last executing test programs: 3.538344324s ago: executing program 1 (id=6852): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000001880)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000400)="00214717a70700000000030600710a5e31163ceb9d0000000000ffff03425d4d50e7182ce07500000000000000d9d17cd1cb", 0x32}], 0x1, 0x0, 0x400) 3.478375339s ago: executing program 1 (id=6854): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.379244207s ago: executing program 1 (id=6862): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000066930108205050088000002030109021b000100000000090402000191baf20509050b02"], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.294590364s ago: executing program 0 (id=6866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getpgrp(0x0) 3.264791917s ago: executing program 0 (id=6869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}, 0xab}], 0x1, 0x10003, 0x0) 3.251780258s ago: executing program 0 (id=6871): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 3.2332677s ago: executing program 0 (id=6873): open(&(0x7f0000000000)='./bus\x00', 0x60942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000000400), 0x200808, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x801c581f, 0x0) 3.22126152s ago: executing program 0 (id=6875): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001b00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0xff}]}) 3.088389791s ago: executing program 0 (id=6880): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000200620180100000000000109022400010000002009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "00020400"}]}}, 0x0}, 0x0) 2.87210777s ago: executing program 4 (id=6894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2.87186253s ago: executing program 4 (id=6895): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_create(0x4, 0x0) 2.850168641s ago: executing program 4 (id=6896): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)=ANY=[@ANYBLOB="48000000100039040000000000000000000003e4", @ANYRES32=r2, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r1], 0x48}}, 0x0) 2.843187342s ago: executing program 4 (id=6897): syz_mount_image$exfat(&(0x7f00000008c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000001cc0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000006,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c696f636861727365743d6b6f69382d722c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303430362c666d61736b3d30303030303030303030303030303030303030303030352c666d61736b3d30303030303030362c666d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d6370383634236f626a5f726f6c6f72733d636f6e74696e75652c7365636c6162656c2c00bf17f1f57309ade7d0229b5f66a73a427c88c98c5aa9d700e383edf7351cc6c70bb8a196704c1978d95ed9132e6d8ba14558b574"], 0x1, 0x1524, &(0x7f00000037c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) 2.763115189s ago: executing program 4 (id=6898): bpf$OBJ_GET_MAP(0x11, &(0x7f0000010f00)=@generic={&(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a57482cdb4070d"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x896c7c90263cadcf, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 2.762581139s ago: executing program 4 (id=6899): r0 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x208}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b80)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) 1.823934417s ago: executing program 2 (id=6903): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}]}]}, 0x60}}, 0x0) 1.78868694s ago: executing program 2 (id=6904): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e69314"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000001d0000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000300), 0x0}, 0x20) 1.781770301s ago: executing program 2 (id=6905): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x10, 0x3, 0x0) io_setup(0xa, &(0x7f0000000380)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1, r0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x1, r2}]) 1.67649096s ago: executing program 2 (id=6906): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.67584983s ago: executing program 2 (id=6907): r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x802) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) write$evdev(r0, 0x0, 0x0) 1.616243935s ago: executing program 2 (id=6908): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002208000000936bc7324d2401"], 0x0}, 0x0) 260.005479ms ago: executing program 3 (id=6954): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100007f0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fchmod(r2, 0x48) 259.538389ms ago: executing program 3 (id=6955): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 251.883009ms ago: executing program 3 (id=6956): pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="4c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB="080004000020"], 0x4c}}, 0x0) 244.29591ms ago: executing program 3 (id=6957): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) 237.73723ms ago: executing program 3 (id=6958): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000240), 0x10080, 0x0) 224.833582ms ago: executing program 3 (id=6959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pause() 109.494011ms ago: executing program 1 (id=6960): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000540)={[{@jqfmt_vfsv0}]}, 0x1, 0x439, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 95.767032ms ago: executing program 1 (id=6961): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000002e00)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d9, &(0x7f0000002e80)="$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") mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x20, 0x0) rmdir(&(0x7f0000000100)='./file2\x00') unlink(&(0x7f0000000080)='./file0/file0\x00') 0s ago: executing program 1 (id=6962): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000020303"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): T329] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 297.427085][ T329] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 297.438866][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.449686][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.459280][ T329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 297.472114][ T329] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 297.481036][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.489181][ T329] usb 3-1: config 0 descriptor?? [ 297.581082][ T28] audit: type=1326 audit(2268435629.643:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.1.6067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f870a17dff9 code=0x0 [ 297.646884][T14796] loop3: detected capacity change from 0 to 40427 [ 297.653693][T14796] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 297.661211][T14796] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 297.669976][T14796] F2FS-fs (loop3): invalid crc value [ 297.676277][T14796] F2FS-fs (loop3): Found nat_bits in checkpoint [ 297.716018][T14796] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 297.725388][T14796] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 297.852607][T14815] syz.3.6072[14815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.852665][T14815] syz.3.6072[14815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.865107][T14815] loop3: detected capacity change from 0 to 16 [ 297.883107][T14815] erofs: (device loop3): mounted with root inode @ nid 36. [ 297.914178][T14819] loop3: detected capacity change from 0 to 4096 [ 297.920510][T14819] EXT4-fs: Ignoring removed nobh option [ 297.925894][T14819] EXT4-fs: Ignoring removed i_version option [ 297.934104][T14819] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 297.978241][T13883] EXT4-fs (loop3): unmounting filesystem. [ 298.004890][ T329] hid-picolcd 0003:04D8:C002.005D: unbalanced collection at end of report description [ 298.014909][ T329] hid-picolcd 0003:04D8:C002.005D: device report parse failed [ 298.026761][ T329] hid-picolcd: probe of 0003:04D8:C002.005D failed with error -22 [ 298.231133][ T578] usb 3-1: USB disconnect, device number 62 [ 298.372047][T14825] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 298.386060][T14825] overlayfs: filesystem on './bus' not supported as upperdir [ 298.816859][ T311] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 299.062713][ T3046] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 299.201936][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.222621][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.319575][ T311] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 299.330047][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 299.342888][ T311] usb 4-1: SerialNumber: syz [ 299.403667][T14871] syz.4.6096[14871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.403737][T14871] syz.4.6096[14871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.447658][ T3046] usb 3-1: config 189 has an invalid descriptor of length 60, skipping remainder of the config [ 299.540709][T14877] loop0: detected capacity change from 0 to 2048 [ 299.555860][T14877] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 299.564139][T14877] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 299.582310][T14381] EXT4-fs (loop0): unmounting filesystem. [ 299.607336][T14886] SELinux: Context ì is not valid (left unmapped). [ 299.621988][T14888] loop1: detected capacity change from 0 to 256 [ 299.651589][ T311] usb 4-1: 0:2 : does not exist [ 299.656412][ T3046] usb 3-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb [ 299.665488][ T3046] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 299.673755][ T3046] usb 3-1: Product: syz [ 299.677886][ T3046] usb 3-1: Manufacturer: syz [ 299.679530][T14893] loop0: detected capacity change from 0 to 4096 [ 299.682287][ T3046] usb 3-1: SerialNumber: syz [ 299.693326][T14893] EXT4-fs: Ignoring removed nobh option [ 299.698868][T14893] EXT4-fs: Ignoring removed i_version option [ 299.709601][T14893] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 299.710963][T14900] loop1: detected capacity change from 0 to 256 [ 299.724847][T14900] exfat: Deprecated parameter 'utf8' [ 299.732691][T14900] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 299.773743][T14381] EXT4-fs (loop0): unmounting filesystem. [ 299.779324][ T329] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 299.864565][ T311] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 299.873346][ T311] usb 4-1: USB disconnect, device number 54 [ 299.875823][T14919] loop1: detected capacity change from 0 to 2048 [ 299.965394][ T28] audit: type=1400 audit(2268435631.870:4816): avc: denied { module_load } for pid=14920 comm="syz.1.6118" path="/30/bus" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 300.067588][ T329] usb 5-1: Using ep0 maxpacket: 8 [ 300.067743][ T3046] hub 3-1:189.0: bad descriptor, ignoring hub [ 300.078661][ T3046] hub: probe of 3-1:189.0 failed with error -5 [ 300.110860][ T3046] usb 3-1: USB disconnect, device number 63 [ 300.203630][T14943] loop1: detected capacity change from 0 to 1024 [ 300.228055][ T329] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.238304][ T329] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.250416][T14943] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 300.265597][T14382] EXT4-fs (loop1): unmounting filesystem. [ 300.345637][ T329] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 300.354531][ T329] usb 5-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 300.362659][ T329] usb 5-1: Manufacturer: syz [ 300.368188][ T329] usb 5-1: config 0 descriptor?? [ 300.387323][ T28] audit: type=1400 audit(2268435632.262:4817): avc: denied { getopt } for pid=14953 comm="syz.1.6132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 300.420682][ T329] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 300.493564][ T1804] Bluetooth: hci0: Frame reassembly failed (-84) [ 300.495244][ T65] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 300.636787][ T578] usb 5-1: USB disconnect, device number 54 [ 300.794582][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 300.869467][ T329] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 300.944289][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.955029][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 300.963803][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.972156][ T65] usb 4-1: config 0 descriptor?? [ 301.030157][ T65] hub 4-1:0.0: USB hub found [ 301.286417][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.297840][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.307369][ T329] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 301.316393][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.324572][ T329] usb 3-1: config 0 descriptor?? [ 301.329397][ T65] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 301.436028][ T65] usbhid 4-1:0.0: can't add hid device: -71 [ 301.441784][ T65] usbhid: probe of 4-1:0.0 failed with error -71 [ 301.489481][ T480] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 301.497288][ T65] usb 4-1: USB disconnect, device number 55 [ 301.756745][ T480] usb 5-1: Using ep0 maxpacket: 16 [ 301.843146][ T329] hid-steam 0003:28DE:1142.005E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 301.854684][ T329] hid-steam 0003:28DE:1142.005F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 301.895758][ T480] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.908007][ T480] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 301.919993][ T480] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 301.933101][ T480] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.942035][ T329] hid-steam 0003:28DE:1142.005E: Steam wireless receiver connected [ 301.949881][ T480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.970605][T14971] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 301.992506][ T480] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 302.058494][T14989] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6148'. [ 302.067324][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6148'. [ 302.072222][ T329] usb 3-1: USB disconnect, device number 64 [ 302.076006][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6148'. [ 302.076023][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6148'. [ 302.099821][ T329] hid-steam 0003:28DE:1142.005E: Steam wireless receiver disconnected [ 302.227370][ T480] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 302.233607][ T480] usb 5-1: USB disconnect, device number 55 [ 302.665749][T10336] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 302.903458][T15000] loop3: detected capacity change from 0 to 1024 [ 302.913047][T15000] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 302.926203][T13883] EXT4-fs (loop3): unmounting filesystem. [ 303.058472][T15012] loop0: detected capacity change from 0 to 8192 [ 303.071702][ T480] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 303.110002][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 303.433585][T15036] loop0: detected capacity change from 0 to 1024 [ 303.457908][T15036] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 303.472011][T14381] EXT4-fs (loop0): unmounting filesystem. [ 303.478104][ T480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 303.489064][ T480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.498629][ T480] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 303.507707][ T480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.516039][ T480] usb 5-1: config 0 descriptor?? [ 303.564255][ T480] hub 5-1:0.0: USB hub found [ 303.596721][ T28] audit: type=1400 audit(2268435635.274:4818): avc: denied { mount } for pid=15049 comm="syz.2.6174" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 303.619156][ T28] audit: type=1400 audit(2268435635.284:4819): avc: denied { remount } for pid=15049 comm="syz.2.6174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 303.639380][ T28] audit: type=1400 audit(2268435635.293:4820): avc: denied { unmount } for pid=14385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 303.754208][T15067] loop2: detected capacity change from 0 to 8192 [ 303.779891][T14995] loop4: detected capacity change from 0 to 512 [ 303.786398][T14995] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 303.873492][ T480] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 304.001855][ T480] usbhid 5-1:0.0: can't add hid device: -71 [ 304.007631][ T480] usbhid: probe of 5-1:0.0 failed with error -71 [ 304.044769][ T480] usb 5-1: USB disconnect, device number 56 [ 304.060338][T15081] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 304.389132][T15090] loop4: detected capacity change from 0 to 1024 [ 304.398440][T15090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 304.406723][T15090] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038 (0x7fffffff) [ 304.418345][ T28] audit: type=1400 audit(2268435636.041:4821): avc: denied { append } for pid=15089 comm="syz.4.6191" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.445853][T14386] EXT4-fs (loop4): unmounting filesystem. [ 304.461495][ T65] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 304.465942][T15096] loop4: detected capacity change from 0 to 256 [ 304.477467][T15096] exFAT-fs (loop4): error, invalid access to FAT bad cluster (entry 0x00000005) [ 304.486410][T15096] exFAT-fs (loop4): Filesystem has been set read-only [ 304.492895][T15096] exFAT-fs (loop4): failed to load alloc-bitmap [ 304.499066][T15096] exFAT-fs (loop4): failed to recognize exfat type [ 304.750114][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 304.889128][ T65] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 304.896928][ T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.906878][ T65] usb 3-1: config 0 has no interface number 0 [ 304.912737][ T65] usb 3-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.049518][ T65] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 305.058459][ T65] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 305.066410][ T65] usb 3-1: Product: syz [ 305.070365][ T65] usb 3-1: SerialNumber: syz [ 305.075270][ T65] usb 3-1: config 0 descriptor?? [ 305.316713][T10336] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 305.316716][ T5127] Bluetooth: hci0: command 0x1003 tx timeout [ 305.341915][ T65] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 305.554771][ T578] usb 3-1: USB disconnect, device number 65 [ 305.637443][ T480] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 305.926161][ T480] usb 4-1: Using ep0 maxpacket: 8 [ 306.065080][ T480] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.075058][ T480] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.172015][ T480] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 306.180958][ T480] usb 4-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 306.188900][ T480] usb 4-1: Manufacturer: syz [ 306.193788][ T480] usb 4-1: config 0 descriptor?? [ 306.236374][ T480] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 306.375962][T15147] 9p: Unknown Cache mode f [ 306.439982][T15158] loop2: detected capacity change from 0 to 256 [ 306.448386][T15158] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 306.452741][ T480] usb 4-1: USB disconnect, device number 56 [ 306.490940][T15164] syz.2.6223[15164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.490995][T15164] syz.2.6223[15164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.516815][T15168] xt_hashlimit: size too large, truncated to 1048576 [ 306.920324][ T311] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 307.176897][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 307.294473][ T578] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 307.305196][ T311] usb 3-1: config 0 has no interfaces? [ 307.476237][ T311] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 307.485073][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.508256][ T311] usb 3-1: Product: syz [ 307.512218][ T311] usb 3-1: Manufacturer: syz [ 307.516643][ T311] usb 3-1: SerialNumber: syz [ 307.540584][ T311] r8152-cfgselector 3-1: config 0 descriptor?? [ 307.551044][ T578] usb 4-1: Using ep0 maxpacket: 16 [ 307.679364][ T578] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.700693][ T578] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 307.710223][ T578] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 307.743461][ T578] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.752401][ T578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.797343][T15183] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 307.818533][ T578] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 308.023697][ T480] usb 3-1: USB disconnect, device number 66 [ 308.053882][ T578] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 308.074958][ T578] usb 4-1: USB disconnect, device number 57 [ 308.194969][T15199] loop4: detected capacity change from 0 to 2048 [ 308.205414][T15199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 308.216526][T15199] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 308.231317][T15199] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 308.243557][T15199] EXT4-fs (loop4): This should not happen!! Data will be lost [ 308.243557][T15199] [ 308.253113][T15199] EXT4-fs (loop4): Total free blocks count 0 [ 308.259068][T15199] EXT4-fs (loop4): Free/Dirty block details [ 308.264764][T15199] EXT4-fs (loop4): free_blocks=2415919104 [ 308.270426][T15199] EXT4-fs (loop4): dirty_blocks=48 [ 308.275355][T15199] EXT4-fs (loop4): Block reservation details [ 308.281110][T15199] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 308.291197][ T8] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 308.571588][T15209] syz.2.6242[15209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.571647][T15209] syz.2.6242[15209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.584311][T15211] loop3: detected capacity change from 0 to 1024 [ 308.598731][ T578] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 308.601947][T15211] EXT4-fs: Ignoring removed orlov option [ 308.624564][T15214] syz.2.6244[15214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.624636][T15214] syz.2.6244[15214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.625300][T15211] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 308.656698][T15214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6244'. [ 308.688647][T13883] EXT4-fs (loop3): unmounting filesystem. [ 308.804569][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 308.865990][ T578] usb 5-1: Using ep0 maxpacket: 8 [ 308.935226][T15250] user requested TSC rate below hardware speed [ 308.986768][T15244] loop3: detected capacity change from 0 to 40427 [ 308.993342][T15244] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 309.000938][ T578] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 309.005018][T15244] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 309.022379][T15244] F2FS-fs (loop3): invalid crc value [ 309.028848][T15244] F2FS-fs (loop3): Found nat_bits in checkpoint [ 309.051803][T15244] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 309.058824][T15244] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 309.073169][ T28] audit: type=1400 audit(2268435640.391:4822): avc: denied { create } for pid=15243 comm="syz.3.6258" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 309.115055][ T340] kworker/u4:3: attempt to access beyond end of device [ 309.115055][ T340] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 309.128850][ T28] audit: type=1400 audit(2268435640.419:4823): avc: denied { link } for pid=15243 comm="syz.3.6258" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 309.172149][ T28] audit: type=1400 audit(2268435640.466:4824): avc: denied { read write } for pid=15243 comm="syz.3.6258" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 309.176090][ T578] usb 5-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 309.194795][ T28] audit: type=1400 audit(2268435640.466:4825): avc: denied { open } for pid=15243 comm="syz.3.6258" path="/128/bus/file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 309.228751][ T578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.237894][ T578] usb 5-1: Product: syz [ 309.248526][ T578] usb 5-1: Manufacturer: syz [ 309.258340][ T578] usb 5-1: SerialNumber: syz [ 309.272446][ T578] usb 5-1: config 0 descriptor?? [ 309.315223][ T578] usb 5-1: bad CDC descriptors [ 309.486813][T15276] loop3: detected capacity change from 0 to 40427 [ 309.494191][T15276] F2FS-fs (loop3): invalid crc value [ 309.500309][T15276] F2FS-fs (loop3): Found nat_bits in checkpoint [ 309.523591][T15276] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 309.550217][ T3782] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 309.557856][T13883] syz-executor: attempt to access beyond end of device [ 309.557856][T13883] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 309.567883][ T578] usb 5-1: USB disconnect, device number 57 [ 309.849665][ T3782] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 310.095430][ T578] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 310.252477][T15293] loop4: detected capacity change from 0 to 40427 [ 310.259382][T15293] F2FS-fs (loop4): fault_injection options not supported [ 310.266264][T15293] F2FS-fs (loop4): heap/no_heap options were deprecated [ 310.273741][T15293] F2FS-fs (loop4): invalid crc value [ 310.279916][T15293] F2FS-fs (loop4): Found nat_bits in checkpoint [ 310.318223][T15293] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 310.351984][ T578] usb 4-1: Using ep0 maxpacket: 16 [ 310.369946][T15301] loop0: detected capacity change from 0 to 40427 [ 310.376543][T15301] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 310.384152][T15301] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 310.393880][T15301] F2FS-fs (loop0): Found nat_bits in checkpoint [ 310.416898][T15301] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 310.423747][T15301] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 310.441545][T14386] syz-executor: attempt to access beyond end of device [ 310.441545][T14386] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 310.480415][ T578] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.533846][ T3782] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 310.542874][ T3782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.562736][T15313] syz.4.6284[15313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.563956][T15313] syz.4.6284[15313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.598703][T15319] loop4: detected capacity change from 0 to 16 [ 310.616773][T15319] erofs: (device loop4): mounted with root inode @ nid 36. [ 310.624845][T15319] syz.4.6286: attempt to access beyond end of device [ 310.624845][T15319] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 310.637953][T15319] syz.4.6286: attempt to access beyond end of device [ 310.637953][T15319] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 310.651499][T15319] syz.4.6286: attempt to access beyond end of device [ 310.651499][T15319] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 310.673832][ T578] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 310.682688][ T578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.695257][ T578] usb 4-1: Product: syz [ 310.699453][ T578] usb 4-1: Manufacturer: syz [ 310.706972][T15323] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 310.716372][ T578] usb 4-1: SerialNumber: syz [ 310.721292][ T578] usb 4-1: config 0 descriptor?? [ 310.725396][T15315] loop0: detected capacity change from 0 to 40427 [ 310.732382][ T28] audit: type=1400 audit(2268435641.944:4826): avc: denied { relabelto } for pid=15322 comm="syz.4.6288" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 310.781360][ T28] audit: type=1400 audit(2268435641.944:4827): avc: denied { associate } for pid=15322 comm="syz.4.6288" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=409 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mouse_device_t:s0" [ 310.801187][T15315] F2FS-fs (loop0): invalid crc value [ 310.831884][ T28] audit: type=1400 audit(2268435641.953:4828): avc: denied { unlink } for pid=14386 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 310.836579][T15315] F2FS-fs (loop0): Found nat_bits in checkpoint [ 310.922851][T15315] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 310.948898][T14381] syz-executor: attempt to access beyond end of device [ 310.948898][T14381] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 311.153817][ T3782] usb 3-1: string descriptor 0 read error: -71 [ 311.159814][ T3782] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 311.166628][ T3782] usb 3-1: No valid video chain found. [ 311.172217][ T3782] usb 3-1: USB disconnect, device number 67 [ 311.239340][ T578] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 311.245706][ T578] usb 4-1: No valid video chain found. [ 311.251317][ T578] usb 4-1: USB disconnect, device number 58 [ 311.324810][ T329] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 311.671809][T15358] loop2: detected capacity change from 0 to 1024 [ 311.678171][T15358] EXT4-fs: Ignoring removed orlov option [ 311.700549][T15358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 311.716066][T14385] EXT4-fs (loop2): unmounting filesystem. [ 311.742031][ T28] audit: type=1400 audit(2268436154.886:4829): avc: denied { setattr } for pid=15364 comm="syz.2.6305" name="smaps" dev="proc" ino=84077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 311.764252][ T329] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.765656][T15367] loop3: detected capacity change from 0 to 512 [ 311.775807][ T329] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 311.789546][ T329] usb 5-1: config 1 has no interface number 0 [ 311.795879][ T329] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.798292][T15367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 311.807137][ T329] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 311.817930][T15367] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038 (0x7fffffff) [ 311.849789][T13883] EXT4-fs (loop3): unmounting filesystem. [ 312.030432][ T329] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.039286][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.062446][ T329] usb 5-1: Product: syz [ 312.066421][ T329] usb 5-1: Manufacturer: syz [ 312.070847][ T329] usb 5-1: SerialNumber: syz [ 312.608775][T15397] loop2: detected capacity change from 0 to 1024 [ 312.615456][T15397] EXT4-fs: Ignoring removed i_version option [ 312.621482][T15397] EXT4-fs: Ignoring removed bh option [ 312.628731][T15397] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 69: comm syz.2.6319: lblock 8 mapped to illegal pblock 69 (length 1) [ 312.642922][T15397] Quota error (device loop2): write_blk: dquota write failed [ 312.650129][T15397] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 68: comm syz.2.6319: lblock 7 mapped to illegal pblock 68 (length 1) [ 312.664299][T15397] Quota error (device loop2): write_blk: dquota write failed [ 312.671502][T15397] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 67: comm syz.2.6319: lblock 6 mapped to illegal pblock 67 (length 1) [ 312.685623][T15397] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 48: comm syz.2.6319: lblock 0 mapped to illegal pblock 48 (length 1) [ 312.699681][T15397] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.6319: Failed to acquire dquot type 0 [ 312.710905][T15397] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 312.718210][T15389] loop1: detected capacity change from 0 to 40427 [ 312.726614][T15397] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.6319: mark_inode_dirty error [ 312.736239][T15389] F2FS-fs (loop1): fault_injection options not supported [ 312.744598][T15397] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 312.745105][T15389] F2FS-fs (loop1): invalid crc value [ 312.754697][T15397] EXT4-fs (loop2): 1 orphan inode deleted [ 312.765251][T15397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 312.774348][ T340] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 312.789104][T15389] F2FS-fs (loop1): Found nat_bits in checkpoint [ 312.795232][ T340] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:3: Failed to release dquot type 0 [ 312.795263][T15397] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 312.825487][T14385] EXT4-fs (loop2): unmounting filesystem. [ 312.831390][T14385] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 312.840693][T14385] EXT4-fs error (device loop2): ext4_quota_off:7053: inode #3: comm syz-executor: mark_inode_dirty error [ 312.840716][T15389] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 312.859161][ T3782] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 312.875084][T15403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15403 comm=syz.2.6320 [ 312.877107][T15389] F2FS-fs (loop1): access invalid blkaddr:3 [ 312.894163][T15389] CPU: 1 PID: 15389 Comm: syz.1.6315 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 312.903782][T15389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 312.913682][T15389] Call Trace: [ 312.916797][T15389] [ 312.919575][T15389] dump_stack_lvl+0x151/0x1b7 [ 312.924088][T15389] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 312.929385][T15389] ? f2fs_get_next_page_offset+0x770/0x770 [ 312.935027][T15389] dump_stack+0x15/0x1b [ 312.939017][T15389] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 312.941126][T15405] netlink: 'syz.2.6321': attribute type 27 has an invalid length. [ 312.944402][T15389] f2fs_is_valid_blkaddr+0x25/0x30 [ 312.944427][T15389] f2fs_map_blocks+0xd22/0x4340 [ 312.961762][T15389] ? avc_has_perm_noaudit+0x2dd/0x430 [ 312.966968][T15389] ? f2fs_map_lock+0x260/0x260 [ 312.971565][T15389] ? rwsem_write_trylock+0x153/0x340 [ 312.976684][T15389] ? __wake_up_bit+0x2b0/0x2b0 [ 312.981289][T15389] ? update_curr+0x40c/0x5f0 [ 312.985720][T15389] f2fs_precache_extents+0x282/0x440 [ 312.990836][T15389] ? f2fs_pin_file_control+0x1e0/0x1e0 [ 312.996127][T15389] ? __this_cpu_preempt_check+0x13/0x20 [ 313.001514][T15389] ? f2fs_overwrite_io+0x310/0x310 [ 313.006454][T15389] f2fs_fiemap+0x187/0x2190 [ 313.010793][T15389] ? compat_start_thread+0x20/0x20 [ 313.015744][T15389] ? memcpy+0x56/0x70 [ 313.019571][T15389] ? f2fs_overwrite_io+0x310/0x310 [ 313.024507][T15389] ? avc_has_extended_perms+0xad7/0x10f0 [ 313.029976][T15389] ? __kasan_check_write+0x14/0x20 [ 313.034921][T15389] ? f2fs_overwrite_io+0x310/0x310 [ 313.039870][T15389] do_vfs_ioctl+0x182a/0x29a0 [ 313.044382][T15389] ? __x64_compat_sys_ioctl+0x90/0x90 [ 313.049589][T15389] ? futex_unqueue+0x110/0x140 [ 313.054190][T15389] ? futex_wait_setup+0x330/0x330 [ 313.059168][T15389] ? ioctl_has_perm+0x1f8/0x560 [ 313.063859][T15389] ? ioctl_has_perm+0x3f0/0x560 [ 313.068545][T15389] ? has_cap_mac_admin+0x3c0/0x3c0 [ 313.073488][T15389] ? putname+0xfa/0x150 [ 313.077483][T15389] ? do_futex+0x55a/0x9a0 [ 313.081646][T15389] ? selinux_file_ioctl+0x3cc/0x540 [ 313.086681][T15389] ? __ia32_sys_get_robust_list+0x90/0x90 [ 313.092240][T15389] ? selinux_file_alloc_security+0x120/0x120 [ 313.098051][T15389] ? set_fs_pwd+0x122/0x1a0 [ 313.102723][T15389] ? __fget_files+0x2cb/0x330 [ 313.107205][T15389] ? security_file_ioctl+0x84/0xb0 [ 313.112149][T15389] __se_sys_ioctl+0x99/0x190 [ 313.116575][T15389] __x64_sys_ioctl+0x7b/0x90 [ 313.121002][T15389] x64_sys_call+0x98/0x9a0 [ 313.125255][T15389] do_syscall_64+0x3b/0xb0 [ 313.129511][T15389] ? clear_bhb_loop+0x55/0xb0 [ 313.134022][T15389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.139835][T15389] RIP: 0033:0x7f870a17dff9 [ 313.144085][T15389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.163529][T15389] RSP: 002b:00007f870af68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.171770][T15389] RAX: ffffffffffffffda RBX: 00007f870a335f80 RCX: 00007f870a17dff9 [ 313.179582][T15389] RDX: 0000000020000080 RSI: 00000000c020660b RDI: 0000000000000004 [ 313.187396][T15389] RBP: 00007f870a1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 313.195208][T15389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.203017][T15389] R13: 0000000000000000 R14: 00007f870a335f80 R15: 00007ffef4790b48 [ 313.210833][T15389] [ 313.228015][ T329] cdc_ncm 5-1:1.1: bind() failure [ 313.237750][T14382] syz-executor: attempt to access beyond end of device [ 313.237750][T14382] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 313.420207][ T3782] usb 4-1: Using ep0 maxpacket: 32 [ 313.461381][T15407] usb 5-1: USB disconnect, device number 58 [ 313.504223][T15410] loop2: detected capacity change from 0 to 40427 [ 313.510798][T15410] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 313.518255][T15410] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 313.526672][T15410] F2FS-fs (loop2): invalid crc value [ 313.532924][T15410] F2FS-fs (loop2): Found nat_bits in checkpoint [ 313.548507][ T3782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.559315][ T3782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.568851][ T3782] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 313.570023][T15410] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 313.577809][ T3782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.584566][T15410] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 313.596427][ T1804] kworker/u4:6: attempt to access beyond end of device [ 313.596427][ T1804] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 313.600289][ T3782] usb 4-1: config 0 descriptor?? [ 313.659885][T15420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6325'. [ 313.791273][T15427] loop2: detected capacity change from 0 to 512 [ 313.797522][T15427] EXT4-fs: Ignoring removed oldalloc option [ 313.803516][T15427] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 313.814375][T15427] EXT4-fs (loop2): 1 truncate cleaned up [ 313.836358][T15432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6330'. [ 313.845158][T15432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6330'. [ 314.126946][ T3782] saitek 0003:06A3:0CCB.0060: unknown main item tag 0x0 [ 314.133790][ T3782] saitek 0003:06A3:0CCB.0060: unknown main item tag 0x0 [ 314.140604][ T3782] saitek 0003:06A3:0CCB.0060: item fetching failed at offset 4/5 [ 314.148408][ T3782] saitek 0003:06A3:0CCB.0060: parse failed [ 314.154104][ T3782] saitek: probe of 0003:06A3:0CCB.0060 failed with error -22 [ 314.205350][T15461] input: syz1 as /devices/virtual/input/input50 [ 314.320345][ T3782] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 314.323974][T15474] loop0: detected capacity change from 0 to 512 [ 314.334299][T15474] EXT4-fs (loop0): Test dummy encryption mode enabled [ 314.345485][ T39] usb 4-1: USB disconnect, device number 59 [ 314.352176][T15474] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.6349: inline data xattr refers to an external xattr inode [ 314.367321][T15474] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.6349: couldn't read orphan inode 12 (err -117) [ 314.574769][ T3782] usb 5-1: Using ep0 maxpacket: 16 [ 314.606667][T15493] loop2: detected capacity change from 0 to 2048 [ 314.618725][T15493] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038 (0x7fffffff) [ 314.703116][ T3782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.713933][ T3782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.723412][ T3782] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.736138][ T3782] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.744989][ T3782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.753216][ T3782] usb 5-1: config 0 descriptor?? [ 314.944369][T15520] loop3: detected capacity change from 0 to 512 [ 314.953154][T15520] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.6370: casefold flag without casefold feature [ 314.965879][T15520] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.6370: missing EA_INODE flag [ 314.977530][T15520] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.6370: error while reading EA inode 2 err=-117 [ 314.989745][T15520] EXT4-fs (loop3): 1 orphan inode deleted [ 315.270752][ T3782] microsoft 0003:045E:07DA.0061: unknown main item tag 0x7 [ 315.277846][ T3782] microsoft 0003:045E:07DA.0061: unknown main item tag 0x0 [ 315.284860][ T3782] microsoft 0003:045E:07DA.0061: unknown main item tag 0x0 [ 315.291863][T15407] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 315.299251][ T3782] microsoft 0003:045E:07DA.0061: unknown main item tag 0x2 [ 315.306260][ T3782] microsoft 0003:045E:07DA.0061: unknown main item tag 0x2 [ 315.313358][ T3782] microsoft 0003:045E:07DA.0061: unknown main item tag 0x2 [ 315.322738][ T3782] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0061/input/input51 [ 315.334570][ T3782] microsoft 0003:045E:07DA.0061: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 315.419345][ T65] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 315.499034][ T480] usb 5-1: USB disconnect, device number 59 [ 315.675940][T15407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.686809][T15407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.696748][T15407] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.709471][T15407] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 315.718262][T15407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.726497][T15407] usb 4-1: config 0 descriptor?? [ 315.879062][ T65] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 315.888720][ T65] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 315.996703][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.005585][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 316.013445][ T65] usb 3-1: SerialNumber: syz [ 316.051145][T15507] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 316.067040][T15527] loop4: detected capacity change from 0 to 4096 [ 316.090336][T15531] binder: 15530:15531 ioctl 4018620d 0 returned -22 [ 316.243016][T15407] holtek_mouse 0003:04D9:A070.0062: item fetching failed at offset 1/5 [ 316.251206][T15407] holtek_mouse 0003:04D9:A070.0062: hid parse failed: -22 [ 316.258986][T15407] holtek_mouse: probe of 0003:04D9:A070.0062 failed with error -22 [ 316.292422][T15541] loop4: detected capacity change from 0 to 512 [ 316.299137][T15541] EXT4-fs: Ignoring removed mblk_io_submit option [ 316.305457][T15541] EXT4-fs: Ignoring removed i_version option [ 316.312612][T15541] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.6377: invalid block [ 316.323451][T15541] EXT4-fs (loop4): Remounting filesystem read-only [ 316.328099][ T65] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 316.329867][T15541] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.6377: couldn't read orphan inode 11 (err -117) [ 316.337529][ T65] usb 3-1: USB disconnect, device number 68 [ 316.356086][T15541] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: comm syz.4.6377: Directory hole found for htree leaf block [ 316.369440][T15541] EXT4-fs (loop4): Remounting filesystem read-only [ 316.375916][T15541] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: comm syz.4.6377: Directory hole found for htree leaf block [ 316.427302][T15552] loop4: detected capacity change from 0 to 256 [ 316.468006][ T480] usb 4-1: USB disconnect, device number 60 [ 316.662981][T15573] loop1: detected capacity change from 0 to 512 [ 316.669508][T15573] EXT4-fs: Ignoring removed mblk_io_submit option [ 316.676413][T15573] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 316.687602][T15573] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.6392: corrupted in-inode xattr [ 316.699825][T15573] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.6392: couldn't read orphan inode 15 (err -117) [ 316.711794][T15573] EXT4-fs mount: 12 callbacks suppressed [ 316.711811][T15573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 316.734399][T15573] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 316.746241][T14382] EXT4-fs (loop1): unmounting filesystem. [ 316.899627][T15577] loop4: detected capacity change from 0 to 40427 [ 316.906600][T15577] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 316.914140][T15577] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 316.934389][T15579] loop1: detected capacity change from 0 to 40427 [ 316.941941][T15579] F2FS-fs (loop1): invalid crc value [ 316.947137][T15577] F2FS-fs (loop4): Found nat_bits in checkpoint [ 316.954270][T15579] F2FS-fs (loop1): Found nat_bits in checkpoint [ 316.994458][T15579] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 317.019240][T15577] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 317.026202][T15577] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 317.035304][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 317.035318][ T28] audit: type=1400 audit(2268436159.844:4831): avc: denied { create } for pid=15578 comm="syz.1.6394" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 317.048313][T14382] syz-executor: attempt to access beyond end of device [ 317.048313][T14382] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 317.275791][T15616] bridge0: port 3(syz_tun) entered blocking state [ 317.282309][T15616] bridge0: port 3(syz_tun) entered disabled state [ 317.288830][T15616] device syz_tun entered promiscuous mode [ 317.294631][T15616] bridge0: port 3(syz_tun) entered blocking state [ 317.300873][T15616] bridge0: port 3(syz_tun) entered forwarding state [ 317.367307][T15624] xt_hashlimit: size too large, truncated to 1048576 [ 317.439873][ T480] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 317.478925][T15629] loop3: detected capacity change from 0 to 128 [ 317.485342][T15629] FAT-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value [ 317.632365][ T65] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 317.804481][T15641] bridge0: port 3(syz_tun) entered blocking state [ 317.810831][T15641] bridge0: port 3(syz_tun) entered disabled state [ 317.817708][T15641] device syz_tun entered promiscuous mode [ 317.823419][T15641] bridge0: port 3(syz_tun) entered blocking state [ 317.829775][T15641] bridge0: port 3(syz_tun) entered forwarding state [ 317.836484][ T480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.847758][ T480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.862902][ T480] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 317.872280][ T480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.881330][ T480] usb 3-1: config 0 descriptor?? [ 317.890063][T15648] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6422'. [ 317.910320][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 318.049257][ T65] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.057275][ T65] usb 5-1: config 0 has no interface number 0 [ 318.063145][ T65] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.073813][ T65] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.083344][ T65] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 318.092196][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.100389][ T65] usb 5-1: config 0 descriptor?? [ 318.171280][T15655] loop1: detected capacity change from 0 to 1024 [ 318.188252][T15407] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 318.197160][T15655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 318.207864][T15655] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 318.223179][T15655] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 318.235365][T15655] EXT4-fs (loop1): This should not happen!! Data will be lost [ 318.235365][T15655] [ 318.244823][T15655] EXT4-fs (loop1): Total free blocks count 0 [ 318.250626][T15655] EXT4-fs (loop1): Free/Dirty block details [ 318.256392][T15655] EXT4-fs (loop1): free_blocks=68451041280 [ 318.262013][T15655] EXT4-fs (loop1): dirty_blocks=32 [ 318.266959][T15655] EXT4-fs (loop1): Block reservation details [ 318.272743][T15655] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 318.282895][T14382] EXT4-fs (loop1): unmounting filesystem. [ 318.444822][T15407] usb 4-1: Using ep0 maxpacket: 8 [ 318.573113][T15407] usb 4-1: unable to get BOS descriptor or descriptor too short [ 318.637234][T15407] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 318.644609][T15407] usb 4-1: can't read configurations, error -71 [ 318.829789][ T65] uclogic 0003:28BD:0071.0064: pen parameters not found [ 318.836616][ T65] uclogic 0003:28BD:0071.0064: interface is invalid, ignoring [ 319.046361][ T311] usb 5-1: USB disconnect, device number 60 [ 319.054179][ T480] uclogic 0003:256C:006D.0063: failed retrieving string descriptor #200: -71 [ 319.062825][ T480] uclogic 0003:256C:006D.0063: failed retrieving pen parameters: -71 [ 319.070677][ T480] uclogic 0003:256C:006D.0063: failed probing pen v2 parameters: -71 [ 319.078619][ T480] uclogic 0003:256C:006D.0063: failed probing parameters: -71 [ 319.085849][ T480] uclogic: probe of 0003:256C:006D.0063 failed with error -71 [ 319.094009][ T480] usb 3-1: USB disconnect, device number 69 [ 319.611091][T15675] bridge0: port 3(syz_tun) entered blocking state [ 319.617346][T15675] bridge0: port 3(syz_tun) entered disabled state [ 319.624125][T15675] device syz_tun entered promiscuous mode [ 319.629757][T15675] bridge0: port 3(syz_tun) entered blocking state [ 319.635935][T15675] bridge0: port 3(syz_tun) entered forwarding state [ 320.037672][T15407] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 320.294234][T15407] usb 4-1: Using ep0 maxpacket: 16 [ 320.422565][T15407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.433307][T15407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.442777][T15407] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 320.451676][T15407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.460178][T15407] usb 4-1: config 0 descriptor?? [ 320.850166][ T480] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 320.857622][ T329] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 320.969299][T15407] hid-multitouch 0003:1FD2:6007.0065: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 321.149754][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 321.184832][ T578] usb 4-1: USB disconnect, device number 63 [ 321.288518][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.299326][ T480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.310024][ T480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.319556][ T480] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 321.328404][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.338140][ T329] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 321.346988][ T480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.354785][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.363175][ T480] usb 5-1: config 0 descriptor?? [ 321.368031][ T329] usb 3-1: config 0 descriptor?? [ 321.738235][T15735] loop3: detected capacity change from 0 to 1024 [ 321.749872][T15735] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 321.760841][T15735] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 321.775580][T15735] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 321.787834][T15735] EXT4-fs (loop3): This should not happen!! Data will be lost [ 321.787834][T15735] [ 321.797410][T15735] EXT4-fs (loop3): Total free blocks count 0 [ 321.803375][T15735] EXT4-fs (loop3): Free/Dirty block details [ 321.809046][T15735] EXT4-fs (loop3): free_blocks=68451041280 [ 321.814722][T15735] EXT4-fs (loop3): dirty_blocks=32 [ 321.819632][T15735] EXT4-fs (loop3): Block reservation details [ 321.827820][T15735] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 321.840389][T13883] EXT4-fs (loop3): unmounting filesystem. [ 321.892644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 321.903504][ T329] hid-multitouch 0003:1FD2:6007.0066: unknown main item tag 0x0 [ 321.915700][ T329] hid-multitouch 0003:1FD2:6007.0066: unknown main item tag 0x0 [ 321.921860][ T28] audit: type=1400 audit(2268436164.409:4832): avc: denied { create } for pid=15748 comm="syz.1.6463" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 321.923397][ T329] hid-multitouch 0003:1FD2:6007.0066: unbalanced collection at end of report description [ 321.923340][ T28] audit: type=1400 audit(2268436164.409:4833): avc: denied { associate } for pid=15748 comm="syz.1.6463" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 322.010750][ T329] hid-multitouch: probe of 0003:1FD2:6007.0066 failed with error -22 [ 322.078371][ T28] audit: type=1400 audit(2268436164.549:4834): avc: denied { mounton } for pid=15748 comm="syz.1.6463" path="/74/file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 322.117286][ T28] audit: type=1400 audit(2268436164.549:4835): avc: denied { write } for pid=15748 comm="syz.1.6463" name="file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 322.204907][ T28] audit: type=1400 audit(2268436164.549:4836): avc: denied { add_name } for pid=15748 comm="syz.1.6463" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 322.208367][ T329] usb 3-1: USB disconnect, device number 70 [ 322.294932][ T28] audit: type=1400 audit(2268436164.549:4837): avc: denied { setattr } for pid=15748 comm="syz.1.6463" name="work" dev="tmpfs" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 322.385208][ T28] audit: type=1400 audit(2268436164.549:4838): avc: denied { write open } for pid=15748 comm="syz.1.6463" path=2F202864656C6574656429 dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 322.474771][ T28] audit: type=1400 audit(2268436164.549:4839): avc: denied { create } for pid=15748 comm="syz.1.6463" name="#29" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 322.580462][ T28] audit: type=1400 audit(2268436164.549:4840): avc: denied { remove_name } for pid=15748 comm="syz.1.6463" name="#29" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 322.668113][ T28] audit: type=1400 audit(2268436164.549:4841): avc: denied { rename } for pid=15748 comm="syz.1.6463" name="#29" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 322.757880][ T28] audit: type=1400 audit(2268436164.549:4842): avc: denied { unlink } for pid=15748 comm="syz.1.6463" name="#29" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 322.849350][ T480] uclogic 0003:256C:006D.0067: failed retrieving string descriptor #200: -71 [ 322.945283][ T28] audit: type=1400 audit(2268436164.549:4843): avc: denied { unlink } for pid=15748 comm="syz.1.6463" name="#2a" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 322.945563][ T28] audit: type=1400 audit(2268436164.680:4844): avc: denied { rmdir } for pid=14382 comm="syz-executor" name="work" dev="tmpfs" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 323.033039][ T480] uclogic 0003:256C:006D.0067: failed retrieving pen parameters: -71 [ 323.128025][ T480] uclogic 0003:256C:006D.0067: failed probing pen v2 parameters: -71 [ 323.135881][ T480] uclogic 0003:256C:006D.0067: failed probing parameters: -71 [ 323.143196][ T480] uclogic: probe of 0003:256C:006D.0067 failed with error -71 [ 323.151031][ T480] usb 5-1: USB disconnect, device number 61 [ 323.177923][T15774] syz.2.6473[15774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.177972][T15774] syz.2.6473[15774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.197050][T15774] loop2: detected capacity change from 0 to 512 [ 323.214766][T15774] EXT4-fs: Mount option(s) incompatible with ext2 [ 323.607227][ T28] audit: type=1326 audit(2268436165.980:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.4.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680917dff9 code=0x7ffc0000 [ 323.640040][ T28] audit: type=1326 audit(2268436166.008:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.4.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f680917dff9 code=0x7ffc0000 [ 323.672053][ T28] audit: type=1326 audit(2268436166.008:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.4.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680917dff9 code=0x7ffc0000 [ 323.682939][T15781] loop2: detected capacity change from 0 to 40427 [ 323.696099][ T28] audit: type=1326 audit(2268436166.008:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.4.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f680917dff9 code=0x7ffc0000 [ 323.725418][T15781] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 323.743988][T15781] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 323.756434][T15781] F2FS-fs (loop2): invalid crc value [ 323.769528][T15781] F2FS-fs (loop2): Found nat_bits in checkpoint [ 323.787506][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6490'. [ 323.806709][T15781] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 323.813633][T15781] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 323.959271][T15781] syz.2.6475: attempt to access beyond end of device [ 323.959271][T15781] loop2: rw=2049, sector=77824, nr_sectors = 2072 limit=40427 [ 323.980585][T15827] loop4: detected capacity change from 0 to 1024 [ 323.984335][T15781] syz.2.6475: attempt to access beyond end of device [ 323.984335][T15781] loop2: rw=2049, sector=79896, nr_sectors = 2024 limit=40427 [ 323.989969][T15827] EXT4-fs: Ignoring removed orlov option [ 324.005069][T15781] syz.2.6475: attempt to access beyond end of device [ 324.005069][T15781] loop2: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 324.006607][T15827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.024802][T15781] syz.2.6475: attempt to access beyond end of device [ 324.024802][T15781] loop2: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 324.046558][T15781] syz.2.6475: attempt to access beyond end of device [ 324.046558][T15781] loop2: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 324.066820][T15827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 324.104593][T15838] overlayfs: invalid origin (0000) [ 324.107890][T15781] syz.2.6475: attempt to access beyond end of device [ 324.107890][T15781] loop2: rw=2049, sector=59392, nr_sectors = 18432 limit=40427 [ 324.124966][T14386] EXT4-fs (loop4): unmounting filesystem. [ 324.139050][T15781] syz.2.6475: attempt to access beyond end of device [ 324.139050][T15781] loop2: rw=2049, sector=81920, nr_sectors = 3960 limit=40427 [ 324.176319][T14385] syz-executor: attempt to access beyond end of device [ 324.176319][T14385] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 324.196441][ T1804] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 324.207159][ T1804] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 324.258569][T15855] loop4: detected capacity change from 0 to 256 [ 324.268644][T15853] hub 6-0:1.0: USB hub found [ 324.273531][T15855] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 324.285255][T15853] hub 6-0:1.0: 1 port detected [ 324.299242][T15855] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 324.362389][T15863] loop2: detected capacity change from 0 to 512 [ 324.370165][T15863] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 324.395063][T15863] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.6505: bg 0: block 64: padding at end of block bitmap is not set [ 324.409663][T15863] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.6505: Failed to acquire dquot type 0 [ 324.421200][T15863] EXT4-fs (loop2): 1 truncate cleaned up [ 324.426636][T15863] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 324.440179][T15863] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.6505: Failed to acquire dquot type 0 [ 324.456149][T14385] EXT4-fs (loop2): unmounting filesystem. [ 324.460325][T15871] loop4: detected capacity change from 0 to 16 [ 324.468227][T15871] erofs: (device loop4): mounted with root inode @ nid 36. [ 324.476034][T15871] erofs: (device loop4): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 324.482776][T15873] loop2: detected capacity change from 0 to 512 [ 324.485519][T15871] syz.4.6515: attempt to access beyond end of device [ 324.485519][T15871] loop4: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 324.496510][T15873] EXT4-fs (loop2): Test dummy encryption mode enabled [ 324.528788][T15873] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.6516: inline data xattr refers to an external xattr inode [ 324.543871][T15873] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.6516: couldn't read orphan inode 12 (err -117) [ 324.557947][T15873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 324.591606][T14385] EXT4-fs (loop2): unmounting filesystem. [ 324.612393][T15894] loop3: detected capacity change from 0 to 512 [ 324.620207][T15891] loop4: detected capacity change from 0 to 1024 [ 324.627147][T15891] ext4: Bad value for 'commit' [ 324.631954][T15894] EXT4-fs: Ignoring removed mblk_io_submit option [ 324.649782][T15894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b806c018, mo2=0002] [ 324.677515][T15894] System zones: 1-12 [ 324.682986][T15894] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 324.693578][T15894] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 324.702085][T15894] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #13: comm syz.3.6526: casefold flag without casefold feature [ 324.714800][T15894] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #13: comm syz.3.6526: unexpected EA_INODE flag [ 324.726257][T15894] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.6526: couldn't read orphan inode 13 (err -117) [ 324.738161][T15894] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 324.749784][T15894] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 327.278322][T15739] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 328.469938][T13883] EXT4-fs (loop3): unmounting filesystem. [ 328.487033][T15918] syz.3.6531[15918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.487134][T15918] syz.3.6531[15918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.609068][T15930] mmap: syz.2.6539 (15930): VmData 45838336 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 329.712055][T15939] loop3: detected capacity change from 0 to 512 [ 329.734832][T15939] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a803c019, mo2=0000] [ 329.742403][T15939] System zones: 0-2, 18-18, 34-34 [ 329.748092][T15939] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 329.762467][T15939] EXT4-fs (loop3): 1 orphan inode deleted [ 329.768084][T15939] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 329.776733][T15939] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038 (0x7fffffff) [ 329.791901][T13883] EXT4-fs (loop3): unmounting filesystem. [ 329.803232][T15947] loop3: detected capacity change from 0 to 512 [ 329.810971][T15947] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.6546: bg 0: block 393: padding at end of block bitmap is not set [ 329.825312][T15947] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 329.834074][T15947] EXT4-fs (loop3): 2 truncates cleaned up [ 329.839624][T15947] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 329.854671][T13883] EXT4-fs (loop3): unmounting filesystem. [ 329.894462][ T480] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 329.944281][T15953] loop3: detected capacity change from 0 to 512 [ 329.950784][T15953] EXT4-fs (loop3): Test dummy encryption mode enabled [ 329.958095][T15953] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.6548: casefold flag without casefold feature [ 329.970866][T15953] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 329.980488][T15953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 330.000172][T13883] EXT4-fs (loop3): unmounting filesystem. [ 330.012017][ T1199] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 330.022416][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 330.022425][ T28] audit: type=1400 audit(2268436171.976:4855): avc: denied { read } for pid=15955 comm="syz.3.6549" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 330.051384][ T28] audit: type=1400 audit(2268436171.976:4856): avc: denied { open } for pid=15955 comm="syz.3.6549" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 330.279364][ T480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.292492][ T480] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.305376][ T480] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.314423][ T480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.322569][ T1199] usb 3-1: Using ep0 maxpacket: 16 [ 330.328376][ T480] usb 5-1: config 0 descriptor?? [ 330.685578][ T1199] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 330.694489][ T1199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.702252][ T1199] usb 3-1: Product: syz [ 330.706270][ T1199] usb 3-1: Manufacturer: syz [ 330.710666][ T1199] usb 3-1: SerialNumber: syz [ 330.715441][ T1199] r8152-cfgselector 3-1: config 0 descriptor?? [ 330.846412][ T480] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 330.853744][ T480] plantronics 0003:047F:FFFF.0068: No inputs registered, leaving [ 330.861943][ T480] plantronics 0003:047F:FFFF.0068: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 331.078121][ T578] usb 5-1: USB disconnect, device number 62 [ 331.220087][ T1199] r8152-cfgselector 3-1: Unknown version 0x0000 [ 331.226251][ T1199] r8152-cfgselector 3-1: bad CDC descriptors [ 331.262848][ T1199] r8152-cfgselector 3-1: Unknown version 0x0000 [ 331.269432][ T1199] r8152-cfgselector 3-1: USB disconnect, device number 71 [ 331.403251][T15987] loop3: detected capacity change from 0 to 512 [ 331.410924][T15987] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 331.418962][T15987] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 331.427593][T15987] EXT4-fs (loop3): 1 truncate cleaned up [ 331.433029][T15987] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 331.443660][T15987] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 331.453858][T13883] EXT4-fs (loop3): unmounting filesystem. [ 331.471303][T15992] loop3: detected capacity change from 0 to 128 [ 331.477805][T15992] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 331.490919][T15992] syz.3.6564: attempt to access beyond end of device [ 331.490919][T15992] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 331.504304][T15992] syz.3.6564: attempt to access beyond end of device [ 331.504304][T15992] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 331.541481][T15996] device ip_vti0 entered promiscuous mode [ 331.547042][T15996] device vlan2 entered promiscuous mode [ 331.649529][T16004] loop3: detected capacity change from 0 to 128 [ 331.657222][T16004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 331.666606][T16004] ext4 filesystem being mounted at /239/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 331.700220][ T28] audit: type=1400 audit(2268436173.557:4857): avc: denied { bind } for pid=16006 comm="syz.4.6570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 331.728197][ T28] audit: type=1400 audit(2268436173.557:4858): avc: denied { listen } for pid=16006 comm="syz.4.6570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 331.750751][T13883] EXT4-fs (loop3): unmounting filesystem. [ 331.787516][T16017] xt_hashlimit: size too large, truncated to 1048576 [ 331.822194][T16019] loop3: detected capacity change from 0 to 512 [ 331.840151][T16019] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 331.848897][T16019] EXT4-fs (loop3): invalid journal inode [ 331.854473][T16019] EXT4-fs (loop3): can't get journal size [ 331.873122][T16019] EXT4-fs (loop3): 1 truncate cleaned up [ 331.882900][T16019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 331.928126][T13883] EXT4-fs (loop3): unmounting filesystem. [ 332.168552][ T28] audit: type=1326 audit(2268436173.987:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16042 comm="syz.2.6595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b68d7dff9 code=0x0 [ 332.385319][ T1199] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 332.481535][ T329] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 332.748861][ T329] usb 4-1: Using ep0 maxpacket: 16 [ 332.802308][ T1199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 332.813430][ T1199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 332.824271][ T1199] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.836971][ T1199] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.845796][ T1199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.853977][ T1199] usb 5-1: config 0 descriptor?? [ 332.887836][T16038] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 333.072911][ T28] audit: type=1400 audit(2268436174.838:4860): avc: denied { create } for pid=16058 comm="syz.0.6591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 333.092978][ T28] audit: type=1400 audit(2268436174.857:4861): avc: denied { sys_admin } for pid=16058 comm="syz.0.6591" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 333.114159][ T329] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 333.132916][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.142753][T16062] loop2: detected capacity change from 0 to 256 [ 333.148965][ T329] usb 4-1: Product: syz [ 333.152933][ T329] usb 4-1: Manufacturer: syz [ 333.159921][T16062] exfat: Deprecated parameter 'namecase' [ 333.165393][T16062] exfat: Deprecated parameter 'namecase' [ 333.172371][ T329] usb 4-1: SerialNumber: syz [ 333.177658][ T329] r8152-cfgselector 4-1: config 0 descriptor?? [ 333.186011][T16062] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 333.209160][T16062] syz.2.6592: attempt to access beyond end of device [ 333.209160][T16062] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 333.369432][ T1199] plantronics 0003:047F:FFFF.0069: unknown main item tag 0xd [ 333.377368][ T1199] plantronics 0003:047F:FFFF.0069: No inputs registered, leaving [ 333.385504][ T1199] plantronics 0003:047F:FFFF.0069: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 333.594905][T15407] usb 5-1: USB disconnect, device number 63 [ 333.668218][ T329] r8152-cfgselector 4-1: Unknown version 0x0000 [ 333.674339][ T329] r8152-cfgselector 4-1: bad CDC descriptors [ 333.710975][ T329] r8152-cfgselector 4-1: Unknown version 0x0000 [ 333.717512][ T329] r8152-cfgselector 4-1: USB disconnect, device number 64 [ 334.146140][T16080] loop4: detected capacity change from 0 to 1024 [ 334.157055][T16080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 334.171263][T16080] EXT4-fs error (device loop4): ext4_read_inline_dir:1589: inode #12: block 16: comm syz.4.6601: path /138/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=301989902, rec_len=0, size=80 fake=0 [ 334.197319][T14386] EXT4-fs (loop4): unmounting filesystem. [ 334.400532][T16090] loop2: detected capacity change from 0 to 40427 [ 334.408195][T16090] F2FS-fs (loop2): invalid crc value [ 334.438824][T16090] F2FS-fs (loop2): Found nat_bits in checkpoint [ 334.512787][T16090] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 335.829960][T16116] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6613'. [ 335.955746][T14385] syz-executor: attempt to access beyond end of device [ 335.955746][T14385] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 336.244857][T16130] loop3: detected capacity change from 0 to 40427 [ 336.251816][T16130] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 336.258078][T16130] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 336.279808][T16130] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 336.298123][ T578] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 336.308466][T16130] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 336.315364][T16130] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 336.340299][T13883] syz-executor: attempt to access beyond end of device [ 336.340299][T13883] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 336.415083][T16164] SELinux: truncated policydb string identifier [ 336.421339][T16164] SELinux: failed to load policy [ 336.501197][ T329] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 336.528654][T16166] loop3: detected capacity change from 0 to 40427 [ 336.535373][T16166] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 336.542915][T16166] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 336.557982][T16166] F2FS-fs (loop3): Found nat_bits in checkpoint [ 336.597859][T16166] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 336.604710][T16166] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 336.633804][T13883] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 336.633827][T13883] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 336.641390][T13883] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 336.648739][T13883] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 336.656394][T13883] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 336.663959][T13883] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 336.671457][T13883] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 336.693697][ T578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.713160][ T578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.741332][ T578] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 336.750534][ T578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.758911][ T578] usb 5-1: config 0 descriptor?? [ 336.800587][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 336.902879][T16199] loop0: detected capacity change from 0 to 1024 [ 336.909422][T16199] journal_path: Lookup failure for './file0' [ 336.915249][T16199] EXT4-fs: error: could not find journal device path [ 336.944985][ T28] audit: type=1400 audit(2268436178.458:4862): avc: denied { setattr } for pid=16198 comm="syz.0.6647" name="/" dev="incremental-fs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.958486][T16194] loop3: detected capacity change from 0 to 40427 [ 336.976597][T16194] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 336.988208][T16194] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 336.997163][T16194] F2FS-fs (loop3): invalid crc value [ 337.007623][T16194] F2FS-fs (loop3): Found nat_bits in checkpoint [ 337.034822][T16194] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 337.042306][T16194] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 337.058037][ T28] audit: type=1400 audit(2268436178.571:4863): avc: denied { map } for pid=16193 comm="syz.3.6645" path="socket:[86955]" dev="sockfs" ino=86955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 337.097472][T16210] loop1: detected capacity change from 0 to 512 [ 337.106171][T16210] EXT4-fs (loop1): 1 truncate cleaned up [ 337.111729][T16210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 337.123840][ T28] audit: type=1400 audit(2268436178.627:4864): avc: denied { execute_no_trans } for pid=16209 comm="syz.1.6651" path="/92/bus/file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 337.151658][T14382] EXT4-fs (loop1): unmounting filesystem. [ 337.162706][T16214] loop1: detected capacity change from 0 to 16 [ 337.168789][ T329] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 337.177590][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.185342][ T329] usb 3-1: Product: syz [ 337.189774][T16214] erofs: (device loop1): mounted with root inode @ nid 36. [ 337.196977][ T329] usb 3-1: Manufacturer: syz [ 337.201386][ T329] usb 3-1: SerialNumber: syz [ 337.206175][ T329] r8152-cfgselector 3-1: config 0 descriptor?? [ 337.214652][ T28] audit: type=1400 audit(2268436178.711:4865): avc: denied { watch_reads } for pid=16213 comm="syz.1.6652" path="/93/file2" dev="loop1" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.217665][T16214] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 337.250857][ T578] hid-led 0003:1D34:000A.006A: unknown main item tag 0x0 [ 337.260416][ T578] hid-led 0003:1D34:000A.006A: item fetching failed at offset 3/5 [ 337.268125][ T578] hid-led: probe of 0003:1D34:000A.006A failed with error -22 [ 337.389158][T16217] loop3: detected capacity change from 0 to 40427 [ 337.395744][T16217] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 337.403219][T16217] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 337.411634][T16217] F2FS-fs (loop3): invalid crc value [ 337.417941][T16217] F2FS-fs (loop3): Found nat_bits in checkpoint [ 337.440829][T16217] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 337.447750][T16217] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 337.464751][T16217] syz.3.6650: attempt to access beyond end of device [ 337.464751][T16217] loop3: rw=2051, sector=36912, nr_sectors = 8144 limit=40427 [ 337.479008][T16217] syz.3.6650: attempt to access beyond end of device [ 337.479008][T16217] loop3: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 337.493365][ T311] usb 5-1: USB disconnect, device number 64 [ 337.496247][T16217] F2FS-fs (loop3): Issue discard(4614, 4614, 1018) failed, ret: -5 [ 337.499074][T16217] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 337.719988][ T329] r8152-cfgselector 3-1: Unknown version 0x0000 [ 337.734081][ T329] r8152-cfgselector 3-1: bad CDC descriptors [ 337.752047][ T329] r8152-cfgselector 3-1: Unknown version 0x0000 [ 337.758416][ T329] r8152-cfgselector 3-1: USB disconnect, device number 72 [ 337.848224][ T480] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 338.037137][T16230] loop4: detected capacity change from 0 to 512 [ 338.043697][T16230] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 338.054098][T16230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 338.061838][T16230] System zones: 1-12 [ 338.066421][T16230] EXT4-fs (loop4): 1 truncate cleaned up [ 338.071861][T16230] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 338.265197][ T480] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 338.275884][ T480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.286470][ T480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.296538][ T480] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 338.382840][ T329] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 338.404196][ T480] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 338.413208][ T480] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 338.421380][ T480] usb 4-1: Manufacturer: syz [ 338.426939][ T480] usb 4-1: config 0 descriptor?? [ 338.650018][ T329] usb 5-1: Using ep0 maxpacket: 32 [ 338.821115][ T329] usb 5-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 338.831213][ T329] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 338.843875][ T329] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 338.852693][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.860916][ T329] usb 5-1: config 0 descriptor?? [ 338.917620][ T329] usb 5-1: bad CDC descriptors [ 338.939166][ T480] appleir 0003:05AC:8243.006B: unknown main item tag 0x0 [ 338.946144][ T480] appleir 0003:05AC:8243.006B: No inputs registered, leaving [ 338.953923][ T480] appleir 0003:05AC:8243.006B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 339.133660][ T480] usb 5-1: USB disconnect, device number 65 [ 339.155647][ T329] usb 4-1: USB disconnect, device number 65 [ 339.672264][T14386] EXT4-fs (loop4): unmounting filesystem. [ 339.699183][T16268] loop4: detected capacity change from 0 to 1024 [ 339.705555][T16268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 339.720448][T16268] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 339.728481][T16268] System zones: 0-1, 3-12 [ 339.732907][T16268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 339.744553][T16268] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 16: comm syz.4.6674: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 339.751141][ T329] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 339.776083][T14386] EXT4-fs (loop4): unmounting filesystem. [ 339.809284][ T1804] Bluetooth: hci0: Frame reassembly failed (-84) [ 339.997058][ T578] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 340.178799][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.189610][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.199163][ T329] usb 3-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 340.208344][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.216864][ T329] usb 3-1: config 0 descriptor?? [ 340.239715][T16286] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 340.253640][ T578] usb 4-1: Using ep0 maxpacket: 16 [ 340.382027][ T578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.392893][ T578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.402437][ T578] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.415069][ T578] usb 4-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 340.423854][ T578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.432023][ T578] usb 4-1: config 0 descriptor?? [ 340.757402][ T329] logitech-hidpp-device 0003:046D:C343.006C: hidraw0: USB HID v0.02 Device [HID 046d:c343] on usb-dummy_hcd.2-1/input0 [ 340.949495][ T578] wacom 0003:056A:0022.006D: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 340.959054][ T578] wacom 0003:056A:0022.006D: hidraw1: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.3-1/input0 [ 340.970299][ T578] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0022.006D/input/input53 [ 340.991573][ T329] usb 3-1: USB disconnect, device number 73 [ 341.173345][ T1199] usb 4-1: USB disconnect, device number 66 [ 341.541255][T16310] loop2: detected capacity change from 0 to 512 [ 341.547485][T16310] EXT4-fs: Ignoring removed oldalloc option [ 341.554843][T16310] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.6693: Parent and EA inode have the same ino 15 [ 341.567208][T16310] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.6693: Parent and EA inode have the same ino 15 [ 341.579830][T16310] EXT4-fs (loop2): 1 orphan inode deleted [ 341.585352][T16310] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 341.595859][T16310] EXT4-fs error (device loop2): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz.2.6693: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 341.618993][T14385] EXT4-fs (loop2): unmounting filesystem. [ 341.869140][T16338] loop3: detected capacity change from 0 to 512 [ 341.880041][T16338] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 341.888749][T16338] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038 (0x7fffffff) [ 341.903859][T13883] EXT4-fs (loop3): unmounting filesystem. [ 342.006893][ T2627] Bluetooth: hci0: command 0x1003 tx timeout [ 342.006892][T10336] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 342.093758][T16368] netlink: 'syz.2.6717': attribute type 11 has an invalid length. [ 342.229524][T16388] loop2: detected capacity change from 0 to 256 [ 342.236884][T16389] syz.3.6727[16389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.236951][T16389] syz.3.6727[16389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.306280][ T329] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 342.372076][T16403] loop2: detected capacity change from 0 to 512 [ 342.386818][T16403] EXT4-fs (loop2): 1 orphan inode deleted [ 342.392471][T16403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 342.401233][T16403] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038 (0x7fffffff) [ 342.411046][ T8] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 342.420650][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:0: Failed to release dquot type 1 [ 342.437167][T14385] EXT4-fs (loop2): unmounting filesystem. [ 342.454420][T16408] loop3: detected capacity change from 0 to 256 [ 342.723172][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.733902][ T329] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 342.742682][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.750868][ T329] usb 5-1: config 0 descriptor?? [ 342.755201][ T578] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 343.011811][ T578] usb 4-1: Using ep0 maxpacket: 16 [ 343.279418][ T329] keytouch 0003:0926:3333.006E: fixing up Keytouch IEC report descriptor [ 343.288488][ T329] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.006E/input/input57 [ 343.311158][ T578] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 343.320117][ T578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.327952][ T578] usb 4-1: Product: syz [ 343.331887][ T578] usb 4-1: Manufacturer: syz [ 343.336310][ T578] usb 4-1: SerialNumber: syz [ 343.341115][ T578] usb 4-1: config 0 descriptor?? [ 343.365502][ T329] keytouch 0003:0926:3333.006E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 343.386290][ T578] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 343.393713][ T578] usb 4-1: Detected FT232H [ 343.610541][ T578] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 344.115341][ T329] usb 5-1: USB disconnect, device number 66 [ 344.124295][ T578] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 344.134293][ C0] keytouch 0003:0926:3333.006E: usb_submit_urb(ctrl) failed: -19 [ 344.343049][ T578] usb 4-1: USB disconnect, device number 67 [ 344.353702][ T578] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 344.363007][ T578] ftdi_sio 4-1:0.0: device disconnected [ 344.424474][T16428] loop1: detected capacity change from 0 to 8192 [ 344.480646][T16440] loop1: detected capacity change from 0 to 256 [ 344.487324][T16440] exfat: Deprecated parameter 'namecase' [ 344.494809][T16440] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 344.511934][ T28] audit: type=1400 audit(2268436185.539:4866): avc: denied { execute } for pid=16439 comm="syz.1.6748" path="/103/file1/cgroup.controllers" dev="loop1" ino=1049142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 344.736001][T16460] loop4: detected capacity change from 0 to 512 [ 344.742705][T16460] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.767011][T16460] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 344.781883][ T28] audit: type=1400 audit(2268436185.792:4867): avc: denied { setattr } for pid=16459 comm="syz.4.6758" name="00000000000000000000000000000001" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 344.792071][T16457] loop1: detected capacity change from 0 to 8192 [ 344.813308][T16457] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 344.831539][T14382] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 344.844545][T14386] EXT4-fs (loop4): unmounting filesystem. [ 344.850184][T14382] FAT-fs (loop1): Filesystem has been set read-only [ 344.893208][ T28] audit: type=1400 audit(2268436185.895:4868): avc: denied { unmount } for pid=16467 comm="syz.4.6761" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 344.944778][ T28] audit: type=1400 audit(2268436185.941:4869): avc: denied { write } for pid=16477 comm="syz.4.6766" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 344.980100][ T28] audit: type=1400 audit(2268436185.970:4870): avc: denied { open } for pid=16477 comm="syz.4.6766" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 344.998509][T16432] loop2: detected capacity change from 0 to 131072 [ 345.023999][T16432] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 345.044115][T16432] F2FS-fs (loop2): invalid crc value [ 345.052393][T16432] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 345.084720][T16497] netlink: 'syz.3.6773': attribute type 4 has an invalid length. [ 345.089695][T16432] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 345.225242][T16510] loop4: detected capacity change from 0 to 512 [ 345.231768][T16510] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 345.242458][T16510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 345.250249][T16510] System zones: 1-12 [ 345.254584][T16510] EXT4-fs (loop4): 1 truncate cleaned up [ 345.260476][T16510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 345.272639][T16510] EXT4-fs (loop4): shut down requested (0) [ 345.284135][T14386] EXT4-fs (loop4): unmounting filesystem. [ 345.343539][T16515] input: syz0 as /devices/virtual/input/input58 [ 345.406138][T16506] loop3: detected capacity change from 0 to 40427 [ 345.413658][T16506] F2FS-fs (loop3): invalid crc value [ 345.433549][T16506] F2FS-fs (loop3): Found nat_bits in checkpoint [ 345.467370][T16506] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 345.770065][ T578] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 345.802050][ T3782] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 345.973084][ T329] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 346.108569][T16549] loop1: detected capacity change from 0 to 256 [ 346.117290][T16549] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 346.141080][T16551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6794'. [ 346.154904][ T578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.166109][ T578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.175656][ T578] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 346.184576][ T578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.192550][ T3782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 346.203268][ T3782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.210918][T16553] loop1: detected capacity change from 0 to 512 [ 346.219102][ T578] usb 5-1: config 0 descriptor?? [ 346.219133][T16553] EXT4-fs: Ignoring removed mblk_io_submit option [ 346.230209][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 346.235311][T16553] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 346.246727][T16553] EXT4-fs (loop1): 1 orphan inode deleted [ 346.252429][T16553] EXT4-fs (loop1): 1 truncate cleaned up [ 346.257896][T16553] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 346.274163][T16552] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 346.292317][T14382] EXT4-fs (loop1): unmounting filesystem. [ 346.311566][T16558] loop1: detected capacity change from 0 to 256 [ 346.320094][T16558] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 346.342426][T16560] loop1: detected capacity change from 0 to 512 [ 346.349061][T16560] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 346.370056][T16560] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 346.380628][ T3782] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 346.389592][ T3782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.397765][ T3782] usb 4-1: Product: syz [ 346.401838][ T3782] usb 4-1: Manufacturer: syz [ 346.406162][ T3782] usb 4-1: SerialNumber: syz [ 346.411659][ T3782] usb 4-1: config 0 descriptor?? [ 346.417365][T14382] EXT4-fs (loop1): unmounting filesystem. [ 346.454722][ T3782] snd-usb-audio: probe of 4-1:0.0 failed with error -90 [ 346.582483][ T329] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 346.591396][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.599155][ T329] usb 3-1: Product: syz [ 346.603183][ T329] usb 3-1: Manufacturer: syz [ 346.607659][ T329] usb 3-1: SerialNumber: syz [ 346.612405][ T329] usb 3-1: config 0 descriptor?? [ 346.657617][ T329] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 346.665048][ T329] usb 3-1: Detected FT232H [ 346.671841][ T480] usb 4-1: USB disconnect, device number 68 [ 346.732855][ T578] magicmouse 0003:05AC:0269.006F: item fetching failed at offset 6/7 [ 346.740920][ T578] magicmouse 0003:05AC:0269.006F: magicmouse hid parse failed [ 346.748240][ T578] magicmouse: probe of 0003:05AC:0269.006F failed with error -22 [ 346.988942][ T2669] usb 5-1: USB disconnect, device number 67 [ 347.149093][ T329] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 347.181136][ T329] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 347.187842][ T329] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 347.196067][ T329] usb 3-1: USB disconnect, device number 74 [ 347.202132][ T329] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 347.213656][ T329] ftdi_sio 3-1:0.0: device disconnected [ 347.219446][T16567] input: syz0 as /devices/virtual/input/input59 [ 347.548889][T16572] loop4: detected capacity change from 0 to 128 [ 347.556486][T16572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 347.564929][T16572] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038 (0x7fffffff) [ 347.578953][T14386] EXT4-fs (loop4): unmounting filesystem. [ 347.690562][T16575] loop4: detected capacity change from 0 to 40427 [ 347.697265][T16575] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 347.704796][T16575] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 347.713446][T16575] F2FS-fs (loop4): invalid crc value [ 347.719677][T16575] F2FS-fs (loop4): Found nat_bits in checkpoint [ 347.743941][T16575] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 347.750807][T16575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 347.832366][T16575] syz.4.6803: attempt to access beyond end of device [ 347.832366][T16575] loop4: rw=2049, sector=77824, nr_sectors = 2056 limit=40427 [ 347.852632][T16575] syz.4.6803: attempt to access beyond end of device [ 347.852632][T16575] loop4: rw=2049, sector=79880, nr_sectors = 2040 limit=40427 [ 347.887008][T16575] syz.4.6803: attempt to access beyond end of device [ 347.887008][T16575] loop4: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 347.915676][T16575] syz.4.6803: attempt to access beyond end of device [ 347.915676][T16575] loop4: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 347.944924][T16575] syz.4.6803: attempt to access beyond end of device [ 347.944924][T16575] loop4: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 347.961539][ T578] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 347.984609][ T28] audit: type=1400 audit(2268436188.794:4871): avc: denied { getopt } for pid=16604 comm="syz.3.6814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.986135][T16575] syz.4.6803: attempt to access beyond end of device [ 347.986135][T16575] loop4: rw=2049, sector=59392, nr_sectors = 2048 limit=40427 [ 348.026202][T16575] syz.4.6803: attempt to access beyond end of device [ 348.026202][T16575] loop4: rw=2049, sector=61440, nr_sectors = 3048 limit=40427 [ 348.050326][T16575] syz.4.6803: attempt to access beyond end of device [ 348.050326][T16575] loop4: rw=2049, sector=64488, nr_sectors = 4096 limit=40427 [ 348.070690][T16575] syz.4.6803: attempt to access beyond end of device [ 348.070690][T16575] loop4: rw=2049, sector=68584, nr_sectors = 4112 limit=40427 [ 348.093188][T16575] syz.4.6803: attempt to access beyond end of device [ 348.093188][T16575] loop4: rw=2049, sector=72696, nr_sectors = 5128 limit=40427 [ 348.139907][ T8] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 348.151623][ T8] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 348.155124][T16619] loop0: detected capacity change from 0 to 512 [ 348.167199][T16619] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 348.201219][T16619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 348.223958][T14381] EXT4-fs (loop0): unmounting filesystem. [ 348.237537][T16623] loop0: detected capacity change from 0 to 512 [ 348.263154][T16623] EXT4-fs (loop0): 1 orphan inode deleted [ 348.268818][T16623] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 348.277780][T16623] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038 (0x7fffffff) [ 348.287981][ T8] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 348.300654][ T8] EXT4-fs error (device loop0): ext4_release_dquot:6787: comm kworker/u4:0: Failed to release dquot type 1 [ 348.314387][ T329] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 348.330765][T14381] EXT4-fs (loop0): unmounting filesystem. [ 348.341739][ T28] audit: type=1400 audit(2268436189.122:4872): avc: denied { nlmsg_write } for pid=16632 comm="syz.4.6828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 348.357180][ T578] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.378285][ T578] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.560284][ T578] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.569161][ T578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.576947][ T578] usb 3-1: Product: syz [ 348.580932][ T578] usb 3-1: Manufacturer: syz [ 348.585375][ T578] usb 3-1: SerialNumber: syz [ 348.592299][ T329] usb 4-1: Using ep0 maxpacket: 8 [ 348.774080][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.784817][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.794385][ T329] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 348.803270][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.811448][ T329] usb 4-1: config 0 descriptor?? [ 349.301526][T16650] loop4: detected capacity change from 0 to 256 [ 349.309226][ T329] logitech 0003:046D:C20E.0070: rdesc size test failed for formula gp [ 349.317415][ T329] logitech 0003:046D:C20E.0070: unbalanced delimiter at end of report description [ 349.327476][ T329] logitech 0003:046D:C20E.0070: parse failed [ 349.333429][ T329] logitech: probe of 0003:046D:C20E.0070 failed with error -22 [ 349.341475][T16650] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 349.426312][T16652] loop0: detected capacity change from 0 to 40427 [ 349.433435][T16652] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 349.440992][T16652] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 349.449580][T16652] F2FS-fs (loop0): invalid crc value [ 349.455882][T16652] F2FS-fs (loop0): Found nat_bits in checkpoint [ 349.480155][T16652] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 349.487077][T16652] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 349.526378][ T329] usb 4-1: USB disconnect, device number 69 [ 349.651831][ T28] audit: type=1400 audit(2268436190.347:4873): avc: denied { mounton } for pid=16667 comm="syz.4.6839" path="/182/file0" dev="incremental-fs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.708386][ T1804] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 349.719391][ T1804] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 349.800394][ T578] cdc_ncm 3-1:1.0: bind() failure [ 349.821777][ T578] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 349.843131][ T578] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 349.865229][ T578] usb 3-1: USB disconnect, device number 75 [ 349.968895][T16679] loop4: detected capacity change from 0 to 40427 [ 349.979426][T16679] F2FS-fs (loop4): invalid crc value [ 349.986035][T16679] F2FS-fs (loop4): Found nat_bits in checkpoint [ 350.027088][T16679] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 350.166693][ T28] audit: type=1400 audit(2268436190.834:4874): avc: denied { setopt } for pid=16717 comm="syz.0.6863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 350.205275][T16724] IPv6: syztnl2: Disabled Multicast RS [ 350.207657][T16726] syz.0.6866[16726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.210648][T16726] syz.0.6866[16726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.280997][T16744] loop0: detected capacity change from 0 to 1024 [ 350.299176][T16744] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 350.309084][T16744] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 350.309242][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6874'. [ 350.324336][T16744] EXT4-fs error (device loop0): ext4_get_journal_inode:5720: inode #5: comm syz.0.6875: unexpected bad inode w/o EXT4_IGET_BAD [ 350.347823][T16744] EXT4-fs (loop0): no journal found [ 350.352929][T16744] EXT4-fs (loop0): can't get journal size [ 350.360258][T16744] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 350.378478][T16744] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.6875: bg 0: block 32: padding at end of block bitmap is not set [ 350.392639][ T578] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 350.408459][T14381] EXT4-fs (loop0): unmounting filesystem. [ 350.434703][T16760] Invalid ELF header magic: != ELF [ 350.657375][T16792] loop4: detected capacity change from 0 to 256 [ 350.663599][T16792] exfat: Deprecated parameter 'namecase' [ 350.671363][T16792] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 350.740819][T16778] binder: 16777:16778 ioctl c0306201 20001a80 returned -14 [ 350.783927][ T578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.794714][ T578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.804154][ T578] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 350.813167][ T578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.821468][ T578] usb 4-1: config 0 descriptor?? [ 351.008366][ T480] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 351.329674][ T578] sony 0003:054C:0268.0071: unknown main item tag 0x0 [ 351.337035][ T578] sony 0003:054C:0268.0071: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 351.348701][ T578] sony 0003:054C:0268.0071: failed to claim input [ 351.457414][ T480] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 351.468076][ T480] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 351.546346][ T578] usb 4-1: USB disconnect, device number 70 [ 351.564322][ T480] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.573212][ T480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 351.581005][ T480] usb 5-1: SerialNumber: syz [ 351.607075][T16796] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 351.676009][T16806] loop2: detected capacity change from 0 to 128 [ 351.684828][T16806] tipc: Started in network mode [ 351.689499][T16806] tipc: Node identity 4070d9636f05f51f, cluster identity 4711 [ 351.696846][T16806] tipc: Enabling of bearer rejected, failed to enable media [ 351.843552][T16796] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 352.089181][T16818] loop3: detected capacity change from 0 to 256 [ 352.095404][T16818] exfat: Deprecated parameter 'utf8' [ 352.102884][T16818] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5b52992a, utbl_chksum : 0xe619d30d) [ 352.120251][ T2669] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 352.324392][ T480] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 352.361774][ T28] audit: type=1400 audit(2268436192.882:4875): avc: denied { mounton } for pid=16841 comm="syz.3.6919" path="/proc/650/cgroup" dev="proc" ino=90310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 352.384616][ T28] audit: type=1400 audit(2268436192.892:4876): avc: denied { remount } for pid=16841 comm="syz.3.6919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 352.412548][T16844] loop3: detected capacity change from 0 to 2048 [ 352.418878][T16844] EXT4-fs: Ignoring removed nobh option [ 352.424288][T16844] EXT4-fs: Ignoring removed mblk_io_submit option [ 352.442142][T16844] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 352.453625][T16844] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.6920: bg 0: block 234: padding at end of block bitmap is not set [ 352.467914][T16844] EXT4-fs (loop3): Remounting filesystem read-only [ 352.477415][T13883] EXT4-fs (loop3): unmounting filesystem. [ 352.569280][ T2669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.580050][ T2669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.594556][ T2669] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 352.611012][ T2669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.619959][ T2669] usb 3-1: config 0 descriptor?? [ 352.641928][T16868] netlink: 'syz.3.6930': attribute type 4 has an invalid length. [ 353.019233][T16899] loop3: detected capacity change from 0 to 512 [ 353.030746][T16899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 353.039715][T16899] ext4 filesystem being mounted at /332/bus supports timestamps until 2038 (0x7fffffff) [ 353.052896][ T28] audit: type=1400 audit(2268436193.528:4877): avc: denied { map } for pid=16898 comm="syz.3.6945" path="/332/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 353.075708][ T28] audit: type=1400 audit(2268436193.528:4878): avc: denied { execute } for pid=16898 comm="syz.3.6945" path="/332/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 353.100347][T13883] EXT4-fs (loop3): unmounting filesystem. [ 353.137460][ T2669] magicmouse 0003:05AC:0269.0072: item fetching failed at offset 6/7 [ 353.145538][ T2669] magicmouse 0003:05AC:0269.0072: magicmouse hid parse failed [ 353.152834][ T2669] magicmouse: probe of 0003:05AC:0269.0072 failed with error -22 [ 353.343713][T16932] loop1: detected capacity change from 0 to 512 [ 353.350304][T16932] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 353.363091][ T578] usb 3-1: USB disconnect, device number 76 [ 353.370051][T16932] EXT4-fs (loop1): 1 truncate cleaned up [ 353.375716][T16932] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 353.400878][T14382] EXT4-fs (loop1): unmounting filesystem. [ 353.412453][T16935] loop1: detected capacity change from 0 to 512 [ 353.418924][T16935] EXT4-fs: Ignoring removed oldalloc option [ 353.437259][T16935] EXT4-fs (loop1): 1 orphan inode deleted [ 353.442797][T16935] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 353.451597][T16935] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038 (0x7fffffff) [ 353.464456][ T28] audit: type=1400 audit(2268436193.911:4879): avc: denied { setattr } for pid=16934 comm="syz.1.6961" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 353.478223][T16935] incfs_lookup_dentry err:-2 [ 353.497067][T14382] ------------[ cut here ]------------ [ 353.502415][T14382] kernel BUG at fs/namei.c:2956! [ 353.507129][T14382] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 353.513161][T14382] CPU: 1 PID: 14382 Comm: syz-executor Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 353.523026][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.532919][T14382] RIP: 0010:may_delete+0x6eb/0x6f0 [ 353.537876][T14382] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 a6 6e f3 ff e9 72 fe ff ff e8 2c 2d ac ff 0f 0b e8 25 2d ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 11 2d ac ff 4c 8d [ 353.557308][T14382] RSP: 0018:ffffc9000195fbd8 EFLAGS: 00010293 [ 353.563209][T14382] RAX: ffffffff81c9761b RBX: ffff888110e80cf0 RCX: ffff88811e352880 [ 353.571020][T14382] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 353.578829][T14382] RBP: ffffc9000195fc40 R08: ffffffff81c96faf R09: 0000000000000003 [ 353.586641][T14382] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888110e80880 [ 353.594452][T14382] R13: 1ffff110221d0110 R14: ffff88813d74d178 R15: dffffc0000000000 [ 353.602265][T14382] FS: 0000555555ab9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 353.611032][T14382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.617450][T14382] CR2: 0000555555ae4528 CR3: 000000011a7a4000 CR4: 00000000003506a0 [ 353.625263][T14382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.633077][T14382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.640885][T14382] Call Trace: [ 353.644010][T14382] [ 353.646788][T14382] ? __die_body+0x62/0xb0 [ 353.650954][T14382] ? die+0x88/0xb0 [ 353.654511][T14382] ? do_trap+0x103/0x330 [ 353.658593][T14382] ? may_delete+0x6eb/0x6f0 [ 353.662932][T14382] ? handle_invalid_op+0x95/0xc0 [ 353.667712][T14382] ? may_delete+0x6eb/0x6f0 [ 353.672044][T14382] ? exc_invalid_op+0x32/0x50 [ 353.676556][T14382] ? asm_exc_invalid_op+0x1b/0x20 [ 353.681417][T14382] ? may_delete+0x7f/0x6f0 [ 353.685669][T14382] ? may_delete+0x6eb/0x6f0 [ 353.690009][T14382] ? may_delete+0x6eb/0x6f0 [ 353.694356][T14382] ? may_delete+0x6eb/0x6f0 [ 353.698691][T14382] vfs_rmdir+0x32/0x500 [ 353.702678][T14382] ? generic_shutdown_super+0x2b8/0x370 [ 353.708061][T14382] incfs_kill_sb+0x113/0x230 [ 353.712489][T14382] deactivate_locked_super+0xad/0x110 [ 353.717696][T14382] deactivate_super+0xbe/0xf0 [ 353.722211][T14382] cleanup_mnt+0x485/0x510 [ 353.726465][T14382] ? user_path_at_empty+0x14e/0x1a0 [ 353.731503][T14382] __cleanup_mnt+0x19/0x20 [ 353.735746][T14382] task_work_run+0x24d/0x2e0 [ 353.740271][T14382] ? task_work_cancel+0x2b0/0x2b0 [ 353.745125][T14382] ? __x64_sys_umount+0x122/0x170 [ 353.749982][T14382] exit_to_user_mode_loop+0x94/0xa0 [ 353.755017][T14382] exit_to_user_mode_prepare+0x5a/0xa0 [ 353.760310][T14382] syscall_exit_to_user_mode+0x26/0x130 [ 353.765690][T14382] do_syscall_64+0x47/0xb0 [ 353.769943][T14382] ? clear_bhb_loop+0x55/0xb0 [ 353.774456][T14382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.780185][T14382] RIP: 0033:0x7f870a17f327 [ 353.784437][T14382] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 353.803880][T14382] RSP: 002b:00007ffef478ecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 353.812124][T14382] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f870a17f327 [ 353.819936][T14382] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef478edb0 [ 353.827747][T14382] RBP: 00007ffef478edb0 R08: 0000000000000000 R09: 0000000000000000 [ 353.835559][T14382] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef478fea0 [ 353.843461][T14382] R13: 00007f870a1f0134 R14: 0000000000054138 R15: 00007ffef4790f60 [ 353.851270][T14382] [ 353.854127][T14382] Modules linked in: [ 353.858251][T14382] ---[ end trace 0000000000000000 ]--- [ 353.863536][T14382] RIP: 0010:may_delete+0x6eb/0x6f0 [ 353.868454][T14382] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 a6 6e f3 ff e9 72 fe ff ff e8 2c 2d ac ff 0f 0b e8 25 2d ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 11 2d ac ff 4c 8d [ 353.888088][T14382] RSP: 0018:ffffc9000195fbd8 EFLAGS: 00010293 [ 353.893960][T14382] RAX: ffffffff81c9761b RBX: ffff888110e80cf0 RCX: ffff88811e352880 [ 353.901825][T14382] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 353.909798][T14382] RBP: ffffc9000195fc40 R08: ffffffff81c96faf R09: 0000000000000003 [ 353.917616][T14382] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888110e80880 [ 353.919806][ T2669] usb 5-1: USB disconnect, device number 68 [ 353.925391][T14382] R13: 1ffff110221d0110 R14: ffff88813d74d178 R15: dffffc0000000000 [ 353.925408][T14382] FS: 0000555555ab9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 353.925424][T14382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.934239][ T2669] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 353.938977][T14382] CR2: 0000555555ae4528 CR3: 000000011a7a4000 CR4: 00000000003506a0 [ 353.971830][T14382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.979603][T14382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.988543][T14382] Kernel panic - not syncing: Fatal exception [ 353.994619][T14382] Kernel Offset: disabled [ 353.998740][T14382] Rebooting in 86400 seconds..