last executing test programs: 1m13.433775104s ago: executing program 3 (id=1038): ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) syz_clone(0x4020000, 0x0, 0x0, 0x0, &(0x7f0000002b80), 0x0) syz_clone3(&(0x7f0000002ec0)={0x40020000, 0x0, &(0x7f0000002cc0), 0x0, {0x31}, &(0x7f0000002d40)=""/249, 0xf9, 0x0, &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) syz_clone(0x69002200, &(0x7f0000002f40), 0x0, 0x0, &(0x7f0000003000), 0x0) 1m13.330287255s ago: executing program 3 (id=1043): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4a) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x200003, 0xffffffff, 0x0, 0xf, 0x0, "00120dd608f500001e20000080c90a008000"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd) 1m13.290712086s ago: executing program 3 (id=1045): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000400)={@random="ae63b2a6bea9", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4000, 0x0, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x4e24, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x40, 0x0, @val=0x80}}}}}}}, 0x0) 1m13.264916587s ago: executing program 3 (id=1047): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x1010051, &(0x7f0000000240)={[{@debug}, {@inlinecrypt}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@resuid}]}, 0x1, 0x550, &(0x7f00000002c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file2/../file0\x00', 0x0, 0x10}, 0x18) 1m12.990908782s ago: executing program 3 (id=1051): pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff}, 0x800) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = eventfd2(0x7, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r0, &(0x7f0000000080)="d1", 0x1, 0x7, 0x0, 0x5, r2}]) 1m12.012217941s ago: executing program 3 (id=1085): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1m11.911776483s ago: executing program 32 (id=1085): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1m10.367736832s ago: executing program 0 (id=1140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000800)='generic_add_lease\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) 1m10.358753242s ago: executing program 0 (id=1142): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x8000}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x4, 0x286, &(0x7f0000000c40)="$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") 1m10.281488854s ago: executing program 0 (id=1145): memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001e00995e00000000000000000c00000000000000"], 0x1c}], 0x1}, 0x0) 1m10.238181055s ago: executing program 0 (id=1150): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f00000001c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000006605,errors=remount-ro,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c696f636861727365743d69736f383835392d1e2c6e616d65636173653d312c6b6565705f6c6173745f646f74732c6769643d", @ANYRESHEX=0xee01, @ANYBLOB=',dmask=00000000000000000000001,errors=remount-ro,iocharset=cp1255,\x00'], 0x1, 0x1532, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1m10.092366058s ago: executing program 0 (id=1157): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1m9.893556871s ago: executing program 0 (id=1161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) 1m9.800159333s ago: executing program 33 (id=1161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) 7.240534761s ago: executing program 5 (id=2433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 7.232193641s ago: executing program 5 (id=2434): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x34, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x8, 0x6}}}}}]}}]}}, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000405"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.548271703s ago: executing program 5 (id=2451): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x210840, &(0x7f0000001680)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c757466383d757466382c6572726f72733d636f6e74696e75652c00c0ec72da0e786da19f8afc9cab685c2f1b3be1370ef4e2ac9f32df7c6276b71904c62c69c4ccddbeeaa7f603fbed1185661060"], 0x3, 0x1516, &(0x7f0000002580)="$eJzs3AuYTlXbOPD7XmvtMSQ9SQ7DWuvePMlhmSTJIUkOSZIkSU4JoUleSUgMOSUNSUgOQ3IYQnKYmDTO5/MxJEmTJCE5Jet/TfF63w7f+/V9/V/X9879u659Wfde+1577X3v8ey9eeabLkNrNKpZtQERwf8K/vJHIgDEAsBAALgOAAIAKJu7bO7M/uwSE/93O2F/rUdSrvYM2NXE9c/auP5ZG9c/a+P6Z21c/6yN65+1cf2zNq4/Y1nZ5ukFrucl6y78/j8r48///yAZpcZ+sbbUjV3/RArXP2vj+v/HCv47G3H9szauf9bG9c/auP5ZQbY/7OH6Z21cf8aysqv9/pmXq7tc7euPMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxljWcNZfoQDgcvtqz4sxxhhjjDHGGGN/HZ/tas+AMcYYY4wxxhhj//8hCJCgIIAYyAaxkB1ygACAayEXXAcRuB5yww2QB26EvJAP8kMBiIOCUAg0GLBAEEJhKAJRuAmKws1QDIpDCSgJDkpBPNwCpeFWKAO3QVm4HcrBHVAeKkBFqAR3QmW4C6rA3VAV7oFqUB1qQE24F2rBfVAb7oc68ADUhQehHjwE9eFhaACPQEN4FBrBY9AYHocm0BSaQXNo8T/KfxF6wEvQE3pBIvSGPvAy9IV+0B8GwEB4BQbBqzAYXoMkGAJD4XUYBm/AcHgTRsBIGAVvwWh4G8bAWBgH4yEZJsBEeAcmwbswGabAVJgGKTAdZsB7MBNmwWx4H+bABzAX5sF8WACp8CEshEWQBh/BYvgY0mEJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbATtgFu+ET2AN7YR98Cvvhsz+Zf+ZX+V0REFCgQIUKYzAGYzEWc2AOzIk5MRfmir18keTBPJgX82J+zI9xGIeFsBAaNEhIWBgLYxSjWBSLYjEshiWwBDp0GI/xWBpvxTJYBstiWSyH5bA8VsAKWAkrYWWsjFWwClbFqlgNq2ENrIH34r3YG2tjbayDdbAu1r38egobYANsiA2xETbCxtgYm2ATbIbNsAW2wJbYElthK2yDbbAttsX22B4TMAE7YAfsiB2xE3bCztgZu2AX7IrdsBu+mA3wJXwJe2E10Rv7YB/si0nZ+uMAHICv4CB8FV/F1zAJh+BQfB1fxzdwOJ7GETgSR+EorCzexjE4FkmMx2RMxok4ESfhJJyMU3AKTsMUnI4zcAbOxFk4C9/HOfgBfoDzcB4uwFRMxYW4CNMwDRfjGUzHJbgUl+FyXIHLcRWuxlW4FtfhWtyAG3ATbsItuAW34TbcgTtwFyoA/AT34l5Mwv24Hw/gATyIB/EQHsIMzMDDeBiP4BE8ikfxGB7D43gCT+IJPIWn8DSewbN4Fs/jebyAz8d91XBX8TVJIDIpoUSMiBGxIlbkEDlETpFT5BK5RERERG6RW+QReURekVfkF/lFnIgThUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQT8SJelBalRRlRRpQVt4ty4g5RXlQQrV0lUUlUFm1cFXG3qCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhI1Be9sT8+IjIr00gMwcZiKDYRTYW8dHG2FMOxlWgt2oinxEgcge1FS5cgnhEdxBjsKP4mxuJzorMYj13EC6Kr6Ca6ixdFD9HK9RS9xGTsLfqIadhX9BP9xQAxE6uL93FO9hriNZEkhoih4nWxAN8Qw8WbYoQYKUaJt8Ro8bYYI8aKcWK8SBYTxETxjpgk3hWTxRQxVUwTKWK6mCHeEzPFLDFbvC/miA/EXDFPzBcLRKr4UCwUi0Sa+EgsFh+LdLFELBXLxHKxQqwUq8RqsUasFevEerFBbBSbxGaxRWwV28R2sUPsFLvEbvGJ2CP2in3iU7FffCYOiM/FQfGFOCS+FBniK3FYfC2OiG/EUfGtOCa+E8fFCXFSfC9OiR/EaXFGnBXnxHnxo7ggfhIXhRcgUQoppZKBjJHZZKzMLnPIa2ROGVw6u9fL3PIGmUfeKPPKfDK/LCDjZEFZSGpppJUkQ1lYFpFReZMsKm+WxWRxWUKWlE6WkvHyFlla3irLyNtkWXm7LCfvkOVlBVlRVpJ3ysryLgmRX/ZRTVaXNWRNea+sJe+TteX9so58QNaVD8p68iFZXz4sG8hHZEP5qGwkH5ON5eOyiWwqm8nmsoV8QraUT8pWsrVsI5+SbWU72V4+LRPkM7KD9JcukedkZ/m87CJfkF1lN9ld/iQvSi97yl4SoLfsI1+WfWU/2V8OkAPlK3KQfFUOlq/JJDlEDpWvy2HyDQHyTTlCjpSj5FtytHxbjpFj5Tg5XibLCXKifEdOku/KyXKKnCqnyRQ5Xfa/NNJsKTPz5fD/Iv+d38kf/PPeN8nNcovcKrfJ7XKH3Cl3yd1yt9wj98h9cp/cL/fLA/KAPCgPykPykMyQGfKwPCyPyCPyqDwqj8lj8rg8Ic/J7+Up+YM8Lc/IM/KcPC/PywuXzgEoVEJJpVSgYlQ2FauyqxzqGpVTXatyqetURF2vcqsbVB51o8qr8qn8qoCKUwVVIaWVUVaRClVhVURF1U146YJRJVRJ5VQpFa9u+TP5qqi6WRVTxf8p//L8Ev9gfi1UC9VStVStVCvVRrVRbVVb1V61VwkqQXVQHVRH1VF1Up1UZ9VZdVFdVFfVVXVX3VUP1UP1VD1VokpUfdTLqq/qp/qrAWqgekUNUoPUYDVYJakkNVQNVcPUMDVcDVcj1Ag1So1So9VoNUaNUePUOJWsktVENVFNUpPUZDVZTVVTVYpKUTPUDDVTzVSz1Ww1R81Rc9VcNV/NV6kqVS1UC1WaSlOL1WKVrpaoJWqZWqZWqBVqlVql1qg1ap1apzaoDSpdbVab1Va1VW1X29VOtVPtVrvVHrVH7VP71H61Xx1QB9RBdVAdUodUhspQh9VhdUQdUUfVUXVMHVPH1XF1Up1Up9QpdVqdVmfVWXVenVcX1AV1UV3MvO0LRCACFaggJogJYoPYIEeQI8gZ5AxyBbmCSBAJcge5gzzBjUHeIF+QPygQxAUFg0KBDkxgA3Gp6NHgpqBocHNQLCgelAhKBi4oFcQHtwSlg1uDMsFtQdng9qBccEdQPqgQVAwqBXcGlYO7girB3UHV4J6gWlA9qBHUDO4NagX3BbWD+4M6wQNB3eDBoF7wUFA/eDhoEDwSNAweDRoFjwWNg8eDJkHToFnQPGjxl47v/el8T7qeupdO1L11H/2y7qv76f56gB6oX9GD9Kt6sH5NJ+kheqh+XQ/Tb+jh+k09Qo/Uo/RberR+W4/RY/U4PV4n6wl6on5HT9Lv6sl6ip6qp+kUPV3P0O/pmXqWnq3f13P0B3qunqfn6wU6VX+oF+pFOk1/pBfrj3W6XqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoXfqXXq3/kTv0Xv1Pv2p3q8/0wf05/qg/kIf0l/qDP2VPqy/1kf0N/qo/lYf09/p4/qEPqm/16f0D/q0PqPP6nP6vP5RX9A/6YvaZ97cZ368G2WUiTExJtbEmhwmh8lpcppcJpeJmIjJbXK3u1R+k9/kN3EmzhQyhUwmMmQKm8ImaqKmqClqiplipoQpYZxxJt7Em9KmtCljypiypqwpZ8qZ8qa8qWgqmjvNneYuc5e529xt7jH3mOqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWlv2psEk2A6mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJtEkmj6mj+lr+pr+pr8ZaAaaQWaQGWwGmySTZIaaoWaYGWaGm+FmhBlpRmUDQPO2GWPGmnFmvEk2yWaimWgmmUlmsplsppqpJsWkmBlmhplpZprZZraZY+aYuWaumW/mm1STahaahSbNpJnFZrFJN+lmqVlqlpvlZqVZaVab1WatWWvWw3qz0Ww0m81ms9VsNdvNdrPT7DS7zW6zx+wx+8w+s9/sNwfMAXPQHDSHzCGTYTLMYXPYHDFHzFFz1Bwzx8xxc9ycNCfNKXPKnDanzVlz1pw3+S59XnoTa7PbHPYam9Nea3PZ6+yv4/y2gI2zBW0hq21em+/neG/ML7Gx1hazxW0JW9I6W8rG21t+E5e3FWxFW8neaSvbu2yV38S17H22tr3f1rEP2Jr23n+K69oHbT37mK2PCGCb2oa2uW1kH7ON7eO2iW1qm9nmtq1tZ9vbp22CfcZ2sM/+Jl5oF9nVdo1da9fZPXavPWvP2SP2G3ve/mh72l52oH3FDrKv2sH2NZtkh/wmHmXfsqPt23aMHWvH2fG/iafaaTbFTrcz7Ht2pp31mzjVfmjn2DQ7186z8+2Cn+PMOaXZj+xi+7FNt0vsUrvMLrcr7Eq76u9zXWY32I12k91tP7Fb7Ta73e6wO+2un+PM49hnP7X77Wf2sP3aHrRf2EP2qM2wX/0cZx7fUfutPWa/s8ftCXvSfm9P2R/saXvm5+PPPPbv7U/2ovUWCAlIkqKAYigbxVJ2ykHXUE66lnLRdRSh6yk33UB56EbKS/koPxWgOCpIhUiTIUtEIRWmIhSlm+jyfXoJKkmOSlE83UKl6VYqQ7dRWbqdytEdVJ4qUEWqRHdSZbqLqtDdVJXuoWpUnWpQTbqXatF9VJvupzr0ANWlB6kePUT16WFqQI9QQ3qUGtFj1JgepybUlJpRc2pBT1BLepJaUWtqQ09RW2pH7elpSqBnqAM9Sx3pb9SJnqPO9Dx1oReoK3Wj7vQi9aCXqCf1okTqTX3oZepL/ag/DaCB9AoNoldpML1GSTSEhtLrNIzeoOH0Jo2gkTSK3qLR9DaNobE0jsZTMk2gifQOTaJ3aTJNoak0jVJoOs2g92gmzaLZ9D7NoQ9oLs2j+bSAUulDWkiLKI0+osX0MaXTElpKyyg11wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDtpJu2g3fUJ7aC/to09pP31GB+hzOkhf0CH6kjLoKzpMX9MR+oaO0re+F31Hx+kEnaTv6RT9QKfpDJ2lc3SefqQL9BNdJE8QYihCGaowCGPCbGFsmD3MEV4T5gyvDXOF14WR8Powd3hDmCe8Mcwb5gvzhwXCuLBgWCjUoQltSGEYFg6LhNHwprBoeHNYLCwelghLhi4sFcaHt4Slw1vDMuFtYdnw9rBceEdYPqwQPvZApfDOsHJ4V1glvDusGt4TVgurhzXCmuG9Ya3wvrB2eH9YJ3wgLBM+GNYLHwrrhw+HDcJHwobho2Gj8LGwcfh42CRsGjYLm4ctwifCluGTYauwddgmfCpsG7YL24dPhwnhM2GH8Nmf+x9c9Mf9iWHvsE/4cvhy6P39cn50QTQ1+mF0YXRRNC36UXRx9ONoenRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U9T7mtnAoRNOOuUCF+OyuViX3eVw17ic7lqXy13nIu56l9vd4PK4G11el8/ldwVcnCvoCjntjLOOXOgKuyIu6m5yRd3Nrpgr7kq4ks65Ui7eNXctXAvX0j3pWrnWro17yj3l2rl27mn3tHvGdXDPuo7ub66Te851ds+7590Lrqvr5rq7F10PNyHXLz+Tia6P6+P6ur6uv+vvBrqBbpAb5Aa7wS7JJbmhbqgb5oa54W64G+FGuFFulBvtRrsxbowb58a5ZJfsJrqJbpKb5Ca7yW6qm+pSXIqb4Wa4mW6mqzzrl73MdXPdfDffpbpUt9Bl3jOmucVusUt36W6pW+qWu+VupVvpVrvVbq1b69a79W6j2+g2u81uq9vqtrvtbqfb6Xa73W6Pv+6XQd1+d8AdcAfdQXfIfeky3FfusPvaHXHfuKPuW3fMfeeOuxPupPvenXI/uNPujDvrzrnz7kd3wf3kLjrvkiMTIhMj70QmRd6NTI5MiUyNTIukRKZHZkTei8yMzIrMjrwfmRP5IDI3Mi8yP7Igkhr5MLIwsiiSFvkosjjycSQ9siSyNLIssjyyIuJ9wa2hL+yL+Ki/yRf1N/tivrgv4Ut650v5eH+LL+1v9WX8bb6sv92X83f48r6Cr+gf9018U9/MN/ct/BO+pX/St/KtfRv/lG/r2/n2/mmf4J/xHfyzvqP/m+/kn/Od/fO+i3/Bd/XdfHf/ou/hX/I9fS+f6Hv7Pv5l39f38/39AD/Qv+IH+Vf9YP+aT/JD/FD/uh/m3/DD/Zt+hB/pR8W85UdffkSG8T7ZT/AT/Tt+kn/XT/ZT/FQ/zaf46X6Gf8/P9LP8bP++n+M/8HP9PD/fL/Cp/kO/0C/yaf4jv9h/7NP9kssvlf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tr/L7/af+D1+r9/nP/X7/Wf+gP/cH/Rf+EP+S5/hv/KH/df+iP/GH/Xf+mP+O3/cn/An/ff+lP/Bn/Zn/Fl/zp/3P/oL/id/kb+zxhhjjDH23zLhSlP8Xn/v31kn/mHjPgBw7bYCGf/Yn3lHuT7vL+1+Iq5tBACe6dXlkctLtWqJiYmXtk2XEBSZB3D5X4IyxcCVeAm0gXaQAK2h9O/Ov5/odp7+xfjR2wFy/ENOLFyJr4z/+R+M/8RToxaWC8/m/i/GnwdQrMiVnOzw9/jv365oDWX+YPx8Lf/F/LN/kQzQ6h9ycsKV+Mr84+FJeBYS/mlLxhhjjDHGGGPsF/1ExU6Xnz8v/4/P33s+j1NXcjIfai/H/+r5nDHGGGOMMcYYY1ffc926P/1EQkLrTn++UeV/lMWNv7oh4K8Zx3uAy2sUAPy59AB+tQbg3342tvxb9pV06Ufn113Lz/nfnIT/w42r/BcTY4wxxhhj7C935ab/n9erqzUhxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsC/p3/Dqxq32MjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2NX2/wIAAP//WyMKiA==") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.436642366s ago: executing program 5 (id=2452): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5.410705296s ago: executing program 5 (id=2453): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, r2, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.312773598s ago: executing program 5 (id=2455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 5.264054639s ago: executing program 34 (id=2455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 3.027814392s ago: executing program 1 (id=2509): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f00000000c0)) 2.021932601s ago: executing program 2 (id=2518): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000100)) 1.961429062s ago: executing program 2 (id=2519): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 1.902912914s ago: executing program 2 (id=2521): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) io_setup(0x3, &(0x7f0000000340)) socket$tipc(0x1e, 0x5, 0x0) 1.692289198s ago: executing program 2 (id=2525): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x3000000c}) 1.649532068s ago: executing program 2 (id=2528): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$eJzs3E1oXNUeAPD/nSRN+vU6r6+v77VWTa1isJi0abVdCFJRcKEgVlCXIR8ldtpIk4ItVaYgdSkF9+LSrQu36qaIK8FtXQpSKNJNW0EcuTN3PjuTNMkkY8zvB5M5536dc+655+bcc2YmgE1rOP2TVMI3I2JXRORaNxiuvN27c2Xy/p0rk1EslU7/lpR3u5vGM9lhYnsWGclF5D5O6isazF+6fHaiUJi+kMXHFs69PzZ/6fKzs0PZkpMnjx87euL58eeWX6g26aXlurv/o7kD+1599/rrk/3V5dXUGsvRLcMx3C4rZU91O7Ee29kQTvp7mBGWJb3+0+oaKLf/XdEXi1VecR1zBqy1UqlUGuy8ulhqdfWBJcCGlUSvcwD0RvUfffr8W3216whsWZvuR8/dPlV5AErLfS97RTxeXlgdBxloeb7tpuGIeKf4++fpK9ZoHAIAoNG3p2rDP839v3xlZuSPizdeTN//lc2h5CPi3xGxOyL+ExF7IuK/EbE3Iv4XEf9vOX5fRJQWSX+4JV5LvzYJlbvVhWJ2lPb/Xsjmtur9v6YM5Puy2M6Iaod5+kh2TkZiYHBmtjB9dJE0vnv5p087rWvs/6WvNP1qXzDLx63+lgG6qYmFiRUXuMXtqxH7+1vLn/RHJLWZgCQi9kXE/mUcN98Qnn3mywO1yEDzdkuXv6zUdh6tC/NMpS8inq7UfzGa6r+eYtI0P3lu4sz0menz47X5ybGhKEwfGZvpmJsffrz2Rqd1S5b/619ad3nlxDens5a1emn9b2u4/qM6f1svfz6JSGrztfPLT+Paz590fKZZ6fW/JXmrHK4+l34wsbBw4WjEluS1B5eP1/etxtP3KFbKP3Koffvfne2TnolHIiK9iB+NiMei8oSY5v1gRDwREYcWKf/3Lz353srLv7bS8k+13P8qNd9U//X5+k6BJJsbbLOq7+zBm/c73Dwerv6Pl0Mj2ZL297+k6RbRKafVcY90yZ+rPnsAAACwMeQiYkfDWNKOyOVGRytjQHtiW64wN79weGbu4vmpdF1EPgZyM7OF8vhnZTx4IKmOf+Yb4uMt8WPZuPFnfVvL8dHJucJUT0sObC+3+SQ3GvF2X0P7T/3anSFm4O/M97Vg81qs/aed+L3X1zEzwLp6+P//Nz5c04wA666h/Xf6hn9xBZ/7AjYAz/9A3dI/9OOeARtfSVuGTW1Z7f+wHwGEf5L+eLMWzvU0J8B60/+HTWnJ7/WvKlAabL9qKB7cOIYWP2BfrCwbW9uk1ZNA2rPqSepbV7JX9dcUOm4TueUdcDC6U6czqzwbxQvzZ/Z2/eIvZZ+V73YNfrUu7bRdoCe3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK77KwAA//8KhtfB") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 1.488041562s ago: executing program 2 (id=2536): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) 969.536921ms ago: executing program 1 (id=2547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 878.223663ms ago: executing program 1 (id=2551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x4, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4010) 822.304174ms ago: executing program 1 (id=2554): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) read$eventfd(r1, &(0x7f0000000040), 0x8) 802.586484ms ago: executing program 1 (id=2556): unshare(0x26020480) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000c0ff0000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000003a0, 0xffffffffffffffff, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x8, 0x0, 0x0}}, 0x10) 774.152345ms ago: executing program 1 (id=2558): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000ac0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x80, 0x1c, {0x8, 0x6, 0xb, 0x101, 0xe3, 0x302, 0x8, 0x8ee, 0x4, 0xd, 0xfffe, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 526.86399ms ago: executing program 7 (id=2566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 468.858971ms ago: executing program 7 (id=2567): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200044, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv1}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nombcache}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 468.681671ms ago: executing program 6 (id=2568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000ed00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 454.181892ms ago: executing program 6 (id=2569): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/109, 0x6d) lseek(r0, 0xb72f1b6, 0x1) getdents64(r0, 0x0, 0x0) 372.662163ms ago: executing program 7 (id=2570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2a64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x7]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x100, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x9, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x801, 0x958, 0x1fe, 0x4, 0x6, 0x3, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x8002, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x5, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x1, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 341.256053ms ago: executing program 4 (id=2571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x9, 0x4, 0x2, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80) 296.997514ms ago: executing program 4 (id=2572): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 270.220195ms ago: executing program 7 (id=2573): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 233.084415ms ago: executing program 6 (id=2574): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x0, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 193.997216ms ago: executing program 7 (id=2575): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000008, 0x12, 0x8001, 0x80000000, 0xff}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20002004}) 171.835807ms ago: executing program 6 (id=2576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) 155.657727ms ago: executing program 4 (id=2577): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e3", 0x32}], 0x1}}], 0x1, 0x85) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) 111.015978ms ago: executing program 4 (id=2578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 67.580119ms ago: executing program 6 (id=2579): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) 55.173599ms ago: executing program 4 (id=2580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000300)) 48.153979ms ago: executing program 7 (id=2581): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x551e, &(0x7f0000006680)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8, @ANYRES64], 0xb, 0x0, &(0x7f0000000580)) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 24.243049ms ago: executing program 4 (id=2582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 0s ago: executing program 6 (id=2583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001440)={0x7, 0x0, 0x1, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001400)={0x0, 0x0, 0x1, r2, 0x3}) kernel console output (not intermixed with test programs): 5.804220][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 105.804236][ T28] audit: type=1400 audit(2000000011.330:808): avc: denied { setopt } for pid=5024 comm="syz.5.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.986598][ T28] audit: type=1400 audit(2000000011.510:809): avc: denied { map } for pid=5039 comm="syz.6.1858" path="socket:[36461]" dev="sockfs" ino=36461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 106.222236][ T28] audit: type=1400 audit(2000000011.750:810): avc: denied { shutdown } for pid=5055 comm="syz.1.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.346810][ T28] audit: type=1400 audit(2000000011.870:811): avc: denied { create } for pid=5067 comm="syz.5.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.645421][ T5066] loop1: detected capacity change from 0 to 40427 [ 106.656997][ T28] audit: type=1400 audit(2000000012.180:812): avc: denied { ioctl } for pid=5078 comm="syz.2.1876" path="socket:[36893]" dev="sockfs" ino=36893 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.681858][ T557] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 106.691739][ T5066] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 106.709711][ T5066] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.733698][ T5066] F2FS-fs (loop1): invalid crc value [ 106.761532][ T5066] F2FS-fs (loop1): Found nat_bits in checkpoint [ 106.857576][ T5066] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 106.871994][ T5066] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 106.873062][ T557] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.915840][ T557] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.935413][ T557] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 106.955765][ T557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.968493][ T426] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 106.968514][ T426] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 106.979293][ T557] usb 6-1: config 0 descriptor?? [ 106.984961][ T426] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 107.013212][ T426] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 107.027037][ T426] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 107.042030][ T426] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 107.056516][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.072180][ T426] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 107.086430][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.102126][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.109929][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.118524][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.126542][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.134499][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.142448][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.150256][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.158343][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.166484][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.181859][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.192408][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.210405][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.218398][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.231836][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.249758][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.257711][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.265709][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.281839][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.292023][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.299868][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.307915][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.315961][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.323921][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.331760][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.339795][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.348446][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.356500][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.364602][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.372675][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.380610][ T287] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 107.390924][ T287] hid-generic 0000:FFFFFFFF:0000.0021: hidraw0: HID v0.00 Device [sy] on syz0 [ 107.398501][ T557] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 107.446480][ T5098] fido_id[5098]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.448691][ T557] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 107.487817][ T557] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 107.505490][ T557] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 107.521977][ T557] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 107.537694][ T557] playstation 0003:054C:0DF2.0022: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 107.597379][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 107.633219][ T557] playstation 0003:054C:0DF2.0022: Invalid reportID received, expected 9 got 0 [ 107.649762][ T557] playstation 0003:054C:0DF2.0022: Failed to retrieve DualSense pairing info: -22 [ 107.670324][ T5119] loop1: detected capacity change from 0 to 256 [ 107.676707][ T557] playstation 0003:054C:0DF2.0022: Failed to get MAC address from DualSense [ 107.681897][ T2067] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 107.695303][ T557] playstation 0003:054C:0DF2.0022: Failed to create dualsense. [ 107.720730][ T557] playstation: probe of 0003:054C:0DF2.0022 failed with error -22 [ 107.881834][ T2067] usb 5-1: Using ep0 maxpacket: 8 [ 107.882768][ T557] usb 6-1: USB disconnect, device number 9 [ 107.888184][ T2067] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 107.937519][ T2067] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.952011][ T2067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.960332][ T28] audit: type=1326 audit(2000000013.480:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.1899" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00e0b8eec9 code=0x0 [ 107.991852][ T2067] usb 5-1: Product: syz [ 107.996119][ T2067] usb 5-1: Manufacturer: syz [ 108.000734][ T2067] usb 5-1: SerialNumber: syz [ 108.045680][ T5140] loop2: detected capacity change from 0 to 512 [ 108.056439][ T5140] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1900: casefold flag without casefold feature [ 108.069609][ T5140] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1900: couldn't read orphan inode 15 (err -117) [ 108.081771][ T5140] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.104356][ T284] EXT4-fs (loop2): unmounting filesystem. [ 108.119958][ T28] audit: type=1400 audit(2000000013.640:814): avc: denied { connect } for pid=5143 comm="syz.2.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.162265][ T39] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 108.351859][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 108.358198][ T39] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 108.366377][ T39] usb 7-1: config 0 has no interface number 0 [ 108.374023][ T39] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 108.383169][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.391190][ T39] usb 7-1: Product: syz [ 108.395558][ T39] usb 7-1: Manufacturer: syz [ 108.400274][ T39] usb 7-1: SerialNumber: syz [ 108.406914][ T39] usb 7-1: config 0 descriptor?? [ 108.419809][ T39] smsc95xx v2.0.0 [ 108.461885][ T287] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 108.651844][ T287] usb 3-1: Using ep0 maxpacket: 32 [ 108.658300][ T287] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 108.666598][ T287] usb 3-1: config 0 has no interface number 0 [ 108.672988][ T287] usb 3-1: config 0 interface 230 has no altsetting 0 [ 108.681442][ T287] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 108.690777][ T287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.700784][ T287] usb 3-1: Product: syz [ 108.705041][ T287] usb 3-1: Manufacturer: syz [ 108.709675][ T287] usb 3-1: SerialNumber: syz [ 108.715743][ T287] usb 3-1: config 0 descriptor?? [ 108.721916][ T287] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 108.737998][ T287] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 108.815149][ T39] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 108.836635][ T39] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 108.856809][ T5164] xt_hashlimit: size too large, truncated to 1048576 [ 109.027683][ T2067] cdc_ncm 5-1:1.0: bind() failure [ 109.037288][ T2067] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 109.047651][ T2067] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 109.059355][ T2067] usb 5-1: USB disconnect, device number 12 [ 109.200697][ T5169] loop5: detected capacity change from 0 to 40427 [ 109.217515][ T5169] F2FS-fs (loop5): invalid crc value [ 109.231702][ T5169] F2FS-fs (loop5): Found nat_bits in checkpoint [ 109.267713][ T39] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 109.284063][ T39] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 109.292272][ T39] usb 7-1: USB disconnect, device number 7 [ 109.299024][ T5169] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 109.338484][ T3042] syz-executor: attempt to access beyond end of device [ 109.338484][ T3042] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.339545][ T5177] loop1: detected capacity change from 0 to 512 [ 109.381249][ T5177] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.390613][ T5177] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.418039][ T5177] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.1913: corrupted inode contents [ 109.430178][ T5177] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #2: comm syz.1.1913: mark_inode_dirty error [ 109.442780][ T5177] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.1913: corrupted inode contents [ 109.470642][ T426] EXT4-fs (loop1): unmounting filesystem. [ 109.527012][ T28] audit: type=1400 audit(2000000015.050:815): avc: denied { getopt } for pid=5193 comm="syz.5.1918" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.547672][ T5194] loop5: detected capacity change from 0 to 256 [ 109.567345][ T5194] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 109.646015][ T28] audit: type=1400 audit(2000000015.170:816): avc: denied { relabelfrom } for pid=5204 comm="syz.5.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.666930][ T28] audit: type=1400 audit(2000000015.170:817): avc: denied { relabelto } for pid=5204 comm="syz.5.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.858088][ T4822] tipc: Subscription rejected, illegal request [ 110.037730][ T5235] loop1: detected capacity change from 0 to 512 [ 110.053045][ T5235] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.541850][ T300] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 110.711850][ T2067] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 110.732995][ T300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.744333][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 110.744406][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 110.759808][ T300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.769600][ T300] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 110.778699][ T300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.787402][ T300] usb 6-1: config 0 descriptor?? [ 110.793284][ T300] hub 6-1:0.0: USB hub found [ 110.901862][ T2067] usb 5-1: Using ep0 maxpacket: 32 [ 110.908367][ T2067] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.930846][ T2067] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.937555][ T2067] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 110.946623][ T2067] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.965582][ T2067] usb 5-1: config 0 descriptor?? [ 111.000611][ T300] hub 6-1:0.0: 1 port detected [ 111.022554][ T287] ums-usbat: probe of 3-1:0.230 failed with error -5 [ 111.141984][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 111.199612][ T557] usb 3-1: USB disconnect, device number 18 [ 111.206336][ T300] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 111.214042][ T300] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 111.222961][ T300] usbhid 6-1:0.0: can't add hid device: -71 [ 111.229059][ T300] usbhid: probe of 6-1:0.0 failed with error -71 [ 111.262273][ T300] usb 6-1: USB disconnect, device number 10 [ 111.332940][ T24] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 111.342094][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.351130][ T24] usb 7-1: config 0 descriptor?? [ 111.374485][ T2067] sunplus 0003:04FC:05D8.0023: hidraw0: USB HID v0.02 Device [HID 04fc:05d8] on usb-dummy_hcd.4-1/input0 [ 111.578999][ T300] usb 5-1: USB disconnect, device number 13 [ 111.724585][ T5269] loop5: detected capacity change from 0 to 512 [ 111.734988][ T5269] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.757214][ T5269] EXT4-fs (loop5): 1 truncate cleaned up [ 111.763034][ T5269] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 111.813963][ T3042] EXT4-fs (loop5): unmounting filesystem. [ 113.351863][ T300] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 113.490153][ T24] usb 7-1: Cannot set autoneg [ 113.497173][ T24] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 113.516662][ T24] usb 7-1: USB disconnect, device number 8 [ 113.544859][ T300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.563870][ T300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.571905][ T2067] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 113.579424][ T300] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.597011][ T300] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.606217][ T300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.618817][ T300] usb 6-1: config 0 descriptor?? [ 113.695973][ T5314] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.705264][ T5314] FAT-fs (loop5): unable to read boot sector [ 113.763224][ T2067] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.774320][ T2067] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.784117][ T2067] usb 5-1: New USB device found, idVendor=0457, idProduct=ffff, bcdDevice= 0.00 [ 113.793302][ T2067] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.802287][ T2067] usb 5-1: config 0 descriptor?? [ 113.892083][ T557] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 113.937713][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 113.937731][ T28] audit: type=1400 audit(2000000019.460:821): avc: denied { read } for pid=5321 comm="syz.2.1971" path="socket:[38022]" dev="sockfs" ino=38022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.014707][ T28] audit: type=1400 audit(2000000019.540:822): avc: denied { setopt } for pid=5324 comm="syz.2.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.033630][ T300] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 114.052111][ T300] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 114.092874][ T557] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.111823][ T557] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.151898][ T557] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 114.179097][ T557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 114.188097][ T557] usb 2-1: SerialNumber: syz [ 114.215323][ T2067] hid-generic 0003:0457:FFFF.0025: unknown main item tag 0x0 [ 114.223126][ T2067] hid-generic 0003:0457:FFFF.0025: unknown main item tag 0x0 [ 114.240997][ T2067] hid-generic 0003:0457:FFFF.0025: hidraw1: USB HID v0.00 Device [HID 0457:ffff] on usb-dummy_hcd.4-1/input0 [ 114.314497][ T2067] usb 6-1: USB disconnect, device number 11 [ 114.399706][ T557] usb 2-1: 0:2 : does not exist [ 114.419965][ T557] usb 2-1: USB disconnect, device number 14 [ 114.433930][ T24] usb 5-1: USB disconnect, device number 14 [ 114.553682][ T5327] loop2: detected capacity change from 0 to 131072 [ 114.565665][ T5327] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.604504][ T5327] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.701253][ T5327] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 114.708803][ T5327] F2FS-fs (loop2): list inode (7) has corrupted xattr [ 114.847279][ T5345] loop5: detected capacity change from 0 to 1024 [ 114.873741][ T5345] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 114.920288][ T3042] EXT4-fs (loop5): unmounting filesystem. [ 115.003940][ T5363] syz.5.1986[5363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.004019][ T5363] syz.5.1986[5363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.032247][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1986'. [ 115.069512][ T5369] device bridge0 entered promiscuous mode [ 115.086393][ T5369] bridge0: port 3(macsec1) entered blocking state [ 115.093717][ T5369] bridge0: port 3(macsec1) entered disabled state [ 115.109781][ T5369] device bridge0 left promiscuous mode [ 115.120371][ T5373] SELinux: failed to load policy [ 115.168487][ T5381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1994'. [ 115.181899][ T557] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 115.181985][ T28] audit: type=1400 audit(2000000020.700:823): avc: denied { watch } for pid=5382 comm="syz.5.1996" path="/179/file0" dev="tmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 115.240083][ T28] audit: type=1400 audit(2000000020.750:824): avc: denied { bind } for pid=5384 comm="syz.5.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.262365][ T28] audit: type=1400 audit(2000000020.760:825): avc: denied { create } for pid=5386 comm="syz.5.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.282518][ T28] audit: type=1400 audit(2000000020.790:826): avc: denied { write } for pid=5386 comm="syz.5.1998" path="socket:[38124]" dev="sockfs" ino=38124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.335218][ T5398] loop5: detected capacity change from 0 to 512 [ 115.346649][ T5398] EXT4-fs (loop5): Test dummy encryption mode enabled [ 115.353752][ T5398] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 115.386492][ T5398] EXT4-fs (loop5): 1 truncate cleaned up [ 115.393048][ T5398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 115.410525][ T557] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 115.421925][ T557] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 115.444219][ T557] usb 2-1: config 1 interface 0 has no altsetting 0 [ 115.454075][ T557] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 115.454676][ T3042] EXT4-fs (loop5): unmounting filesystem. [ 115.469673][ T557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.478480][ T557] usb 2-1: Product: syz [ 115.499064][ T557] usb 2-1: Manufacturer: syz [ 115.504093][ T557] usb 2-1: SerialNumber: syz [ 115.531929][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 115.536980][ T5351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.549173][ T5351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.634726][ T28] audit: type=1400 audit(2000000021.160:827): avc: denied { write } for pid=5421 comm="syz.2.2014" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 115.722964][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.739649][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.755546][ T5413] loop5: detected capacity change from 0 to 40427 [ 115.760954][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.772187][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 115.775130][ T5413] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 115.778937][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 115.793179][ T5413] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 115.794995][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.815448][ T24] usb 5-1: config 0 descriptor?? [ 115.826148][ T5413] F2FS-fs (loop5): Found nat_bits in checkpoint [ 115.881419][ T5413] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 115.888828][ T5413] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 115.932913][ T3042] syz-executor: attempt to access beyond end of device [ 115.932913][ T3042] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.056071][ T5426] 9pnet: p9_errstr2errno: server reported unknown error @cƒF S+¼ÿÿÿÿÿÿÿÿ [ 116.119718][ T28] audit: type=1400 audit(2000000021.640:828): avc: denied { write } for pid=5429 comm="syz.5.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.227435][ T24] kye 0003:0458:5015.0026: unknown main item tag 0x1 [ 116.242537][ T24] kye 0003:0458:5015.0026: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 116.260803][ T5435] IPv6: sit1: Disabled Multicast RS [ 116.261830][ T24] kye 0003:0458:5015.0026: tablet-enabling feature report not found [ 116.274305][ T24] kye 0003:0458:5015.0026: tablet enabling failed [ 116.459451][ T6] usb 5-1: USB disconnect, device number 15 [ 116.573730][ T557] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8a:10:b3:5e:f1:01 [ 116.585094][ T557] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 116.601522][ T557] usb 2-1: USB disconnect, device number 15 [ 116.631208][ T5459] loop6: detected capacity change from 0 to 512 [ 116.641931][ T2067] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 116.650257][ T5459] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 116.668168][ T5459] EXT4-fs (loop6): 1 truncate cleaned up [ 116.676031][ T5459] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 116.742848][ T28] audit: type=1400 audit(2000000022.270:829): avc: denied { mounton } for pid=5472 comm="syz.2.2030" path="/syzcgroup/unified/syz2/file0" dev="cgroup2" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 116.743506][ T5473] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 116.784234][ T3218] EXT4-fs (loop6): unmounting filesystem. [ 116.842307][ T2067] usb 6-1: Using ep0 maxpacket: 32 [ 116.858526][ T2067] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.892873][ T2067] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.915065][ T2067] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 116.924636][ T2067] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.939754][ T2067] usb 6-1: config 0 descriptor?? [ 116.964287][ T28] audit: type=1400 audit(2000000022.490:830): avc: denied { read } for pid=5497 comm="syz.2.2036" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.044319][ T5504] device bridge0 entered promiscuous mode [ 117.060844][ T5504] bridge0: port 3(macsec1) entered blocking state [ 117.078791][ T5509] loop4: detected capacity change from 0 to 256 [ 117.080079][ T5504] bridge0: port 3(macsec1) entered disabled state [ 117.123083][ T5509] FAT-fs (loop4): Directory bread(block 64) failed [ 117.130841][ T5509] FAT-fs (loop4): Directory bread(block 65) failed [ 117.138424][ T5509] FAT-fs (loop4): Directory bread(block 66) failed [ 117.145367][ T5504] device bridge0 left promiscuous mode [ 117.145452][ T5509] FAT-fs (loop4): Directory bread(block 67) failed [ 117.159312][ T5509] FAT-fs (loop4): Directory bread(block 68) failed [ 117.166104][ T5509] FAT-fs (loop4): Directory bread(block 69) failed [ 117.173413][ T5509] FAT-fs (loop4): Directory bread(block 70) failed [ 117.180044][ T5509] FAT-fs (loop4): Directory bread(block 71) failed [ 117.188259][ T5509] FAT-fs (loop4): Directory bread(block 72) failed [ 117.195109][ T5509] FAT-fs (loop4): Directory bread(block 73) failed [ 117.223614][ T5509] syz.4.2040: attempt to access beyond end of device [ 117.223614][ T5509] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 117.286450][ T5519] serio: Serial port ttyS3 [ 117.361447][ T2067] savu 0003:1E7D:2D5A.0027: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 117.392009][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 117.541889][ T39] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 117.572983][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.584254][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 117.595373][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.614493][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.623767][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.634870][ T557] usb 6-1: USB disconnect, device number 12 [ 117.638443][ T24] usb 2-1: Product: syz [ 117.645475][ T24] usb 2-1: Manufacturer: syz [ 117.650196][ T24] usb 2-1: SerialNumber: syz [ 117.722937][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.734325][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.744225][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.757132][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.766205][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.774890][ T39] usb 3-1: config 0 descriptor?? [ 118.171015][ T5543] IPv6: sit1: Disabled Multicast RS [ 118.184329][ T39] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 118.194289][ T39] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 118.261571][ T5554] overlayfs: failed to verify origin (/syz4, ino=116, err=-116) [ 118.270210][ T5554] overlayfs: failed to verify upper root origin [ 118.295459][ T5556] device syz_tun entered promiscuous mode [ 118.304622][ T5555] device syz_tun left promiscuous mode [ 118.355625][ T5565] loop4: detected capacity change from 0 to 512 [ 118.375692][ T5565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 118.384815][ T5565] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.405560][ T5565] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 118.426253][ T286] EXT4-fs (loop4): unmounting filesystem. [ 118.444108][ T5572] tipc: Enabled bearer , priority 10 [ 118.452936][ T6] usb 3-1: USB disconnect, device number 19 [ 118.524815][ T5579] loop6: detected capacity change from 0 to 512 [ 118.532331][ T5579] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.538918][ T5579] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.546569][ T5579] EXT4-fs (loop6): Test dummy encryption mode enabled [ 118.553518][ T5579] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 118.565124][ T5579] EXT4-fs (loop6): 1 truncate cleaned up [ 118.570790][ T5579] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 118.659389][ T24] cdc_ncm 2-1:1.0: bind() failure [ 118.668324][ T24] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 118.675209][ T24] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 118.691312][ T24] usb 2-1: USB disconnect, device number 16 [ 119.098152][ T5589] loop5: detected capacity change from 0 to 1024 [ 119.132771][ T5589] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.147101][ T5591] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 119.202447][ T5589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 119.336848][ T5603] loop4: detected capacity change from 0 to 1024 [ 119.336838][ T5589] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #11: comm syz.5.2072: missing EA_INODE flag [ 119.337059][ T5589] EXT4-fs (loop5): Remounting filesystem read-only [ 119.355375][ T5603] EXT4-fs: Ignoring removed nobh option [ 119.369789][ T5589] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.2072: error while reading EA inode 11 err=-117 [ 119.395392][ T5607] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 119.409459][ T5603] EXT4-fs: Ignoring removed bh option [ 119.431827][ T5589] EXT4-fs (loop5): Remounting filesystem read-only [ 119.451008][ T5603] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.483298][ T3042] EXT4-fs (loop5): unmounting filesystem. [ 119.492812][ T3218] EXT4-fs (loop6): unmounting filesystem. [ 119.534742][ T286] EXT4-fs (loop4): unmounting filesystem. [ 119.543948][ T5624] loop1: detected capacity change from 0 to 256 [ 119.746204][ T5648] loop5: detected capacity change from 0 to 512 [ 119.763977][ T5648] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.775236][ T5648] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.782383][ T5648] EXT4-fs (loop5): Test dummy encryption mode enabled [ 119.789305][ T5648] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.802381][ T5648] EXT4-fs (loop5): 1 truncate cleaned up [ 119.823733][ T5648] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 120.013799][ T5653] loop4: detected capacity change from 0 to 40427 [ 120.022465][ T5653] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 120.030524][ T5653] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 120.039904][ T5653] F2FS-fs (loop4): invalid crc value [ 120.046785][ T5653] F2FS-fs (loop4): Found nat_bits in checkpoint [ 120.087059][ T5653] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 120.094205][ T5653] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.171914][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 120.191849][ T39] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 120.371835][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 120.382345][ T24] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 120.396418][ T39] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 120.421885][ T39] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 120.422778][ T5678] loop6: detected capacity change from 0 to 16 [ 120.438455][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.448897][ T5678] erofs: (device loop6): mounted with root inode @ nid 36. [ 120.456457][ T39] usb 3-1: config 1 interface 0 has no altsetting 0 [ 120.463539][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 120.479967][ T39] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 120.486663][ T5680] loop4: detected capacity change from 0 to 256 [ 120.491166][ T5678] syz.6.2107[5678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.495396][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.518819][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.529759][ T5678] syz.6.2107[5678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.532354][ T39] usb 3-1: Product: syz [ 120.548812][ T39] usb 3-1: Manufacturer: syz [ 120.554127][ T24] usb 2-1: config 0 descriptor?? [ 120.560290][ T39] usb 3-1: SerialNumber: syz [ 120.583979][ T5657] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 120.591762][ T5678] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 120.605926][ T5657] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 120.616108][ T5678] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 120.625282][ T5685] loop4: detected capacity change from 0 to 512 [ 120.636535][ T5678] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 120.645948][ T5685] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 120.662623][ T5685] I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.672126][ T5685] EXT4-fs (loop4): couldn't read superblock of external journal [ 120.713315][ T3042] EXT4-fs (loop5): unmounting filesystem. [ 120.847998][ T5707] loop6: detected capacity change from 0 to 256 [ 120.855539][ T5707] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.867536][ T5707] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 120.887235][ T5707] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 120.902633][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 120.902667][ T28] audit: type=1400 audit(2000000026.430:834): avc: denied { create } for pid=5710 comm="syz.4.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 120.942539][ T28] audit: type=1400 audit(2000000026.470:835): avc: denied { remove_name } for pid=5706 comm="syz.6.2123" name="file0" dev="loop6" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.974949][ T24] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 120.983145][ T28] audit: type=1400 audit(2000000026.470:836): avc: denied { rename } for pid=5706 comm="syz.6.2123" name="file0" dev="loop6" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.988383][ T24] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 121.007914][ T28] audit: type=1400 audit(2000000026.470:837): avc: denied { reparent } for pid=5706 comm="syz.6.2123" name="file0" dev="loop6" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.012801][ T2067] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 121.043195][ T28] audit: type=1400 audit(2000000026.470:838): avc: denied { rmdir } for pid=5706 comm="syz.6.2123" name="file0" dev="loop6" ino=1048684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.052213][ T24] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 121.078483][ T24] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 121.085762][ T24] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 121.094163][ T24] lenovo 0003:17EF:6047.0029: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 121.197227][ T24] usb 2-1: USB disconnect, device number 17 [ 121.235518][ T28] audit: type=1400 audit(2000000026.760:839): avc: denied { remount } for pid=5731 comm="syz.4.2132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 121.263046][ T2067] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 121.272202][ T5734] loop6: detected capacity change from 0 to 512 [ 121.272981][ T2067] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 121.290673][ T2067] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 121.300590][ T2067] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.301068][ T5734] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 121.308949][ T2067] usb 6-1: Product: syz [ 121.318079][ T5734] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.322181][ T2067] usb 6-1: Manufacturer: syz [ 121.337094][ T2067] usb 6-1: SerialNumber: syz [ 121.342593][ T2067] usb 6-1: config 0 descriptor?? [ 121.347914][ T5691] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 121.355337][ T5691] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 121.370824][ T3218] EXT4-fs (loop6): unmounting filesystem. [ 121.490762][ T5740] loop6: detected capacity change from 0 to 40427 [ 121.501005][ T5740] F2FS-fs (loop6): Wrong segment_count / block_count (31 > 0) [ 121.508775][ T5740] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 121.517072][ T5740] F2FS-fs (loop6): heap/no_heap options were deprecated [ 121.525088][ T5740] F2FS-fs (loop6): invalid crc value [ 121.531549][ T5740] F2FS-fs (loop6): Found nat_bits in checkpoint [ 121.565716][ T5691] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 121.566772][ T5740] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 121.573053][ T5691] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 121.580359][ T5740] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 121.626917][ T3218] syz-executor: attempt to access beyond end of device [ 121.626917][ T3218] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 121.690208][ T39] (unnamed net_device) (uninitialized): Assigned a random MAC address: ea:48:9a:46:93:92 [ 121.710139][ T39] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 121.731173][ T39] usb 3-1: USB disconnect, device number 20 [ 121.831357][ T5751] syz.6.2136[5751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.831437][ T5751] syz.6.2136[5751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.887134][ T5754] loop6: detected capacity change from 0 to 16 [ 121.927802][ T5754] erofs: (device loop6): mounted with root inode @ nid 36. [ 121.947176][ T28] audit: type=1400 audit(2000000027.470:840): avc: denied { map } for pid=5753 comm="syz.6.2139" path="/226/file3/file2" dev="loop6" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.981043][ T5754] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 121.992377][ T46] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 122.008539][ T5754] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 122.027070][ T5754] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 122.051257][ T5754] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 122.072851][ T5754] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 122.092849][ T5754] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 122.114552][ T5754] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 122.227359][ T5744] loop1: detected capacity change from 0 to 131072 [ 122.234549][ T5744] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 122.242712][ T5744] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 122.251540][ T5744] F2FS-fs (loop1): invalid crc value [ 122.263529][ T5744] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.306005][ T5744] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 122.313290][ T5744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 122.332058][ T5778] loop4: detected capacity change from 0 to 1024 [ 122.363674][ T5778] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.457263][ T286] EXT4-fs (loop4): unmounting filesystem. [ 122.511948][ T6] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 122.580711][ T2067] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 122.594954][ T2067] dm9601 6-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, a6:31:95:98:55:6a [ 122.609788][ T2067] usb 6-1: USB disconnect, device number 13 [ 122.616393][ T2067] dm9601 6-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 122.651879][ T39] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 122.713164][ T6] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 122.726493][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.737557][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.747399][ T6] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 122.761319][ T6] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 122.770970][ T6] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 122.779186][ T6] usb 7-1: Manufacturer: syz [ 122.792432][ T6] usb 7-1: config 0 descriptor?? [ 122.831914][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 122.839967][ T5801] loop1: detected capacity change from 0 to 40427 [ 122.851417][ T5801] F2FS-fs (loop1): invalid crc value [ 122.854526][ T39] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 122.860478][ T5801] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.865866][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.880160][ T39] usb 3-1: Product: syz [ 122.886587][ T39] usb 3-1: Manufacturer: syz [ 122.896809][ T39] usb 3-1: SerialNumber: syz [ 122.906133][ T39] usb 3-1: config 0 descriptor?? [ 122.937980][ T5801] F2FS-fs (loop1): Start checkpoint disabled! [ 122.945615][ T5801] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 123.005533][ T4822] kworker/u4:88: attempt to access beyond end of device [ 123.005533][ T4822] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 123.020910][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.032120][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.042057][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.055145][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.064415][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.073377][ T24] usb 5-1: config 0 descriptor?? [ 123.214985][ T6] appleir 0003:05AC:8243.002A: item fetching failed at offset 0/1 [ 123.229448][ T6] appleir 0003:05AC:8243.002A: parse failed [ 123.242005][ T6] appleir: probe of 0003:05AC:8243.002A failed with error -22 [ 123.263195][ T5818] loop5: detected capacity change from 0 to 2048 [ 123.293545][ T5818] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 123.310325][ T28] audit: type=1400 audit(2000000028.830:841): avc: denied { mounton } for pid=5817 comm="syz.5.2154" path="/207/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.335287][ T39] Error reading MAC address [ 123.338732][ T28] audit: type=1400 audit(2000000028.860:842): avc: denied { rmdir } for pid=3042 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.341504][ T39] usb 3-1: USB disconnect, device number 21 [ 123.377922][ T28] audit: type=1400 audit(2000000028.890:843): avc: denied { unlink } for pid=3042 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 123.424297][ T2067] usb 7-1: USB disconnect, device number 9 [ 123.482878][ T24] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 123.494628][ T24] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 123.754384][ T6] usb 5-1: USB disconnect, device number 16 [ 123.908583][ T5843] loop5: detected capacity change from 0 to 256 [ 123.918046][ T5843] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 124.165613][ T5864] loop5: detected capacity change from 0 to 256 [ 124.199236][ T5864] exfat: Deprecated parameter 'utf8' [ 124.205378][ T5864] exfat: Deprecated parameter 'utf8' [ 124.216943][ T5864] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 124.334714][ T5875] loop1: detected capacity change from 0 to 1024 [ 124.441446][ T5867] loop2: detected capacity change from 0 to 40427 [ 124.451460][ T5867] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 124.459584][ T5867] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 124.469225][ T5867] F2FS-fs (loop2): invalid crc value [ 124.476155][ T5867] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.523446][ T5867] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 124.536041][ T5867] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.551868][ T2067] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 124.671813][ T5874] loop5: detected capacity change from 0 to 40427 [ 124.688292][ T5874] F2FS-fs (loop5): fault_injection options not supported [ 124.715947][ T5874] F2FS-fs (loop5): fault_type options not supported [ 124.723346][ T5874] F2FS-fs (loop5): invalid crc value [ 124.729985][ T5874] F2FS-fs (loop5): Found nat_bits in checkpoint [ 124.744051][ T5892] loop2: detected capacity change from 0 to 8192 [ 124.757666][ T5892] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 124.766720][ T5892] FAT-fs (loop2): Filesystem has been set read-only [ 124.773432][ T5892] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 124.782069][ T5892] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 124.791196][ T5892] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 124.792177][ T2067] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.799993][ T5892] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 124.818224][ T2067] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.819607][ T5892] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 124.837378][ T2067] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 124.837938][ T5892] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 124.856001][ T5874] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 124.856024][ T5892] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 124.872592][ T5892] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 124.902677][ T2067] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.922367][ T5899] loop6: detected capacity change from 0 to 512 [ 124.943198][ T2067] usb 5-1: config 0 descriptor?? [ 124.962998][ T5899] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.2186: casefold flag without casefold feature [ 124.991966][ T5899] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2186: couldn't read orphan inode 15 (err -117) [ 125.021706][ T5874] syz.5.2178: attempt to access beyond end of device [ 125.021706][ T5874] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 125.036112][ T5899] EXT4-fs mount: 3 callbacks suppressed [ 125.036247][ T5899] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 125.061890][ T5874] syz.5.2178: attempt to access beyond end of device [ 125.061890][ T5874] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 125.092546][ T3218] EXT4-fs (loop6): unmounting filesystem. [ 125.139657][ T3042] syz-executor: attempt to access beyond end of device [ 125.139657][ T3042] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.173319][ T5897] loop1: detected capacity change from 0 to 40427 [ 125.180419][ T5897] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 125.192336][ T5897] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 125.199947][ T5909] loop6: detected capacity change from 0 to 2048 [ 125.222979][ T5897] F2FS-fs (loop1): invalid crc value [ 125.251726][ T5897] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.273058][ T5909] Alternate GPT is invalid, using primary GPT. [ 125.284030][ T5909] loop6: p1 p2 p3 [ 125.345509][ T5897] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.359400][ T5897] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.597001][ T4822] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 125.603860][ T5927] loop5: detected capacity change from 0 to 40427 [ 125.612357][ T4822] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 125.625139][ T5927] F2FS-fs (loop5): heap/no_heap options were deprecated [ 125.642749][ T5927] F2FS-fs (loop5): invalid crc value [ 125.649131][ T5927] F2FS-fs (loop5): Found nat_bits in checkpoint [ 125.706592][ T5927] F2FS-fs (loop5): Start checkpoint disabled! [ 125.730383][ T5927] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 125.741943][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 125.772570][ T2067] hid-led 0003:27B8:01ED.002C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 125.785846][ T2067] hid-led 0003:27B8:01ED.002C: ThingM blink(1) v1 initialized [ 125.942974][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.944294][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 125.944312][ T28] audit: type=1400 audit(2000000031.470:869): avc: denied { unmount } for pid=3042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 125.961853][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.980253][ T28] audit: type=1400 audit(2000000031.480:870): avc: denied { write } for pid=5945 comm="syz.1.2199" path="socket:[40996]" dev="sockfs" ino=40996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.016048][ T557] usb 5-1: USB disconnect, device number 17 [ 126.043431][ T4793] kworker/u4:70: attempt to access beyond end of device [ 126.043431][ T4793] loop5: rw=1, sector=77824, nr_sectors = 2056 limit=40427 [ 126.044275][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.065057][ T4793] kworker/u4:70: attempt to access beyond end of device [ 126.065057][ T4793] loop5: rw=1, sector=79880, nr_sectors = 2040 limit=40427 [ 126.071653][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.094356][ T4793] kworker/u4:70: attempt to access beyond end of device [ 126.094356][ T4793] loop5: rw=1, sector=49152, nr_sectors = 2736 limit=40427 [ 126.095295][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.120518][ T24] usb 3-1: config 0 descriptor?? [ 126.121929][ T4793] kworker/u4:70: attempt to access beyond end of device [ 126.121929][ T4793] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 126.164098][ T28] audit: type=1400 audit(2000000031.690:871): avc: denied { read } for pid=5950 comm="syz.1.2207" dev="nsfs" ino=4026532623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 126.185568][ T6] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 126.193833][ T28] audit: type=1400 audit(2000000031.710:872): avc: denied { open } for pid=5950 comm="syz.1.2207" path="net:[4026532623]" dev="nsfs" ino=4026532623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 126.217661][ T28] audit: type=1400 audit(2000000031.710:873): avc: denied { create } for pid=5950 comm="syz.1.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.238163][ T28] audit: type=1400 audit(2000000031.720:874): avc: denied { bind } for pid=5950 comm="syz.1.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.281299][ T28] audit: type=1400 audit(2000000031.720:875): avc: denied { listen } for pid=5950 comm="syz.1.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.302085][ T28] audit: type=1400 audit(2000000031.750:876): avc: denied { connect } for pid=5950 comm="syz.1.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.325960][ T28] audit: type=1400 audit(2000000031.790:877): avc: denied { create } for pid=5952 comm="syz.1.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.348913][ T28] audit: type=1400 audit(2000000031.790:878): avc: denied { write } for pid=5952 comm="syz.1.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.372959][ T5957] hub 8-0:1.0: USB hub found [ 126.377691][ T5957] hub 8-0:1.0: 1 port detected [ 126.395453][ T5955] loop1: detected capacity change from 0 to 2048 [ 126.403210][ T6] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.413467][ T6] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 126.422564][ T6] usb 7-1: config 1 has no interface number 0 [ 126.431300][ T6] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.443424][ T5955] Alternate GPT is invalid, using primary GPT. [ 126.449626][ T6] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 126.450323][ T5955] loop1: p1 p2 p3 [ 126.460535][ T6] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.471738][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.494436][ T6] usb 7-1: Product: syz [ 126.506545][ T6] usb 7-1: Manufacturer: syz [ 126.511334][ T6] usb 7-1: SerialNumber: syz [ 126.523037][ T426] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 126.530227][ T353] I/O error, dev loop1, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.540362][ T1026] I/O error, dev loop1, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.550460][ T24] plantronics 0003:047F:FFFF.002D: unknown main item tag 0xe [ 126.551538][ T1019] I/O error, dev loop1, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.568249][ T24] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 126.576028][ T353] I/O error, dev loop1, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.585358][ T1026] I/O error, dev loop1, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.585407][ T1026] Buffer I/O error on dev loop1p1, logical block 8, async page read [ 126.599967][ T24] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 126.611099][ T1019] I/O error, dev loop1, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.612729][ T24] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 126.627971][ T1019] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 126.633338][ T353] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 126.640913][ T1019] I/O error, dev loop1, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.649281][ T353] I/O error, dev loop1, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.658351][ T1026] I/O error, dev loop1, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.690862][ T353] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 126.690917][ T353] I/O error, dev loop1, sector 60 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.690985][ T353] Buffer I/O error on dev loop1p2, logical block 10, async page read [ 126.691019][ T353] Buffer I/O error on dev loop1p2, logical block 11, async page read [ 126.691055][ T353] Buffer I/O error on dev loop1p2, logical block 12, async page read [ 126.691084][ T353] Buffer I/O error on dev loop1p2, logical block 13, async page read [ 126.691111][ T353] Buffer I/O error on dev loop1p2, logical block 14, async page read [ 126.691138][ T353] Buffer I/O error on dev loop1p2, logical block 15, async page read [ 126.705312][ T353] udevd[353]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 126.706785][ T1019] udevd[1019]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 126.708427][ T1026] udevd[1026]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 126.719781][ T353] udevd[353]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 126.721221][ T1019] udevd[1019]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 126.790713][ T1026] udevd[1026]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 126.911933][ T557] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 126.954626][ T24] usb 3-1: USB disconnect, device number 22 [ 127.101876][ T557] usb 2-1: Using ep0 maxpacket: 16 [ 127.105026][ T557] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 127.116328][ T557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.116354][ T557] usb 2-1: Product: syz [ 127.116368][ T557] usb 2-1: Manufacturer: syz [ 127.116382][ T557] usb 2-1: SerialNumber: syz [ 127.122367][ T557] r8152-cfgselector 2-1: config 0 descriptor?? [ 127.510898][ T5983] loop4: detected capacity change from 0 to 512 [ 127.522169][ T5983] EXT4-fs: Ignoring removed oldalloc option [ 127.530289][ T5983] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.542484][ T6] cdc_ncm 7-1:1.1: bind() failure [ 127.549866][ T557] r8152-cfgselector 2-1: Unknown version 0x0000 [ 127.562102][ T5983] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.570276][ T6] usb 7-1: USB disconnect, device number 10 [ 127.578078][ T557] r8152-cfgselector 2-1: bad CDC descriptors [ 127.595191][ T5983] EXT4-fs (loop4): 1 truncate cleaned up [ 127.600906][ T5983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.611689][ T557] r8152-cfgselector 2-1: Unknown version 0x0000 [ 127.645986][ T557] r8152-cfgselector 2-1: USB disconnect, device number 18 [ 127.661439][ T5992] loop2: detected capacity change from 0 to 256 [ 127.700058][ T5992] incfs: ino conflict with backing FS 1 [ 127.705910][ T286] EXT4-fs (loop4): unmounting filesystem. [ 127.766205][ T5997] loop5: detected capacity change from 0 to 2048 [ 127.782905][ T6000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2227'. [ 127.819604][ T5997] Alternate GPT is invalid, using primary GPT. [ 127.827143][ T5997] loop5: p1 p2 p3 [ 127.836199][ T5997] loop5: partition table partially beyond EOD, truncated [ 127.842407][ T6008] loop2: detected capacity change from 0 to 128 [ 127.866077][ T6008] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.901975][ T6008] ext4 filesystem being mounted at /463/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.963370][ T6016] loop5: detected capacity change from 0 to 1024 [ 127.974236][ T353] udevd[353]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 127.974774][ T6016] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2234: bg 0: block 10: padding at end of block bitmap is not set [ 127.985904][ T1019] udevd[1019]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 128.000348][ T1026] udevd[1026]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 128.009929][ T284] EXT4-fs (loop2): unmounting filesystem. [ 128.024451][ T6016] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.2234: Failed to acquire dquot type 0 [ 128.044386][ T6016] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.2234: Failed to acquire dquot type 0 [ 128.057416][ T6016] EXT4-fs error (device loop5): ext4_free_blocks:6205: comm syz.5.2234: Freeing blocks not in datazone - block = 0, count = 4096 [ 128.076902][ T6016] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.2234: Failed to acquire dquot type 0 [ 128.098798][ T6024] loop1: detected capacity change from 0 to 1024 [ 128.105556][ T6016] EXT4-fs (loop5): 1 orphan inode deleted [ 128.111363][ T6016] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 128.145128][ T6024] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.153782][ T6024] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.170369][ T6016] syz.5.2234 (6016) used greatest stack depth: 20544 bytes left [ 128.180173][ T6024] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2237: bg 0: block 393: padding at end of block bitmap is not set [ 128.195801][ T6024] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 128.208335][ T287] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 128.216017][ T6032] loop2: detected capacity change from 0 to 16 [ 128.222594][ T3042] EXT4-fs (loop5): unmounting filesystem. [ 128.228970][ T6024] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.228970][ T6024] [ 128.239999][ T6024] EXT4-fs (loop1): Total free blocks count 0 [ 128.244162][ T6032] erofs: (device loop2): mounted with root inode @ nid 36. [ 128.246154][ T6024] EXT4-fs (loop1): Free/Dirty block details [ 128.259493][ T6024] EXT4-fs (loop1): free_blocks=0 [ 128.264526][ T6024] EXT4-fs (loop1): dirty_blocks=16 [ 128.269711][ T6024] EXT4-fs (loop1): Block reservation details [ 128.275784][ T6024] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 128.286507][ T6032] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 128.308113][ T46] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 128.312353][ T6035] input: syz1 as /devices/virtual/input/input15 [ 128.322686][ T426] EXT4-fs (loop1): unmounting filesystem. [ 128.326850][ T6032] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 128.342804][ T6032] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 128.353997][ T6032] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 128.365198][ T6032] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 128.376661][ T6032] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 128.401141][ T6032] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 128.414698][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.421761][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.429296][ T287] usb 5-1: Using ep0 maxpacket: 32 [ 128.430425][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.436156][ T287] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 128.450414][ T287] usb 5-1: config 0 has no interface number 0 [ 128.456729][ T287] usb 5-1: config 0 interface 230 has no altsetting 0 [ 128.474260][ T287] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 128.489213][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.489991][ T287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.511329][ T287] usb 5-1: Product: syz [ 128.516919][ T287] usb 5-1: Manufacturer: syz [ 128.526520][ T287] usb 5-1: SerialNumber: syz [ 128.536886][ T287] usb 5-1: config 0 descriptor?? [ 128.546069][ T287] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 128.561763][ T287] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 128.591983][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 128.667488][ T6059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.811850][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 128.818107][ T24] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 128.826629][ T24] usb 6-1: config 0 has no interface number 0 [ 128.842970][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 128.852082][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.860131][ T24] usb 6-1: Product: syz [ 128.864347][ T24] usb 6-1: Manufacturer: syz [ 128.868955][ T24] usb 6-1: SerialNumber: syz [ 128.879099][ T24] usb 6-1: config 0 descriptor?? [ 128.893835][ T24] smsc95xx v2.0.0 [ 128.924107][ T6087] loop2: detected capacity change from 0 to 128 [ 129.021869][ T300] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 129.075149][ T6085] loop1: detected capacity change from 0 to 40427 [ 129.089366][ T6085] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.133323][ T6085] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 129.179571][ T426] syz-executor: attempt to access beyond end of device [ 129.179571][ T426] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.222958][ T300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.233907][ T300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.244046][ T300] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.263423][ T300] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.272976][ T300] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.284944][ T300] usb 7-1: config 0 descriptor?? [ 129.297771][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 129.308791][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 129.572485][ T6120] loop2: detected capacity change from 0 to 128 [ 129.580288][ T6120] FAT-fs (loop2): bogus number of FAT sectors [ 129.586600][ T6120] FAT-fs (loop2): Can't find a valid FAT filesystem [ 129.694826][ T300] plantronics 0003:047F:FFFF.002E: unknown main item tag 0xd [ 129.703677][ T300] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 129.713768][ T300] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 129.720033][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 129.737223][ T24] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 129.745308][ T24] usb 6-1: USB disconnect, device number 14 [ 129.842069][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'. [ 129.851007][ T6129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2279'. [ 129.901876][ T300] usb 7-1: USB disconnect, device number 11 [ 130.247983][ T6146] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 130.278259][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 130.286652][ T300] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.334493][ T6149] fido_id[6149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.426058][ T6157] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.435937][ T6144] loop5: detected capacity change from 0 to 40427 [ 130.447063][ T6144] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 130.455364][ T6144] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 130.486751][ T6144] F2FS-fs (loop5): invalid crc value [ 130.527335][ T6144] F2FS-fs (loop5): Found nat_bits in checkpoint [ 130.612914][ T24] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 130.624328][ T24] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.634547][ T6144] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 130.647081][ T6144] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 130.845871][ T6185] loop1: detected capacity change from 0 to 1024 [ 130.872549][ T287] ums-usbat: probe of 5-1:0.230 failed with error -5 [ 130.879370][ T6185] EXT4-fs: Ignoring removed nobh option [ 130.899920][ T6185] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.949236][ T6185] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 130.966476][ T4821] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 130.996309][ T6185] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.2302: Allocating blocks 385-513 which overlap fs metadata [ 130.999909][ T4821] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 131.032462][ T6185] EXT4-fs (loop1): pa ffff888113c0bb28: logic 16, phys. 129, len 24 [ 131.040516][ T6185] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 131.042140][ T287] usb 5-1: USB disconnect, device number 18 [ 131.098451][ T6195] loop6: detected capacity change from 0 to 1024 [ 131.105533][ T6195] EXT4-fs: Ignoring removed orlov option [ 131.122550][ T426] EXT4-fs (loop1): unmounting filesystem. [ 131.138652][ T6195] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 131.201470][ T3218] EXT4-fs (loop6): unmounting filesystem. [ 131.389965][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 131.389982][ T28] audit: type=1400 audit(2000000036.910:972): avc: denied { name_bind } for pid=6205 comm="syz.6.2320" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 131.483869][ T6212] x_tables: duplicate underflow at hook 4 [ 131.605181][ T28] audit: type=1400 audit(2000000037.130:973): avc: denied { setopt } for pid=6224 comm="syz.1.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.642767][ T28] audit: type=1400 audit(2000000037.170:974): avc: denied { relabelfrom } for pid=6227 comm="syz.1.2319" name="NETLINK" dev="sockfs" ino=41563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 131.653677][ T6228] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 131.667086][ T287] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 131.685452][ T28] audit: type=1400 audit(2000000037.200:975): avc: denied { relabelto } for pid=6227 comm="syz.1.2319" name="NETLINK" dev="sockfs" ino=41563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0" [ 131.761850][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 131.771531][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.886298][ T28] audit: type=1400 audit(2000000037.410:976): avc: denied { append } for pid=6241 comm="syz.4.2326" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.910397][ T28] audit: type=1400 audit(2000000037.410:977): avc: denied { map } for pid=6241 comm="syz.4.2326" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.934565][ T28] audit: type=1400 audit(2000000037.410:978): avc: denied { execute } for pid=6241 comm="syz.4.2326" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.959641][ T287] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.970186][ T287] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.982922][ T24] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 131.999177][ T24] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 132.009242][ T287] usb 6-1: config 1 has no interface number 0 [ 132.015437][ T287] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.026729][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 132.033821][ T287] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 132.045042][ T24] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 132.054229][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.054383][ T287] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.071496][ T24] usb 7-1: Product: syz [ 132.075691][ T24] usb 7-1: Manufacturer: syz [ 132.080366][ T24] usb 7-1: SerialNumber: syz [ 132.085414][ T287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.093776][ T287] usb 6-1: Product: syz [ 132.097985][ T287] usb 6-1: Manufacturer: syz [ 132.098041][ T6210] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 132.102634][ T287] usb 6-1: SerialNumber: syz [ 132.110252][ T6210] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 132.759244][ T28] audit: type=1400 audit(2000000038.280:979): avc: denied { write } for pid=6256 comm="syz.4.2331" path="socket:[42346]" dev="sockfs" ino=42346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.800861][ T6259] loop2: detected capacity change from 0 to 4096 [ 132.808184][ T4821] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.810214][ T28] audit: type=1400 audit(2000000038.330:980): avc: denied { ioctl } for pid=6260 comm="syz.4.2334" path="socket:[41606]" dev="sockfs" ino=41606 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.843349][ T6259] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 132.857783][ T6259] EXT4-fs (loop2): shut down requested (2) [ 132.864199][ T28] audit: type=1400 audit(2000000038.390:981): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 132.871924][ T6259] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.2333: directory missing '..' [ 132.904867][ T284] EXT4-fs (loop2): unmounting filesystem. [ 132.996322][ T557] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 133.003837][ T300] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 133.012206][ T557] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.044142][ T6269] fido_id[6269]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.129619][ T287] cdc_ncm 6-1:1.1: bind() failure [ 133.136591][ T24] (unnamed net_device) (uninitialized): Assigned a random MAC address: 72:ea:47:f2:a4:98 [ 133.148988][ T287] usb 6-1: USB disconnect, device number 15 [ 133.157820][ T24] rtl8150 7-1:1.0: eth1: rtl8150 is detected [ 133.168307][ T24] usb 7-1: USB disconnect, device number 12 [ 133.191885][ T300] usb 2-1: Using ep0 maxpacket: 32 [ 133.202083][ T300] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 133.210287][ T300] usb 2-1: config 0 has no interface number 0 [ 133.225293][ T300] usb 2-1: config 0 interface 230 has no altsetting 0 [ 133.240987][ T300] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 133.260356][ T300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.276045][ T300] usb 2-1: Product: syz [ 133.280265][ T300] usb 2-1: Manufacturer: syz [ 133.291825][ T300] usb 2-1: SerialNumber: syz [ 133.299995][ T300] usb 2-1: config 0 descriptor?? [ 133.308990][ T300] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 133.336778][ T300] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 133.395659][ T6292] blk_print_req_error: 17 callbacks suppressed [ 133.395696][ T6292] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.411227][ T6292] FAT-fs (loop5): unable to read boot sector [ 133.658326][ T6316] loop6: detected capacity change from 0 to 128 [ 133.819876][ T6331] loop6: detected capacity change from 0 to 2048 [ 133.853052][ T6331] loop6: p1 < > p4 [ 133.861438][ T6331] loop6: p4 size 8388608 extends beyond EOD, truncated [ 133.894292][ T353] udevd[353]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 133.905359][ T1019] udevd[1019]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 133.920435][ T1019] udevd[1019]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 133.922395][ T353] udevd[353]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 133.989862][ T6339] loop6: detected capacity change from 0 to 2048 [ 134.005413][ T6339] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 134.014232][ T6339] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.029398][ T6339] fs-verity: sha512 using implementation "sha512-avx2" [ 134.044019][ T3218] EXT4-fs (loop6): unmounting filesystem. [ 134.061204][ T6343] TCP: TCP_TX_DELAY enabled [ 134.131893][ T287] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 134.342975][ T287] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.350889][ T6354] loop6: detected capacity change from 0 to 40427 [ 134.354309][ T287] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.368538][ T6354] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 134.371000][ T287] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.385192][ T287] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 134.388020][ T6354] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 134.394554][ T287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.403354][ T6354] F2FS-fs (loop6): invalid crc value [ 134.411965][ T287] usb 6-1: config 0 descriptor?? [ 134.423657][ T6354] F2FS-fs (loop6): Found nat_bits in checkpoint [ 134.457866][ T6354] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 134.465183][ T6354] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 134.590156][ T4821] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 134.599696][ T4821] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 134.821838][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 134.821861][ T2615] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.002593][ T6390] loop4: detected capacity change from 0 to 256 [ 135.028932][ T287] usb 6-1: string descriptor 0 read error: -22 [ 135.213043][ T6399] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 135.222363][ T6399] overlayfs: missing 'lowerdir' [ 135.231127][ T287] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0032/input/input17 [ 135.244843][ T287] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0032/input/input18 [ 135.267244][ T287] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0032/input/input19 [ 135.281678][ T287] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0032/input/input20 [ 135.297003][ T287] uclogic 0003:256C:006D.0032: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 135.489560][ T6] usb 6-1: USB disconnect, device number 16 [ 135.582818][ T300] ums-usbat: probe of 2-1:0.230 failed with error -5 [ 135.634604][ T4821] tipc: Disabling bearer [ 135.645481][ T4821] tipc: Disabling bearer [ 135.660645][ T4821] tipc: Left network mode [ 135.671896][ T557] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 135.757205][ T287] usb 2-1: USB disconnect, device number 19 [ 135.823030][ T6425] netlink: 7000 bytes leftover after parsing attributes in process `syz.6.2392'. [ 135.872424][ T557] usb 3-1: Using ep0 maxpacket: 16 [ 135.878768][ T557] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 135.890584][ T557] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.905496][ T557] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.925648][ T557] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.935003][ T557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.943292][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.943531][ T557] usb 3-1: Product: syz [ 135.952624][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.954792][ T557] usb 3-1: Manufacturer: syz [ 135.964665][ T6426] device bridge_slave_0 entered promiscuous mode [ 135.969170][ T6440] loop6: detected capacity change from 0 to 512 [ 135.978962][ T557] usb 3-1: SerialNumber: syz [ 135.980592][ T6440] EXT4-fs: Ignoring removed orlov option [ 135.991155][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.998556][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.005943][ T6440] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 136.015993][ T6426] device bridge_slave_1 entered promiscuous mode [ 136.031167][ T6440] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 136.040310][ T6440] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.2397: corrupted in-inode xattr [ 136.052576][ T6440] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2397: couldn't read orphan inode 15 (err -117) [ 136.065357][ T6440] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 136.089507][ T3218] EXT4-fs (loop6): unmounting filesystem. [ 136.154813][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.161910][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.169215][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.176287][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.200405][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.208173][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.216175][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.224791][ T4821] device bridge_slave_1 left promiscuous mode [ 136.231042][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.238718][ T4821] device bridge_slave_0 left promiscuous mode [ 136.245050][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.253483][ T4821] device veth1_macvtap left promiscuous mode [ 136.259506][ T4821] device veth0_vlan left promiscuous mode [ 136.313889][ T6458] loop1: detected capacity change from 0 to 512 [ 136.320842][ T6458] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.336537][ T287] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 136.348295][ T6458] EXT4-fs (loop1): 1 truncate cleaned up [ 136.354686][ T6458] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 136.388395][ T6458] EXT4-fs error (device loop1): ext4_xattr_block_find:1837: inode #15: comm syz.1.2402: corrupted xattr block 33 [ 136.404926][ T557] usb 3-1: 0:2 : does not exist [ 136.412136][ T426] EXT4-fs (loop1): unmounting filesystem. [ 136.428205][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.437619][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.444760][ T4734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.454331][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.463451][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.470520][ T4734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.489674][ T6463] loop1: detected capacity change from 0 to 1024 [ 136.496925][ T6463] EXT4-fs: Ignoring removed nobh option [ 136.503006][ T6463] EXT4-fs: Ignoring removed bh option [ 136.509135][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.517639][ T6463] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.529296][ T287] usb 6-1: Using ep0 maxpacket: 32 [ 136.534792][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.540212][ T287] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.552188][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.560530][ T287] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.561600][ T6463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 136.569496][ T287] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.571037][ T287] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.580969][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.591544][ T287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.616028][ T287] usb 6-1: Product: syz [ 136.620226][ T287] usb 6-1: Manufacturer: syz [ 136.625070][ T287] usb 6-1: SerialNumber: syz [ 136.631712][ T287] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 136.633604][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.639209][ T287] cdc_ncm 6-1:1.0: bind() failure [ 136.659213][ T6463] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.2404: Allocating blocks 497-513 which overlap fs metadata [ 136.662148][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.674867][ T6463] EXT4-fs (loop1): pa ffff88810ff88000: logic 256, phys. 385, len 8 [ 136.689423][ T6463] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 136.699621][ T6426] device veth0_vlan entered promiscuous mode [ 136.708728][ T6466] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 136.716418][ T6426] device veth1_macvtap entered promiscuous mode [ 136.730217][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.739008][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.747519][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.759741][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.768389][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.776556][ T426] EXT4-fs (loop1): unmounting filesystem. [ 136.793252][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.807694][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.826798][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 136.826814][ T28] audit: type=1400 audit(2000000042.350:1022): avc: denied { mounton } for pid=6426 comm="syz-executor" path="/root/syzkaller.QJVzjg/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 136.837777][ T287] usb 6-1: USB disconnect, device number 17 [ 136.863788][ T28] audit: type=1400 audit(2000000042.350:1023): avc: denied { mount } for pid=6426 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.886639][ T28] audit: type=1400 audit(2000000042.350:1024): avc: denied { mount } for pid=6426 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 136.909081][ T28] audit: type=1400 audit(2000000042.350:1025): avc: denied { mounton } for pid=6426 comm="syz-executor" path="/root/syzkaller.QJVzjg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 136.936752][ T28] audit: type=1400 audit(2000000042.350:1026): avc: denied { mounton } for pid=6426 comm="syz-executor" path="/root/syzkaller.QJVzjg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 136.964745][ T28] audit: type=1400 audit(2000000042.390:1027): avc: denied { read write } for pid=6469 comm="syz.1.2406" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.988934][ T28] audit: type=1400 audit(2000000042.390:1028): avc: denied { open } for pid=6469 comm="syz.1.2406" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 137.013876][ T28] audit: type=1400 audit(2000000042.390:1029): avc: denied { mounton } for pid=6426 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 137.040154][ T28] audit: type=1400 audit(2000000042.390:1030): avc: denied { mounton } for pid=6426 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 137.078669][ T557] usb 3-1: USB disconnect, device number 23 [ 137.163450][ T28] audit: type=1400 audit(2000000042.690:1031): avc: denied { relabelfrom } for pid=6486 comm="syz.4.2413" name="NETLINK" dev="sockfs" ino=43005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.165368][ T6485] loop6: detected capacity change from 0 to 2048 [ 137.191475][ T6487] SELinux: Context system_u:object_r:iptables_conf_t:s0 is not valid (left unmapped). [ 137.194271][ T2067] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 137.263726][ T6485] loop6: p1 < > p4 [ 137.267883][ T6495] loop4: detected capacity change from 0 to 128 [ 137.270355][ T6485] loop6: p4 size 8388608 extends beyond EOD, truncated [ 137.374936][ T6501] loop4: detected capacity change from 0 to 128 [ 137.401623][ T2067] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.416281][ T2067] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.423595][ T6503] loop6: detected capacity change from 0 to 512 [ 137.442740][ T2067] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.445196][ T6507] loop4: detected capacity change from 0 to 1024 [ 137.452142][ T2067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.462191][ T6507] EXT4-fs: Ignoring removed nobh option [ 137.467995][ T2067] usb 2-1: SerialNumber: syz [ 137.473281][ T6507] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.489045][ T353] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.514775][ T6507] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 137.525848][ T6507] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 137.547735][ T6426] EXT4-fs (loop4): unmounting filesystem. [ 137.633108][ T6525] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004D†ü0xffffffffffffffff [ 137.683236][ T2067] usb 2-1: 0:2 : does not exist [ 137.691712][ T2067] usb 2-1: USB disconnect, device number 20 [ 137.765532][ T6536] loop2: detected capacity change from 0 to 1024 [ 137.772364][ T6536] EXT4-fs: Ignoring removed orlov option [ 137.786474][ T6536] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.795020][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 137.799391][ T6536] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.842105][ T4734] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 137.857240][ T4734] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 137.869827][ T4734] EXT4-fs (loop2): This should not happen!! Data will be lost [ 137.869827][ T4734] [ 137.879723][ T4734] EXT4-fs (loop2): Total free blocks count 0 [ 137.885887][ T557] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 137.885953][ T4734] EXT4-fs (loop2): Free/Dirty block details [ 137.899519][ T4734] EXT4-fs (loop2): free_blocks=4293918720 [ 137.905322][ T4734] EXT4-fs (loop2): dirty_blocks=16 [ 137.910448][ T4734] EXT4-fs (loop2): Block reservation details [ 137.916449][ T4734] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 137.927160][ T284] EXT4-fs (loop2): unmounting filesystem. [ 137.981853][ T6] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 138.001842][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 138.012562][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.023499][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.033515][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 138.046576][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 138.055807][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.067555][ T24] usb 7-1: config 0 descriptor?? [ 138.067969][ T6540] loop2: detected capacity change from 0 to 40427 [ 138.082654][ T6540] F2FS-fs (loop2): invalid crc value [ 138.082680][ T557] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.089546][ T6540] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.118332][ T557] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.140345][ T557] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.141987][ T6540] F2FS-fs (loop2): Start checkpoint disabled! [ 138.150298][ T557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.163867][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 138.169234][ T557] usb 5-1: SerialNumber: syz [ 138.169624][ T6540] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 138.174934][ T6] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 138.200634][ T6] usb 6-1: config 0 interface 0 has no altsetting 0 [ 138.225617][ T6] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 138.235230][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.249213][ T6] usb 6-1: config 0 descriptor?? [ 138.386265][ T6556] loop2: detected capacity change from 0 to 512 [ 138.411394][ T557] usb 5-1: 0:2 : does not exist [ 138.426516][ T557] usb 5-1: USB disconnect, device number 19 [ 138.450687][ T6560] loop2: detected capacity change from 0 to 2048 [ 138.480168][ T6560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 138.490774][ T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8241.0033/input/input21 [ 138.523882][ T6560] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 138.541922][ T6560] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 138.559822][ T6560] EXT4-fs (loop2): This should not happen!! Data will be lost [ 138.559822][ T6560] [ 138.569917][ T6560] EXT4-fs (loop2): Total free blocks count 0 [ 138.576128][ T6560] EXT4-fs (loop2): Free/Dirty block details [ 138.583379][ T6560] EXT4-fs (loop2): free_blocks=2415919504 [ 138.589191][ T6560] EXT4-fs (loop2): dirty_blocks=48 [ 138.597916][ T24] appleir 0003:05AC:8241.0033: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 138.610828][ T6560] EXT4-fs (loop2): Block reservation details [ 138.613834][ T6558] loop1: detected capacity change from 0 to 40427 [ 138.617164][ T6560] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 138.630970][ T6558] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 138.638872][ T6558] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 138.662960][ T6] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 138.674532][ T6] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 138.680573][ T6558] F2FS-fs (loop1): invalid crc value [ 138.681702][ T6] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 138.695457][ T6] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 138.702840][ T6] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 138.710677][ T6] lenovo 0003:17EF:6047.0034: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 138.716056][ T24] usb 7-1: USB disconnect, device number 13 [ 138.741762][ T284] EXT4-fs (loop2): unmounting filesystem. [ 138.765371][ T6558] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.817264][ T6558] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 138.824495][ T6558] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 138.875401][ T557] usb 6-1: USB disconnect, device number 18 [ 138.976030][ T6558] syz.1.2444: attempt to access beyond end of device [ 138.976030][ T6558] loop1: rw=2049, sector=77824, nr_sectors = 3352 limit=40427 [ 138.993295][ T6558] syz.1.2444: attempt to access beyond end of device [ 138.993295][ T6558] loop1: rw=2049, sector=81176, nr_sectors = 744 limit=40427 [ 139.013937][ T6558] syz.1.2444: attempt to access beyond end of device [ 139.013937][ T6558] loop1: rw=2049, sector=49152, nr_sectors = 3032 limit=40427 [ 139.031553][ T6558] syz.1.2444: attempt to access beyond end of device [ 139.031553][ T6558] loop1: rw=2049, sector=52184, nr_sectors = 1064 limit=40427 [ 139.052198][ T6558] syz.1.2444: attempt to access beyond end of device [ 139.052198][ T6558] loop1: rw=2049, sector=57344, nr_sectors = 2552 limit=40427 [ 139.072688][ T6558] syz.1.2444: attempt to access beyond end of device [ 139.072688][ T6558] loop1: rw=2049, sector=59896, nr_sectors = 2048 limit=40427 [ 139.092789][ T6558] syz.1.2444: attempt to access beyond end of device [ 139.092789][ T6558] loop1: rw=2049, sector=61944, nr_sectors = 2056 limit=40427 [ 139.101902][ T6] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 139.128941][ T6558] syz.1.2444: attempt to access beyond end of device [ 139.128941][ T6558] loop1: rw=2049, sector=64000, nr_sectors = 8384 limit=40427 [ 139.161234][ T6558] syz.1.2444: attempt to access beyond end of device [ 139.161234][ T6558] loop1: rw=2049, sector=72384, nr_sectors = 5440 limit=40427 [ 139.187869][ T6558] syz.1.2444: attempt to access beyond end of device [ 139.187869][ T6558] loop1: rw=2049, sector=81920, nr_sectors = 3800 limit=40427 [ 139.304587][ T6] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 139.315345][ T6] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 139.324675][ T6] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.333957][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.409728][ T6580] loop5: detected capacity change from 0 to 256 [ 139.424213][ T6580] exfat: Deprecated parameter 'utf8' [ 139.429665][ T6580] exfat: Unexpected value for 'utf8' [ 139.542449][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 139.561891][ T287] usb 3-1: USB disconnect, device number 24 [ 139.684343][ T6591] device syz_tun entered promiscuous mode [ 139.690131][ T6591] device macsec2 entered promiscuous mode [ 139.712525][ T6591] device syz_tun left promiscuous mode [ 139.733176][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.751697][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.764263][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.777552][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.786919][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.796080][ T24] usb 7-1: config 0 descriptor?? [ 139.847008][ T6593] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 139.860094][ T6593] SELinux: failed to load policy [ 139.996847][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.004040][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.011716][ T6594] device bridge_slave_0 entered promiscuous mode [ 140.019142][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.028303][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.036305][ T6594] device bridge_slave_1 entered promiscuous mode [ 140.109236][ T6612] loop1: detected capacity change from 0 to 256 [ 140.126067][ T6614] incfs: Options parsing error. -22 [ 140.131485][ T6614] incfs: mount failed -22 [ 140.172654][ T6620] loop2: detected capacity change from 0 to 16 [ 140.192642][ T6620] erofs: (device loop2): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 140.225810][ T4793] device bridge_slave_1 left promiscuous mode [ 140.232239][ T4793] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.239790][ T4793] device bridge_slave_0 left promiscuous mode [ 140.247226][ T4793] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.255626][ T4793] device veth1_macvtap left promiscuous mode [ 140.261677][ T4793] device veth0_vlan left promiscuous mode [ 140.428611][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2471'. [ 140.438026][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2471'. [ 140.499566][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.506691][ T6594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.514054][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.521103][ T6594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.533110][ T6635] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 140.626574][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.642958][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.652822][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.675149][ T6622] loop1: detected capacity change from 0 to 131072 [ 140.680617][ T6] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 140.683581][ T24] plantronics 0003:047F:FFFF.0035: unknown main item tag 0xd [ 140.696823][ T6622] F2FS-fs (loop1): Test dummy encryption mode enabled [ 140.704847][ T6622] F2FS-fs (loop1): invalid crc value [ 140.711158][ T24] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 140.720834][ T24] plantronics 0003:047F:FFFF.0035: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 140.734841][ T24] usb 7-1: USB disconnect, device number 14 [ 140.737462][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.751953][ T6622] F2FS-fs (loop1): Found nat_bits in checkpoint [ 140.773013][ T4773] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.780136][ T4773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.793987][ T6622] F2FS-fs (loop1): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 140.803776][ T6622] F2FS-fs (loop1): Failed to read root inode [ 140.827971][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.836280][ T6643] fido_id[6643]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 140.851295][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.858402][ T4773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.867312][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.875828][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.891841][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 140.898730][ T6] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 140.911113][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.920090][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.946803][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 140.967382][ T6594] device veth0_vlan entered promiscuous mode [ 140.976283][ T6] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 140.992204][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.000562][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.008459][ T6] usb 3-1: Product: syz [ 141.024484][ T6] usb 3-1: Manufacturer: syz [ 141.057680][ T6594] device veth1_macvtap entered promiscuous mode [ 141.081189][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.086714][ T6646] loop6: detected capacity change from 0 to 512 [ 141.095693][ T6646] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 141.103706][ T6] hub 3-1:4.0: bad descriptor, ignoring hub [ 141.109334][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.122212][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.130501][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.131852][ T6646] EXT4-fs (loop6): 1 truncate cleaned up [ 141.139310][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.158732][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.167136][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.172014][ T6] hub: probe of 3-1:4.0 failed with error -5 [ 141.175817][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.190368][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.199845][ T6646] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 141.212351][ T6650] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 141.340085][ T3218] EXT4-fs (loop6): unmounting filesystem. [ 141.372205][ T6666] random: crng reseeded on system resumption [ 141.390036][ T6673] loop1: detected capacity change from 0 to 128 [ 141.421923][ T556] usb 3-1: USB disconnect, device number 25 [ 141.454848][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2489'. [ 141.461899][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 141.468688][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2489'. [ 141.628787][ T6692] loop1: detected capacity change from 0 to 512 [ 141.637205][ T6692] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.649856][ T6692] EXT4-fs (loop1): 1 truncate cleaned up [ 141.656334][ T6692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.710071][ T6697] block device autoloading is deprecated and will be removed. [ 141.718019][ T6697] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 141.747616][ T426] EXT4-fs (loop1): unmounting filesystem. [ 141.836364][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 141.836389][ T28] audit: type=1400 audit(2000000047.350:1071): avc: denied { wake_alarm } for pid=6711 comm="syz.2.2504" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.863805][ T477] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 141.928467][ T4734] Bluetooth: hci0: Frame reassembly failed (-84) [ 141.962176][ T6727] loop4: detected capacity change from 0 to 512 [ 141.971559][ T6727] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.985169][ T6727] EXT4-fs (loop4): 1 truncate cleaned up [ 141.990958][ T6727] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.027770][ T6426] EXT4-fs (loop4): unmounting filesystem. [ 142.053721][ T477] usb 8-1: config 1 interface 0 has no altsetting 0 [ 142.061241][ T477] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.070603][ T477] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 142.078793][ T477] usb 8-1: SerialNumber: syz [ 142.084396][ T6669] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 142.102055][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 142.303893][ T6669] loop7: detected capacity change from 0 to 256 [ 142.312194][ T6735] loop2: detected capacity change from 0 to 40427 [ 142.321435][ T6735] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 142.329645][ T6735] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 142.338898][ T6735] F2FS-fs (loop2): invalid crc value [ 142.356931][ T477] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 142.364042][ T6735] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.398639][ T477] usb 8-1: USB disconnect, device number 2 [ 142.404561][ T6735] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 142.411604][ T6735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.878250][ T28] audit: type=1400 audit(2000000048.400:1072): avc: denied { ioctl } for pid=6744 comm="syz.2.2526" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44793 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.917380][ T6747] syz.4.2517[6747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.917455][ T6747] syz.4.2517[6747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.929452][ T28] audit: type=1400 audit(2000000048.400:1073): avc: denied { map } for pid=6744 comm="syz.2.2526" path="socket:[44794]" dev="sockfs" ino=44794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.985417][ T28] audit: type=1400 audit(2000000048.400:1074): avc: denied { read } for pid=6744 comm="syz.2.2526" path="socket:[44794]" dev="sockfs" ino=44794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.015119][ T28] audit: type=1326 audit(2000000048.540:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.4.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ca98eec9 code=0x7ffc0000 [ 143.038728][ T28] audit: type=1326 audit(2000000048.540:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.4.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ca98eec9 code=0x7ffc0000 [ 143.065183][ T28] audit: type=1326 audit(2000000048.540:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.4.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f67ca98eec9 code=0x7ffc0000 [ 143.088967][ T28] audit: type=1326 audit(2000000048.570:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.4.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ca98eec9 code=0x7ffc0000 [ 143.112491][ T28] audit: type=1326 audit(2000000048.580:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.4.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ca98eec9 code=0x7ffc0000 [ 143.181365][ T28] audit: type=1400 audit(2000000048.700:1080): avc: denied { sqpoll } for pid=6761 comm="syz.4.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 143.231928][ T6] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 143.307541][ T6770] loop2: detected capacity change from 0 to 512 [ 143.326733][ T6770] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.357140][ T6770] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2528: bg 0: block 5: invalid block bitmap [ 143.369848][ T6770] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 143.379778][ T6770] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2528: invalid indirect mapped block 3 (level 2) [ 143.393928][ T6770] EXT4-fs (loop2): 2 truncates cleaned up [ 143.401545][ T6770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.421839][ T6] usb 8-1: Using ep0 maxpacket: 32 [ 143.428127][ T6] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 143.451612][ T6] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 143.452345][ T284] EXT4-fs (loop2): unmounting filesystem. [ 143.460742][ T6] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 143.475151][ T6] usb 8-1: Product: syz [ 143.479440][ T6] usb 8-1: Manufacturer: syz [ 143.487250][ T6785] loop4: detected capacity change from 0 to 1024 [ 143.494226][ T6785] EXT4-fs: Ignoring removed orlov option [ 143.503513][ T6] hub 8-1:4.0: bad descriptor, ignoring hub [ 143.509444][ T6] hub: probe of 8-1:4.0 failed with error -5 [ 143.540797][ T6785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.551522][ T6785] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.605906][ T4734] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 143.621352][ T4734] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 143.627554][ T6797] loop6: detected capacity change from 0 to 1024 [ 143.634059][ T4734] EXT4-fs (loop4): This should not happen!! Data will be lost [ 143.634059][ T4734] [ 143.641106][ T6797] EXT4-fs: Ignoring removed orlov option [ 143.656186][ T4734] EXT4-fs (loop4): Total free blocks count 0 [ 143.662515][ T4734] EXT4-fs (loop4): Free/Dirty block details [ 143.668565][ T4734] EXT4-fs (loop4): free_blocks=4293918720 [ 143.671898][ T6797] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 143.674430][ T4734] EXT4-fs (loop4): dirty_blocks=16 [ 143.688632][ T4734] EXT4-fs (loop4): Block reservation details [ 143.694703][ T4734] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 143.710357][ T6426] EXT4-fs (loop4): unmounting filesystem. [ 143.752843][ T3218] EXT4-fs (loop6): unmounting filesystem. [ 143.781897][ T477] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 143.813985][ T6810] loop6: detected capacity change from 0 to 1024 [ 143.823621][ T6810] EXT4-fs: Ignoring removed bh option [ 143.829405][ T6810] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.841011][ T6] usb 8-1: USB disconnect, device number 3 [ 143.853470][ T6810] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 143.878443][ T6810] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3836: comm syz.6.2545: Allocating blocks 497-513 which overlap fs metadata [ 143.898182][ T6809] EXT4-fs (loop6): pa ffff888113c0b5e8: logic 16, phys. 241, len 17 [ 143.906231][ T6809] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 143.931468][ T3218] EXT4-fs (loop6): unmounting filesystem. [ 143.941931][ T2827] Bluetooth: hci0: command 0x1003 tx timeout [ 143.947984][ T2615] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.956757][ T6723] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 143.975312][ T477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.987502][ T477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.001701][ T477] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.017398][ T477] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.026536][ T477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.035157][ T477] usb 3-1: config 0 descriptor?? [ 144.040790][ T6816] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 144.259030][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2561'. [ 144.268186][ T6846] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2561'. [ 144.351993][ T6855] loop6: detected capacity change from 0 to 1024 [ 144.360103][ T6855] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 144.368930][ T6855] EXT4-fs (loop6): orphan cleanup on readonly fs [ 144.375572][ T6855] EXT4-fs error (device loop6): ext4_free_blocks:6205: comm syz.6.2565: Freeing blocks not in datazone - block = 0, count = 4096 [ 144.389260][ T6855] EXT4-fs (loop6): 1 orphan inode deleted [ 144.395314][ T6855] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 144.435855][ T3218] EXT4-fs (loop6): unmounting filesystem. [ 144.451860][ T287] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 144.455406][ T6860] loop7: detected capacity change from 0 to 1024 [ 144.471138][ T6860] EXT4-fs: Ignoring removed orlov option [ 144.483024][ T477] plantronics 0003:047F:FFFF.0036: unknown main item tag 0xd [ 144.498829][ T477] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 144.500549][ T6867] loop6: detected capacity change from 0 to 512 [ 144.511329][ T477] plantronics 0003:047F:FFFF.0036: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 144.519793][ T6860] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 144.528193][ T6867] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 144.551373][ T6867] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.2569: invalid indirect mapped block 4294967295 (level 0) [ 144.566565][ T6594] EXT4-fs (loop7): unmounting filesystem. [ 144.569214][ T6867] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.2569: invalid indirect mapped block 4294967295 (level 1) [ 144.591341][ T6867] EXT4-fs (loop6): 1 orphan inode deleted [ 144.611834][ T6867] EXT4-fs (loop6): 1 truncate cleaned up [ 144.619840][ T6867] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 144.653457][ T287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.677622][ T287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.686737][ T287] usb 2-1: config 1 has no interface number 0 [ 144.693547][ T287] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.705047][ T287] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 144.715468][ T3218] EXT4-fs (loop6): unmounting filesystem. [ 144.724167][ T6] usb 3-1: USB disconnect, device number 26 [ 144.725937][ T287] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.762629][ T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.778265][ T287] usb 2-1: Product: syz [ 144.782558][ T287] usb 2-1: Manufacturer: syz [ 144.789944][ T287] usb 2-1: SerialNumber: syz [ 144.794819][ T6885] loop4: detected capacity change from 0 to 256 [ 144.931247][ T6898] device pim6reg1 entered promiscuous mode [ 144.952600][ T6] ================================================================== [ 144.960715][ T6] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 144.967770][ T6] Write of size 8 at addr ffff888115cbca00 by task kworker/0:0/6 [ 144.975506][ T6] [ 144.977850][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted syzkaller #0 [ 144.985058][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.995129][ T6] Workqueue: usb_hub_wq hub_event [ 145.000200][ T6] Call Trace: [ 145.003494][ T6] [ 145.006438][ T6] __dump_stack+0x21/0x24 [ 145.010787][ T6] dump_stack_lvl+0xee/0x150 [ 145.015395][ T6] ? __cfi_dump_stack_lvl+0x8/0x8 [ 145.020430][ T6] ? enqueue_timer+0xae/0x480 [ 145.025115][ T6] print_address_description+0x71/0x200 [ 145.030673][ T6] print_report+0x4a/0x60 [ 145.035020][ T6] kasan_report+0x122/0x150 [ 145.039532][ T6] ? enqueue_timer+0xae/0x480 [ 145.044221][ T6] __asan_report_store8_noabort+0x17/0x20 [ 145.049945][ T6] enqueue_timer+0xae/0x480 [ 145.054460][ T6] __mod_timer+0x79f/0xb30 [ 145.058882][ T6] ? ttwu_do_activate+0x174/0x280 [ 145.063920][ T6] schedule_timeout+0x127/0x2e0 [ 145.068816][ T6] ? __cfi_schedule_timeout+0x10/0x10 [ 145.074201][ T6] ? __cfi_process_timeout+0x10/0x10 [ 145.079499][ T6] ? _raw_spin_lock+0x8e/0xe0 [ 145.084179][ T6] wait_for_common+0x354/0x620 [ 145.088946][ T6] ? usb_hcd_giveback_urb+0x351/0x410 [ 145.094320][ T6] ? wait_for_completion+0x20/0x20 [ 145.099433][ T6] ? usb_submit_urb+0x1142/0x1810 [ 145.104470][ T6] wait_for_completion_timeout+0xe/0x10 [ 145.110052][ T6] usb_start_wait_urb+0x166/0x2f0 [ 145.115093][ T6] ? usb_alloc_urb+0x44/0x140 [ 145.119780][ T6] ? usb_api_blocking_completion+0xb0/0xb0 [ 145.125591][ T6] ? kasan_save_alloc_info+0x25/0x30 [ 145.130902][ T6] ? usb_alloc_urb+0x44/0x140 [ 145.135592][ T6] ? __kasan_check_write+0x14/0x20 [ 145.140707][ T6] usb_control_msg+0x241/0x3f0 [ 145.145483][ T6] hub_ext_port_status+0x100/0x6b0 [ 145.150607][ T6] hub_port_debounce+0x1c7/0x250 [ 145.155552][ T6] hub_event+0x1b01/0x4350 [ 145.159989][ T6] ? sched_clock+0x9/0x10 [ 145.164335][ T6] ? __kasan_check_write+0x14/0x20 [ 145.169451][ T6] ? kthread_data+0x50/0xc0 [ 145.173962][ T6] ? __cfi_hub_event+0x10/0x10 [ 145.178743][ T6] ? __schedule+0xb8f/0x14e0 [ 145.183334][ T6] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 145.188882][ T6] process_one_work+0x71f/0xc40 [ 145.193735][ T6] worker_thread+0xa29/0x11f0 [ 145.198417][ T6] kthread+0x281/0x320 [ 145.202494][ T6] ? __cfi_worker_thread+0x10/0x10 [ 145.207607][ T6] ? __cfi_kthread+0x10/0x10 [ 145.212202][ T6] ret_from_fork+0x1f/0x30 [ 145.216627][ T6] [ 145.219646][ T6] [ 145.221980][ T6] Allocated by task 6723: [ 145.226326][ T6] kasan_set_track+0x4b/0x70 [ 145.230925][ T6] kasan_save_alloc_info+0x25/0x30 [ 145.236060][ T6] __kasan_kmalloc+0x95/0xb0 [ 145.240655][ T6] __kmalloc+0xb1/0x1e0 [ 145.244819][ T6] hci_alloc_dev_priv+0x27/0x1bd0 [ 145.249877][ T6] hci_uart_tty_ioctl+0x3d6/0xa20 [ 145.254915][ T6] tty_ioctl+0x8ef/0xc60 [ 145.259179][ T6] __se_sys_ioctl+0x12f/0x1b0 [ 145.263863][ T6] __x64_sys_ioctl+0x7b/0x90 [ 145.268457][ T6] x64_sys_call+0x58b/0x9a0 [ 145.272970][ T6] do_syscall_64+0x4c/0xa0 [ 145.277391][ T6] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.283289][ T6] [ 145.285624][ T6] Freed by task 6723: [ 145.289598][ T6] kasan_set_track+0x4b/0x70 [ 145.294208][ T6] kasan_save_free_info+0x31/0x50 [ 145.299249][ T6] ____kasan_slab_free+0x132/0x180 [ 145.304372][ T6] __kasan_slab_free+0x11/0x20 [ 145.309143][ T6] slab_free_freelist_hook+0xc2/0x190 [ 145.314526][ T6] __kmem_cache_free+0xb7/0x1b0 [ 145.319384][ T6] kfree+0x6f/0xf0 [ 145.323115][ T6] hci_release_dev+0x12a3/0x13b0 [ 145.328059][ T6] bt_host_release+0x82/0x90 [ 145.332656][ T6] device_release+0xa4/0x1d0 [ 145.337254][ T6] kobject_put+0x19d/0x280 [ 145.341682][ T6] put_device+0x1f/0x30 [ 145.345843][ T6] hci_dev_cmd+0x265/0x720 [ 145.350270][ T6] hci_sock_ioctl+0x41e/0x7f0 [ 145.354952][ T6] sock_do_ioctl+0x101/0x310 [ 145.359560][ T6] sock_ioctl+0x4d8/0x6e0 [ 145.364086][ T6] __se_sys_ioctl+0x12f/0x1b0 [ 145.368768][ T6] __x64_sys_ioctl+0x7b/0x90 [ 145.373355][ T6] x64_sys_call+0x58b/0x9a0 [ 145.377875][ T6] do_syscall_64+0x4c/0xa0 [ 145.382315][ T6] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.388216][ T6] [ 145.390538][ T6] Last potentially related work creation: [ 145.396252][ T6] kasan_save_stack+0x3a/0x60 [ 145.400935][ T6] __kasan_record_aux_stack+0xb6/0xc0 [ 145.406319][ T6] kasan_record_aux_stack_noalloc+0xb/0x10 [ 145.412136][ T6] insert_work+0x51/0x300 [ 145.416476][ T6] __queue_work+0x9b1/0xd30 [ 145.420988][ T6] queue_work_on+0xd2/0x140 [ 145.425495][ T6] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 145.430438][ T6] hci_cmd_sync_status+0x53/0x120 [ 145.435464][ T6] hci_dev_cmd+0x628/0x720 [ 145.439890][ T6] hci_sock_ioctl+0x41e/0x7f0 [ 145.444657][ T6] sock_do_ioctl+0x101/0x310 [ 145.449255][ T6] sock_ioctl+0x4d8/0x6e0 [ 145.453596][ T6] __se_sys_ioctl+0x12f/0x1b0 [ 145.458279][ T6] __x64_sys_ioctl+0x7b/0x90 [ 145.462867][ T6] x64_sys_call+0x58b/0x9a0 [ 145.467380][ T6] do_syscall_64+0x4c/0xa0 [ 145.471813][ T6] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.477712][ T6] [ 145.480032][ T6] Second to last potentially related work creation: [ 145.486617][ T6] kasan_save_stack+0x3a/0x60 [ 145.491300][ T6] __kasan_record_aux_stack+0xb6/0xc0 [ 145.496686][ T6] kasan_record_aux_stack_noalloc+0xb/0x10 [ 145.502507][ T6] insert_work+0x51/0x300 [ 145.506846][ T6] __queue_work+0x9b1/0xd30 [ 145.511360][ T6] queue_work_on+0xd2/0x140 [ 145.515881][ T6] hci_cmd_timeout+0x191/0x200 [ 145.520648][ T6] process_one_work+0x71f/0xc40 [ 145.525498][ T6] worker_thread+0xa29/0x11f0 [ 145.530174][ T6] kthread+0x281/0x320 [ 145.534244][ T6] ret_from_fork+0x1f/0x30 [ 145.538684][ T6] [ 145.541014][ T6] The buggy address belongs to the object at ffff888115cbc000 [ 145.541014][ T6] which belongs to the cache kmalloc-8k of size 8192 [ 145.555072][ T6] The buggy address is located 2560 bytes inside of [ 145.555072][ T6] 8192-byte region [ffff888115cbc000, ffff888115cbe000) [ 145.568542][ T6] [ 145.570873][ T6] The buggy address belongs to the physical page: [ 145.577281][ T6] page:ffffea0004572e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115cb8 [ 145.587523][ T6] head:ffffea0004572e00 order:3 compound_mapcount:0 compound_pincount:0 [ 145.595853][ T6] flags: 0x4000000000010200(slab|head|zone=1) [ 145.601958][ T6] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500 [ 145.610561][ T6] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 145.619160][ T6] page dumped because: kasan: bad access detected [ 145.625612][ T6] page_owner tracks the page as allocated [ 145.631338][ T6] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6718, tgid 6717 (syz.1.2506), ts 141893569567, free_ts 137306277026 [ 145.654113][ T6] post_alloc_hook+0x1f5/0x210 [ 145.658917][ T6] prep_new_page+0x1c/0x110 [ 145.663458][ T6] get_page_from_freelist+0x2c7b/0x2cf0 [ 145.669038][ T6] __alloc_pages+0x1c3/0x450 [ 145.673736][ T6] alloc_slab_page+0x6e/0xf0 [ 145.678354][ T6] new_slab+0x98/0x3d0 [ 145.682451][ T6] ___slab_alloc+0x6bd/0xb20 [ 145.687068][ T6] __slab_alloc+0x5e/0xa0 [ 145.691444][ T6] __kmem_cache_alloc_node+0x203/0x2c0 [ 145.696945][ T6] __kmalloc_node+0xa1/0x1e0 [ 145.701569][ T6] get_callchain_buffers+0x175/0x350 [ 145.706875][ T6] check_helper_call+0x57eb/0x61c0 [ 145.712018][ T6] do_check+0x627d/0xf060 [ 145.716383][ T6] do_check_common+0x11ae/0x1950 [ 145.721349][ T6] bpf_check+0x3de0/0x10ca0 [ 145.725884][ T6] bpf_prog_load+0x1071/0x15a0 [ 145.730816][ T6] page last free stack trace: [ 145.735511][ T6] free_unref_page_prepare+0x742/0x750 [ 145.741003][ T6] free_unref_page+0x8f/0x530 [ 145.745691][ T6] __free_pages+0x67/0x100 [ 145.750123][ T6] __free_slab+0xca/0x1a0 [ 145.754480][ T6] __unfreeze_partials+0x160/0x190 [ 145.759606][ T6] put_cpu_partial+0xa9/0x100 [ 145.764297][ T6] __slab_free+0x1c4/0x280 [ 145.768727][ T6] ___cache_free+0xbf/0xd0 [ 145.773148][ T6] qlist_free_all+0xc6/0x140 [ 145.777755][ T6] kasan_quarantine_reduce+0x14a/0x170 [ 145.783216][ T6] __kasan_slab_alloc+0x24/0x80 [ 145.788075][ T6] slab_post_alloc_hook+0x4f/0x2d0 [ 145.793200][ T6] __kmem_cache_alloc_node+0x192/0x2c0 [ 145.798692][ T6] kmalloc_trace+0x29/0xb0 [ 145.803141][ T6] kernfs_iop_get_link+0x65/0x620 [ 145.808173][ T6] vfs_readlink+0x187/0x400 [ 145.812690][ T6] [ 145.815018][ T6] Memory state around the buggy address: [ 145.820644][ T6] ffff888115cbc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.828712][ T6] ffff888115cbc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.836777][ T6] >ffff888115cbca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.844834][ T6] ^ [ 145.848900][ T6] ffff888115cbca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.856974][ T6] ffff888115cbcb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.865038][ T6] ================================================================== [ 145.873101][ T6] Disabling lock debugging due to kernel taint [ 145.956936][ T6896] loop7: detected capacity change from 0 to 40427 [ 145.967424][ T6896] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0xf2000210) [ 145.976165][ T6896] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 145.999720][ T6896] F2FS-fs (loop7): invalid crc value [ 146.019006][ T6896] F2FS-fs (loop7): Found nat_bits in checkpoint [ 146.031864][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 146.043623][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 146.052054][ C0] CPU: 0 PID: 6786 Comm: syz.2.2536 Tainted: G B syzkaller #0 [ 146.060926][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.068595][ T6896] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 146.070997][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 146.078218][ T6896] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 146.083313][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 88 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 bc 45 6d 00 49 8b 7d 00 e8 53 d7 [ 146.083334][ C0] RSP: 0000:ffffc9000154fbb0 EFLAGS: 00010046 [ 146.083356][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881086fe540 [ 146.124444][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 146.132454][ C0] RBP: ffffc9000154fc48 R08: fffffffffffffffb R09: 0000000000000007 [ 146.140440][ C0] R10: ffffed1022b97939 R11: 1ffff11022b97939 R12: dffffc0000000000 [ 146.148438][ C0] R13: 0000000000000000 R14: ffff888115cbc9c8 R15: 0000000000000008 [ 146.153883][ T6904] bio_check_eod: 1 callbacks suppressed [ 146.153902][ T6904] f2fs_ckpt-7:7: attempt to access beyond end of device [ 146.153902][ T6904] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.156427][ C0] FS: 00005555654fe500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 146.156451][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.191462][ C0] CR2: 00007f264f376000 CR3: 0000000127fe7000 CR4: 00000000003506b0 [ 146.199451][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 146.207429][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 146.215414][ C0] Call Trace: [ 146.218709][ C0] [ 146.221662][ C0] delayed_work_timer_fn+0x61/0x80 [ 146.226840][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 146.232675][ C0] call_timer_fn+0x46/0x2a0 [ 146.237198][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 146.243045][ C0] __run_timers+0x667/0x9a0 [ 146.247658][ C0] ? calc_index+0x200/0x200 [ 146.252216][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 146.257449][ C0] run_timer_softirq+0x6a/0xf0 [ 146.262232][ C0] handle_softirqs+0x1d7/0x600 [ 146.267021][ C0] __irq_exit_rcu+0x52/0xf0 [ 146.271533][ C0] irq_exit_rcu+0x9/0x10 [ 146.275804][ C0] sysvec_apic_timer_interrupt+0x58/0xc0 [ 146.281470][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 146.287474][ C0] RIP: 0033:0x7f65b7c68190 [ 146.291922][ C0] Code: 72 48 39 f0 0f 82 b9 00 00 00 48 39 f2 72 6e 41 0f 11 0c 24 48 8b 77 f8 48 89 f8 48 89 eb eb 12 66 2e 0f 1f 84 00 00 00 00 00 <48> 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 [ 146.311625][ C0] RSP: 002b:00007fff13d8c050 EFLAGS: 00000297 [ 146.317706][ C0] RAX: 00007f65b692fab0 RBX: 00007f65b68be598 RCX: ffffffff8147eeae [ 146.325690][ C0] RDX: ffffffff8147ef0f RSI: ffffffff8147ef0f RDI: 00007f65b69b3670 [ 146.333676][ C0] RBP: 00007f65b67f9010 R08: 00007f65b68d6338 R09: 00007f65b7fd2000 [ 146.341665][ C0] R10: 00007f65b67f9008 R11: 00000000000000ff R12: 00007f65b67f9008 [ 146.349657][ C0] R13: 000000000000001f R14: ffffffffffffffff R15: 00007f65b67f9008 [ 146.357649][ C0] ? wq_watchdog_touch+0x1e/0x190 [ 146.362718][ C0] ? wq_watchdog_touch+0x7f/0x190 [ 146.367777][ C0] ? wq_watchdog_touch+0x7f/0x190 [ 146.372835][ C0] [ 146.375892][ C0] Modules linked in: [ 146.379810][ C0] ---[ end trace 0000000000000000 ]--- [ 146.385275][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 146.390588][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 88 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 bc 45 6d 00 49 8b 7d 00 e8 53 d7 [ 146.410213][ C0] RSP: 0000:ffffc9000154fbb0 EFLAGS: 00010046 [ 146.416296][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881086fe540 [ 146.424277][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 146.432258][ C0] RBP: ffffc9000154fc48 R08: fffffffffffffffb R09: 0000000000000007 [ 146.440245][ C0] R10: ffffed1022b97939 R11: 1ffff11022b97939 R12: dffffc0000000000 [ 146.448217][ C0] R13: 0000000000000000 R14: ffff888115cbc9c8 R15: 0000000000000008 [ 146.456191][ C0] FS: 00005555654fe500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 146.465117][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.471697][ C0] CR2: 00007f264f376000 CR3: 0000000127fe7000 CR4: 00000000003506b0 [ 146.479682][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 146.487663][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 146.495643][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 146.503162][ C0] Kernel Offset: disabled [ 146.507504][ C0] Rebooting in 86400 seconds..