depends on the new lock. [ 788.733579][T26374] [ 788.744013][T26374] [ 788.744013][T26374] the existing dependency chain (in reverse order) is: [ 788.753062][T26374] [ 788.753062][T26374] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 788.760923][T26374] down_read+0x44/0x2e0 [ 788.765714][T26374] ext4_map_blocks+0x350/0x1a50 [ 788.771134][T26374] ext4_getblk+0x176/0x670 [ 788.776105][T26374] ext4_bread+0x26/0x180 [ 788.780903][T26374] ext4_quota_read+0x1ac/0x390 [ 788.786316][T26374] find_tree_dqentry+0x187/0xb30 [ 788.791813][T26374] find_tree_dqentry+0x3e8/0xb30 [ 788.797305][T26374] find_tree_dqentry+0x3e8/0xb30 [ 788.802799][T26374] find_tree_dqentry+0x3e8/0xb30 [ 788.808295][T26374] qtree_read_dquot+0x122/0x690 [ 788.813706][T26374] v2_read_dquot+0xc0/0x110 [ 788.818776][T26374] dquot_acquire+0x152/0x520 [ 788.823937][T26374] ext4_acquire_dquot+0x2e3/0x4a0 [ 788.829537][T26374] dqget+0x713/0xbb0 [ 788.834118][T26374] __dquot_initialize+0x324/0xd00 [ 788.839707][T26374] ext4_process_orphan+0x4c/0x2e0 [ 788.845298][T26374] ext4_orphan_cleanup+0xad8/0x1320 [ 788.851066][T26374] ext4_fill_super+0x8c65/0x93f0 [ 788.856573][T26374] mount_bdev+0x28a/0x3c0 [ 788.861537][T26374] legacy_get_tree+0xe6/0x180 [ 788.866834][T26374] vfs_get_tree+0x88/0x270 [ 788.871813][T26374] do_new_mount+0x247/0xa40 [ 788.876938][T26374] __se_sys_mount+0x2e3/0x3d0 [ 788.882179][T26374] do_syscall_64+0x4c/0xa0 [ 788.887154][T26374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 788.893619][T26374] [ 788.893619][T26374] -> #1 (&s->s_dquot.dqio_sem [ 788.893634][ T4462] usb 4-1: config 4 has an invalid interface number: 127 but max is 0 [ 788.900506][T26374] ){++++}-{3:3}: [ 788.900525][T26374] down_read+0x44/0x2e0 [ 788.900551][T26374] v2_read_dquot+0x4a/0x110 [ 788.922027][T26374] dquot_acquire+0x152/0x520 [ 788.927310][T26374] ext4_acquire_dquot+0x2e3/0x4a0 [ 788.932908][T26374] dqget+0x713/0xbb0 [ 788.937363][T26374] __dquot_initialize+0x324/0xd00 [ 788.942959][T26374] ext4_process_orphan+0x4c/0x2e0 [ 788.944299][ T4462] usb 4-1: config 4 has no interface number 0 [ 788.948541][T26374] ext4_orphan_cleanup+0xad8/0x1320 [ 788.948566][T26374] ext4_fill_super+0x8c65/0x93f0 [ 788.948587][T26374] mount_bdev+0x28a/0x3c0 [ 788.948607][T26374] legacy_get_tree+0xe6/0x180 [ 788.948630][T26374] vfs_get_tree+0x88/0x270 [ 788.948651][T26374] do_new_mount+0x247/0xa40 [ 788.948671][T26374] __se_sys_mount+0x2e3/0x3d0 [ 788.948690][T26374] do_syscall_64+0x4c/0xa0 [ 788.948709][T26374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 788.995946][ T4462] usb 4-1: config 4 interface 127 has no altsetting 0 [ 788.996187][T26374] [ 788.996187][T26374] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 789.017235][T26374] __lock_acquire+0x2c66/0x7b50 [ 789.022740][T26374] lock_acquire+0x19e/0x400 [ 789.027829][T26374] __mutex_lock_common+0x1e5/0x2400 [ 789.033590][T26374] mutex_lock_nested+0x17/0x20 [ 789.038933][T26374] dquot_commit+0x5a/0x410 [ 789.041995][ T7032] usb 5-1: USB disconnect, device number 32 [ 789.043907][T26374] ext4_write_dquot+0x1f0/0x360 [ 789.055190][T26374] mark_all_dquot_dirty+0xf9/0x400 [ 789.060892][T26374] __dquot_free_space+0x7c3/0xb80 [ 789.066491][T26374] ext4_free_blocks+0x1b1b/0x24c0 [ 789.072245][T26374] ext4_ext_remove_space+0x2106/0x41a0 [ 789.078320][T26374] ext4_ext_truncate+0x182/0x230 [ 789.083820][T26374] ext4_truncate+0xa41/0x1190 [ 789.089199][T26374] ext4_process_orphan+0x1a9/0x2e0 [ 789.094869][T26374] ext4_orphan_cleanup+0xad8/0x1320 [ 789.100626][T26374] ext4_fill_super+0x8c65/0x93f0 [ 789.106134][T26374] mount_bdev+0x28a/0x3c0 [ 789.111028][T26374] legacy_get_tree+0xe6/0x180 [ 789.116255][T26374] vfs_get_tree+0x88/0x270 [ 789.121234][T26374] do_new_mount+0x247/0xa40 [ 789.126295][T26374] __se_sys_mount+0x2e3/0x3d0 [ 789.131545][T26374] do_syscall_64+0x4c/0xa0 [ 789.136516][T26374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 789.142969][T26374] [ 789.142969][T26374] other info that might help us debug this: [ 789.142969][T26374] [ 789.153241][T26374] Chain exists of: [ 789.153241][T26374] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 789.153241][T26374] [ 789.166957][T26374] Possible unsafe locking scenario: [ 789.166957][T26374] [ 789.174435][T26374] CPU0 CPU1 [ 789.179828][T26374] ---- ---- [ 789.185241][T26374] lock(&ei->i_data_sem/2); [ 789.189868][T26374] lock(&s->s_dquot.dqio_sem); [ 789.197248][T26374] lock(&ei->i_data_sem/2); [ 789.204391][T26374] lock(&dquot->dq_lock); [ 789.208806][T26374] [ 789.208806][T26374] *** DEADLOCK *** [ 789.208806][T26374] [ 789.216954][T26374] 4 locks held by syz.2.10137/26374: [ 789.222245][T26374] #0: ffff888057a8e0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x200/0x970 [ 789.232358][T26374] #1: ffff88806ff03fc0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_process_orphan+0x165/0x2e0 [ 789.243332][T26374] #2: ffff88806ff03e48 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 789.253096][T26374] #3: ffffffff8c4418d8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 789.262162][T26374] [ 789.262162][T26374] stack backtrace: [ 789.268049][T26374] CPU: 1 PID: 26374 Comm: syz.2.10137 Not tainted syzkaller #0 [ 789.275619][T26374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 789.285696][T26374] Call Trace: [ 789.289039][T26374] [ 789.292111][T26374] dump_stack_lvl+0x188/0x250 [ 789.296987][T26374] ? load_image+0x410/0x410 [ 789.301547][T26374] ? show_regs_print_info+0x20/0x20 [ 789.306772][T26374] ? print_circular_bug+0x12b/0x1a0 [ 789.311996][T26374] check_noncircular+0x296/0x330 [ 789.316979][T26374] ? add_chain_block+0x9b0/0x9b0 [ 789.321926][T26374] ? lockdep_lock+0xf1/0x1f0 [ 789.326531][T26374] ? mark_lock+0x94/0x320 [ 789.330997][T26374] ? _find_first_zero_bit+0xd1/0xf0 [ 789.336271][T26374] __lock_acquire+0x2c66/0x7b50 [ 789.341142][T26374] ? __lock_acquire+0x7b50/0x7b50 [ 789.346193][T26374] ? verify_lock_unused+0x140/0x140 [ 789.351426][T26374] ? check_path+0x21/0x40 [ 789.355779][T26374] ? check_noncircular+0x189/0x330 [ 789.360905][T26374] ? add_chain_block+0x9b0/0x9b0 [ 789.365856][T26374] ? lockdep_lock+0xf1/0x1f0 [ 789.370468][T26374] lock_acquire+0x19e/0x400 [ 789.374982][T26374] ? dquot_commit+0x5a/0x410 [ 789.379611][T26374] ? __might_sleep+0xf0/0xf0 [ 789.384266][T26374] ? read_lock_is_recursive+0x10/0x10 [ 789.389657][T26374] __mutex_lock_common+0x1e5/0x2400 [ 789.394864][T26374] ? dquot_commit+0x5a/0x410 [ 789.399521][T26374] ? dquot_commit+0x5a/0x410 [ 789.404116][T26374] ? __might_sleep+0xf0/0xf0 [ 789.408710][T26374] ? mutex_lock_io_nested+0x60/0x60 [ 789.413920][T26374] mutex_lock_nested+0x17/0x20 [ 789.418694][T26374] dquot_commit+0x5a/0x410 [ 789.423143][T26374] ext4_write_dquot+0x1f0/0x360 [ 789.428017][T26374] mark_all_dquot_dirty+0xf9/0x400 [ 789.433158][T26374] __dquot_free_space+0x7c3/0xb80 [ 789.438248][T26374] ext4_free_blocks+0x1b1b/0x24c0 [ 789.443325][T26374] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 789.450713][T26374] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 789.456802][T26374] ? ext4_inode_journal_mode+0x189/0x460 [ 789.462440][T26374] ? ext4_ext_remove_space+0x2001/0x41a0 [ 789.468084][T26374] ext4_ext_remove_space+0x2106/0x41a0 [ 789.473567][T26374] ? preempt_schedule_common+0xa5/0xd0 [ 789.479046][T26374] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 789.484860][T26374] ? ext4_es_remove_extent+0x29f/0x430 [ 789.490364][T26374] ext4_ext_truncate+0x182/0x230 [ 789.495355][T26374] ext4_truncate+0xa41/0x1190 [ 789.500076][T26374] ? __ext4_mark_inode_dirty+0x6c0/0x6c0 [ 789.505736][T26374] ext4_process_orphan+0x1a9/0x2e0 [ 789.510857][T26374] ext4_orphan_cleanup+0xad8/0x1320 [ 789.516061][T26374] ? ext4_orphan_del+0xc90/0xc90 [ 789.521005][T26374] ? errseq_check_and_advance+0x62/0x120 [ 789.526651][T26374] ext4_fill_super+0x8c65/0x93f0 [ 789.531603][T26374] ? format_decode+0x8b1/0x1330 [ 789.536502][T26374] ? ext4_mount+0x40/0x40 [ 789.540883][T26374] ? set_blocksize+0x1f1/0x360 [ 789.545736][T26374] ? sb_set_blocksize+0xa5/0xe0 [ 789.550605][T26374] mount_bdev+0x28a/0x3c0 [ 789.554954][T26374] ? ext4_mount+0x40/0x40 [ 789.559288][T26374] legacy_get_tree+0xe6/0x180 [ 789.564004][T26374] ? ext4_errno_to_code+0x160/0x160 [ 789.569218][T26374] vfs_get_tree+0x88/0x270 [ 789.573645][T26374] do_new_mount+0x247/0xa40 [ 789.578163][T26374] __se_sys_mount+0x2e3/0x3d0 [ 789.582866][T26374] ? __x64_sys_mount+0xc0/0xc0 [ 789.587643][T26374] ? lockdep_hardirqs_on+0x94/0x140 [ 789.592851][T26374] ? __x64_sys_mount+0x1c/0xc0 [ 789.597651][T26374] do_syscall_64+0x4c/0xa0 [ 789.602072][T26374] ? clear_bhb_loop+0x30/0x80 [ 789.606791][T26374] ? clear_bhb_loop+0x30/0x80 [ 789.611471][T26374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 789.617381][T26374] RIP: 0033:0x7fb79e8c928a [ 789.622013][T26374] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.641448][ T4462] usb 4-1: string descriptor 0 read error: -22 [ 789.641707][T26374] RSP: 002b:00007fb79cb1fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 789.648555][ T4462] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 789.656302][T26374] RAX: ffffffffffffffda RBX: 00007fb79cb1fee0 RCX: 00007fb79e8c928a [ 789.656321][T26374] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 00007fb79cb1fea0 [ 789.656337][T26374] RBP: 0000200000000100 R08: 00007fb79cb1fee0 R09: 0000000003000010 [ 789.656351][T26374] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000080 [ 789.656365][T26374] R13: 00007fb79cb1fea0 R14: 000000000000051a R15: 0000200000000000 [ 789.656398][T26374] [ 789.667330][T26374] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.10137: corrupted inode contents [ 789.736926][T26374] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.10137: mark_inode_dirty error [ 789.756742][ T4462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.775379][T26374] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.10137: corrupted inode contents [ 789.800541][T26374] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.10137: mark_inode_dirty error [ 789.818450][T26374] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.10137: corrupted inode contents [ 789.832335][T26374] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.10137: mark_inode_dirty error [ 789.849443][T26374] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.10137: corrupted inode contents [ 789.862187][T26374] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 789.872968][T26374] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.10137: corrupted inode contents [ 789.885673][T26374] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.10137: mark_inode_dirty error [ 789.899251][T26374] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 789.909012][T26374] EXT4-fs (loop2): 1 truncate cleaned up [ 789.914808][T26374] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 789.949538][T26374] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz.2.10137: directory missing '.' [ 790.070449][ T4230] usb 4-1: USB disconnect, device number 21 [ 790.625485][ T1423] ieee802154 phy0 wpan0: encryption failed: -22