last executing test programs: 2m38.648784166s ago: executing program 4 (id=491): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10010, 0xffffffffffffffff, 0xffffc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) 2m38.496160911s ago: executing program 4 (id=493): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 2m37.444965528s ago: executing program 4 (id=496): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0xffffffd7, @empty, 0xa098}, {0xa, 0x4ea6, 0x9, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8}, 0xffffffffffffffff, 0x9ef4}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m35.876247802s ago: executing program 4 (id=500): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) acct(&(0x7f0000000140)='./file0/file2\x00') 2m35.578249593s ago: executing program 4 (id=502): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)) getpid() open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x401, &(0x7f0000000540)=ANY=[@ANYBLOB='quiet,umask=00000000000000000100503,iocharset=cp857,session=0x0000000000000401,file_umask=00000000000000000002001,file_umask=00000000000000000000120,quiet,uid=', @ANYRESHEX=0x0, @ANYBLOB='W['], 0x7, 0x31d, &(0x7f0000000e00)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000600)={0x1000, 0x0, 0x356, 0x1000, 0x3, 0x192b, 0x10, 0x2, {0x9, 0x5, 0x1}, {0x5, 0x6}, {0x6, 0x7, 0x1}, {0x200, 0x8}, 0x2, 0x10, 0x0, 0x6, 0x1, 0x566, 0x1, 0x5, 0x6, 0x0, 0x6, 0x0, 0x10, 0x0, 0x2, 0x11}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r4 = syz_open_pts(r3, 0x80) r5 = dup3(r4, r3, 0x80000) read(r5, &(0x7f0000000200)=""/227, 0xe3) socket$caif_seqpacket(0x25, 0x5, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) 2m34.373694965s ago: executing program 4 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xf0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xf, 0x4}) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) read$msr(r0, 0x0, 0x74) mkdirat(0xffffffffffffff9c, 0x0, 0x2d) syz_open_dev$MSR(0x0, 0x8000000000000000, 0x0) 2m32.531802059s ago: executing program 32 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xf0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xf, 0x4}) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) read$msr(r0, 0x0, 0x74) mkdirat(0xffffffffffffff9c, 0x0, 0x2d) syz_open_dev$MSR(0x0, 0x8000000000000000, 0x0) 12.507222826s ago: executing program 2 (id=895): sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x140a, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8001) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) 9.740303902s ago: executing program 2 (id=898): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 8.894039532s ago: executing program 2 (id=903): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @mcast2, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000008cd0cb10040000102030109026e00494181f03b080b0201010130000904000000010130000a2401000a00030000000904010000010230000904010101010230000905010910000005080a2525060000000601000904020000010230000904020101010230000905820908000102040a25250600000048"], 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) syz_usb_control_io$uac3(r3, &(0x7f00000038c0)={0x14, 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB]}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) 8.34937604s ago: executing program 1 (id=905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006e40), 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000072c0)={0x0, 0x0, &(0x7f0000007280)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20024004}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x10000000, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) sendfile(r6, r6, 0x0, 0x1) 7.919506776s ago: executing program 5 (id=907): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6.93027168s ago: executing program 0 (id=908): sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x140a, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8001) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) 6.821179813s ago: executing program 1 (id=909): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x4000f2, 0x1000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x82004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r2, 0x0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, 0x0) 6.804050734s ago: executing program 5 (id=910): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000001100)}}], 0x1, 0x20000044) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.801306279s ago: executing program 0 (id=911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5.664540294s ago: executing program 2 (id=912): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 5.565902227s ago: executing program 5 (id=913): r0 = creat(0x0, 0x74) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000010280)={[&(0x7f0000000200)='\x01']}) 5.365241574s ago: executing program 0 (id=915): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r1 = socket(0x2a, 0x5, 0x200) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4e21, @multicast2}, 0x10) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000280)={{0x6, @default, 0x5}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)=0x63) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRESOCT], 0xfc}, 0x1, 0x0, 0x0, 0x44000080}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000400)=[{0xf, 0x20, 0xfe, 0x7ffe0106}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) 3.657098023s ago: executing program 5 (id=916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x486, 0x0, 0x2}]}) 3.515393358s ago: executing program 0 (id=918): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000280)={{0x6, @default, 0x5}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 3.344978324s ago: executing program 5 (id=919): mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 3.260270477s ago: executing program 0 (id=920): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.147528871s ago: executing program 3 (id=921): sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x140a, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8001) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) 1.938729243s ago: executing program 3 (id=922): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) memfd_secret(0x80000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2(&(0x7f0000001cc0), 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080), 0x2204803, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, 0x0, 0x940, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 1.900362884s ago: executing program 5 (id=923): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @mcast2, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000008cd0cb10040000102030109026e00494181f03b080b0201010130000904000000010130000a2401000a00030000000904010000010230000904010101010230000905010910000005080a2525060000000601000904020000010230000904020101010230000905820908000102040a25250600000048"], 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) syz_usb_control_io$uac3(r3, &(0x7f00000038c0)={0x14, 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB]}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) 1.813623197s ago: executing program 0 (id=924): socket(0x840000000002, 0x3, 0xff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00009e1000)='./file1\x00', 0x169841, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 933.403268ms ago: executing program 1 (id=925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 779.868933ms ago: executing program 3 (id=926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f67003000028006000c400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 706.610496ms ago: executing program 1 (id=927): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3a8, 0xa, 0x1, 0xfffffff0, 0x200, 0xa, 0x6, 0x1, 0x40, 0x1, 0x140, 0xfff, 0x4, 0x6, 0x7000, 0x8, 0x7569, 0x9, 0x779e8886, 0xc00, 0x1, 0x2, 0xff, 0x0, 0x3, 0xffffffde, 0x3ff, 0x3, 0x4, 0x9, 0x80000001, 0x1, 0x7, 0x4, 0xbd, 0x8, 0x9cc3, 0xce4b, 0xb, 0x1, 0x5, 0xf, 0x401, 0x8, 0x401, 0x1000, 0xf391, 0xadd, 0xb7, 0x97e, 0x8001, 0x401, 0x9, 0xa6d, 0xfff, 0x3, 0xfff, 0x0, 0x9f, 0xa1, 0x7fff, 0xfffffff4, 0x603b654e, 0x101, 0x10000, 0x2, 0x8, 0x5, 0x0, 0x5, 0x9, 0x9, 0x4, 0x3, 0x2, 0x1, 0x80000001, 0xec, 0x9, 0xe76, 0x3, 0x4, 0x400000, 0x9de1, 0xfff, 0xb41, 0x1ff, 0x3, 0x1000, 0x8, 0x7, 0x0, 0x4, 0x38, 0xb, 0x101, 0xdd0, 0x4aaa, 0x6, 0x5, 0x2, 0x4, 0x3, 0x5, 0x8b3, 0x3, 0x1, 0x5, 0x80000001, 0x5, 0x7, 0xb5, 0x7, 0xff, 0x3, 0x4, 0x7, 0x9, 0x8, 0x8, 0x0, 0xcc1a, 0x4, 0x0, 0x7, 0x10001, 0x80000001, 0x9, 0x200, 0x2, 0x7, 0x3, 0xd5e, 0x3ff, 0xc87b, 0x2f, 0x1, 0x1, 0xffffff83, 0x4d0, 0x0, 0x1000, 0x3, 0x0, 0x7f, 0x7, 0x1, 0x7ff, 0x1, 0xe6, 0x2, 0x4, 0xfff, 0x3, 0xfffffffd, 0x4, 0xfffffffe, 0xfffffff8, 0x3d, 0x10000, 0x0, 0x0, 0x8, 0x5, 0x100000, 0x7, 0x6, 0x2, 0x5, 0x4, 0x200, 0xffff, 0x3, 0x5, 0x5, 0xfffffff9, 0x6, 0x4, 0x2, 0xb291, 0xc, 0x0, 0x7ff, 0x1, 0x6, 0x6, 0x0, 0x2, 0x3ff, 0x9, 0x5, 0x9, 0x8, 0x4, 0xe, 0x0, 0x7, 0x1, 0x0, 0x2e04, 0xe0bf, 0x80000001, 0xfffffff9, 0x9, 0x3, 0x4, 0x8, 0xf, 0x6, 0x5, 0x8, 0x2, 0x8000, 0x3, 0xb8000000, 0x1649445e, 0x8, 0xffffffd4, 0x7ff, 0x6, 0x65d, 0xb, 0x3, 0x80000000, 0x4242, 0x8, 0x0, 0x9, 0x6, 0x8, 0xffff, 0xffffffff, 0x894, 0xd, 0x4e3c, 0x5, 0x0, 0xfffffff9, 0x8, 0x4, 0x1, 0x3, 0x1, 0x0, 0x9, 0x0, 0x8, 0x3, 0x10001, 0x3, 0x7, 0x7f, 0xa, 0x4, 0x7, 0xafd9]}, @TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x7, 0xb, 0x7fff, 0x5, 0x4, 0x5, 0xfffffff8, 0x0, 0x36, 0x3410, 0xb, 0x6, 0x9, 0x7, 0x6, 0xfffffffb, 0x4, 0x400, 0x3b080, 0xf9bc, 0x7ff, 0xe2, 0x4, 0x10, 0x7, 0x6fb2, 0x9565, 0x4, 0x2, 0xfff, 0x9, 0x9, 0x0, 0x7, 0x7, 0x7, 0x4, 0x6, 0x6, 0x401, 0xb, 0x40, 0xffffffff, 0x8, 0xcc, 0x8, 0x853c, 0x0, 0x2, 0xd698, 0x1000, 0x304, 0x94ab, 0x7fffffff, 0x63d5, 0x9, 0x4, 0x5, 0x986, 0x7fffffff, 0x6, 0x9, 0x5, 0x10001, 0x81, 0x101, 0x9, 0x5, 0x2, 0x14, 0x4, 0x3, 0x1c000, 0x3, 0x6, 0xb2, 0x55, 0x400, 0x2, 0x401, 0x2, 0x1cb, 0x8001, 0xffff, 0x7, 0x6, 0x4, 0x8, 0x0, 0x10001, 0x40, 0x3, 0x8, 0x7ff, 0x4, 0x9, 0xfffffffc, 0xd, 0x40, 0x5, 0x3, 0x7fff, 0x4, 0x100005, 0x100, 0x8, 0x3ce, 0x2, 0x8, 0xffffffff, 0x4c, 0xffffffff, 0x0, 0xfff, 0xf, 0xd, 0x1000, 0x6, 0x3, 0xaee4, 0xffff30bd, 0x5, 0x4, 0x3, 0x3, 0x2, 0x1, 0x80000000, 0x5, 0x3ff, 0x3, 0x4, 0x6, 0xf71f, 0x4, 0x6, 0x3, 0xc, 0x62a, 0x8000, 0x2ff, 0x219, 0x43f, 0x1, 0x5, 0x3, 0x7, 0x8, 0xfffffffb, 0xa327, 0x10000, 0x7f, 0x7, 0x6, 0x6, 0x1000, 0x9, 0x9, 0x1, 0xb, 0x7, 0x6, 0x38b62e7e, 0xb3e, 0x2, 0x0, 0x120000, 0x4, 0x3ff, 0x6, 0x1000, 0x9, 0x6, 0x0, 0x7, 0x5, 0x8000, 0x100, 0x6, 0x12c3c0, 0x6, 0x7f, 0x200, 0x800, 0x5, 0xfffffff7, 0xef21, 0x4, 0x0, 0x2fb5, 0x56b0, 0x6, 0x6, 0xa175, 0x9, 0x0, 0x8, 0x2, 0x0, 0x3, 0x4, 0x1, 0xb, 0x1, 0x4, 0xb, 0x9, 0xa60, 0xa44, 0x7, 0x2, 0x7, 0x4665, 0x0, 0xbac3, 0x7, 0x0, 0x8001, 0xcd, 0x1, 0x9, 0xa, 0xad722e4, 0xa30, 0x1, 0x6, 0x8, 0x1, 0x8, 0x7, 0x3, 0x8, 0x3, 0x9e, 0x0, 0x954, 0x8001, 0xffff0001, 0x7ff, 0x8, 0xffffffc0, 0x8, 0x1000, 0x9, 0x8, 0x1, 0xb, 0x1, 0x80000001, 0x5, 0xffff7fff, 0x9, 0x6, 0xfffffff8, 0x10000]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) 475.502004ms ago: executing program 3 (id=928): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000080)={0x8000, 0x0, 0x100}) 270.060211ms ago: executing program 3 (id=929): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000300)={r2, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001e00000010000000000000000000000003c040000000000001e000a0017a5189dfaad985a5df9db59e6ed6f2be919d90369e552752f7c74a079d559078e949587"], 0xa0}, 0x1, 0x0, 0x0, 0x4005}, 0x8000) 264.015911ms ago: executing program 2 (id=930): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 188.423274ms ago: executing program 1 (id=931): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/229, 0xe5, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 21.779779ms ago: executing program 3 (id=932): sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x140a, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8001) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 714.88µs ago: executing program 1 (id=933): mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=934): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) kernel console output (not intermixed with test programs): 190.316266][ T5549] device syzkaller0 entered promiscuous mode [ 190.857749][ T4312] usb 1-1: USB disconnect, device number 4 [ 191.321779][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 191.321794][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 191.322682][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 191.327982][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 191.971773][ T5575] loop4: detected capacity change from 0 to 64 [ 191.979100][ T5575] hfs: unable to parse mount options [ 192.015445][ T4561] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.222416][ T5583] device syzkaller0 entered promiscuous mode [ 192.342513][ T5584] netlink: 'syz.1.333': attribute type 10 has an invalid length. [ 192.524106][ T5584] team0: Device vxcan1 is of different type [ 194.393256][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.403833][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.712919][ T5579] loop0: detected capacity change from 0 to 32768 [ 195.273819][ T5579] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.332 (5579) [ 195.709328][ T5611] loop3: detected capacity change from 0 to 2048 [ 195.898351][ T5611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 196.033869][ T5614] device syzkaller0 entered promiscuous mode [ 196.297175][ T5622] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 196.313398][ T5622] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 196.325932][ T5622] EXT4-fs (loop3): This should not happen!! Data will be lost [ 196.325932][ T5622] [ 196.335999][ T5622] EXT4-fs (loop3): Total free blocks count 0 [ 196.342487][ T5622] EXT4-fs (loop3): Free/Dirty block details [ 196.348717][ T5622] EXT4-fs (loop3): free_blocks=66060288 [ 196.354763][ T5622] EXT4-fs (loop3): dirty_blocks=48 [ 196.360948][ T5622] EXT4-fs (loop3): Block reservation details [ 196.367219][ T5622] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 197.709959][ T4443] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 197.920285][ T5636] loop2: detected capacity change from 0 to 2048 [ 197.950210][ T5639] loop1: detected capacity change from 0 to 256 [ 198.034499][ T5640] loop3: detected capacity change from 0 to 1024 [ 198.069255][ T5636] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.098630][ T5639] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 198.117562][ T5640] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 198.180338][ T5640] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 198.215088][ T5640] EXT4-fs (loop3): orphan cleanup on readonly fs [ 198.249848][ T5640] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.353: Inode bitmap for bg 0 marked uninitialized [ 198.312874][ T5640] EXT4-fs (loop3): Remounting filesystem read-only [ 198.319674][ T5640] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.366821][ T27] audit: type=1800 audit(1775101516.423:2): pid=5639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.354" name="bus" dev="loop1" ino=1048595 res=0 errno=0 [ 198.798884][ T5649] loop1: detected capacity change from 0 to 64 [ 198.805790][ T5649] hfs: unable to parse mount options [ 198.849088][ T4409] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.125900][ T5653] device syzkaller0 entered promiscuous mode [ 199.310356][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 199.496461][ T5663] binder: 5660:5663 ioctl c0306201 2000000003c0 returned -14 [ 199.500469][ T5662] loop0: detected capacity change from 0 to 2048 [ 199.518247][ T5663] binder_alloc: 5660: binder_alloc_buf, no vma [ 199.541541][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 199.610827][ T5662] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 199.731461][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 199.738862][ T14] usb 2-1: no configurations [ 199.759066][ T14] usb 2-1: can't read configurations, error -22 [ 199.768774][ T5662] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 199.783590][ T5662] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 199.796765][ T5662] EXT4-fs (loop0): This should not happen!! Data will be lost [ 199.796765][ T5662] [ 199.806418][ T5662] EXT4-fs (loop0): Total free blocks count 0 [ 199.812412][ T5662] EXT4-fs (loop0): Free/Dirty block details [ 199.818413][ T5662] EXT4-fs (loop0): free_blocks=66060288 [ 199.824202][ T5662] EXT4-fs (loop0): dirty_blocks=48 [ 199.829372][ T5662] EXT4-fs (loop0): Block reservation details [ 199.835375][ T5662] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 200.061362][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 200.311451][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 200.317204][ T14] usb 2-1: no configurations [ 200.351518][ T14] usb 2-1: can't read configurations, error -22 [ 200.366047][ T14] usb usb2-port1: attempt power cycle [ 200.402945][ T4472] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 200.600938][ T5681] loop0: detected capacity change from 0 to 512 [ 200.647650][ T5681] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 200.672095][ T5681] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 200.731501][ T125] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 200.783046][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 200.797564][ T5681] EXT4-fs (loop0): 1 orphan inode deleted [ 200.806456][ T5681] EXT4-fs (loop0): 1 truncate cleaned up [ 200.813458][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 200.820188][ T5681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.829708][ T14] usb 2-1: no configurations [ 200.835163][ T14] usb 2-1: can't read configurations, error -22 [ 201.424905][ T125] usb 4-1: Using ep0 maxpacket: 16 [ 201.440197][ T125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.483421][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 201.491372][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 201.511552][ T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.525222][ T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 201.538010][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 201.544667][ T14] usb 2-1: no configurations [ 201.555619][ T14] usb 2-1: can't read configurations, error -22 [ 201.570766][ T125] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 201.581825][ T14] usb usb2-port1: unable to enumerate USB device [ 201.593710][ T125] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.605612][ T5670] loop2: detected capacity change from 0 to 32768 [ 201.609850][ T125] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 201.671503][ T125] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 201.684971][ T125] usb 4-1: Manufacturer: syz [ 201.686471][ T5670] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.366 (5670) [ 201.700508][ T125] usb 4-1: config 0 descriptor?? [ 201.772859][ T5670] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.789857][ T5670] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 201.809476][ T5670] BTRFS info (device loop2): setting nodatacow, compression disabled [ 201.830785][ T5670] BTRFS info (device loop2): force clearing of disk cache [ 201.841150][ T5690] loop0: detected capacity change from 0 to 64 [ 201.848245][ T5690] hfs: unable to parse mount options [ 201.863753][ T5670] BTRFS info (device loop2): enabling ssd optimizations [ 201.871066][ T5670] BTRFS info (device loop2): using spread ssd allocation scheme [ 201.889391][ T5670] BTRFS info (device loop2): turning off barriers [ 201.898047][ T5670] BTRFS info (device loop2): disabling free space tree [ 201.908504][ T4561] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.971385][ T5670] BTRFS info (device loop2): not using ssd optimizations [ 201.978604][ T5670] BTRFS info (device loop2): not using spread ssd allocation scheme [ 202.068772][ T5670] BTRFS info (device loop2): rebuilding free space tree [ 202.088588][ T5670] BTRFS info (device loop2): disabling free space tree [ 202.097096][ T5670] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 202.111617][ T5670] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 202.341994][ T125] rc_core: IR keymap rc-hauppauge not found [ 202.349273][ T125] Registered IR keymap rc-empty [ 202.368859][ T4561] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.379275][ T125] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 202.386724][ T5711] loop0: detected capacity change from 0 to 2048 [ 202.416752][ T4277] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.428285][ T125] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 202.453665][ T5711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.470715][ T125] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 202.553080][ T125] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 202.664161][ T125] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 202.711627][ T125] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 202.749667][ T125] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 202.788436][ T125] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 202.829162][ T125] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 202.871533][ T125] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 202.906804][ T125] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 202.951566][ T125] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 202.991539][ T125] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.031496][ T125] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.073404][ T125] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 203.093410][ T125] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 203.121422][ T5510] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 203.159646][ T125] usb 4-1: USB disconnect, device number 6 [ 203.228093][ T5720] device syzkaller0 entered promiscuous mode [ 203.317472][ T5510] usb 2-1: Using ep0 maxpacket: 8 [ 203.324846][ T5510] usb 2-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 203.337179][ T5510] usb 2-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 203.347652][ T5510] usb 2-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 203.371921][ T5510] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 203.387253][ T5510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.395836][ T5510] usb 2-1: Product: syz [ 203.400059][ T5510] usb 2-1: Manufacturer: syz [ 203.411706][ T5510] usb 2-1: SerialNumber: syz [ 203.434500][ T5724] binder: 5723:5724 ioctl c0306201 2000000003c0 returned -14 [ 203.861490][ T5437] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 203.942963][ T5510] snd-usb-audio: probe of 2-1:65.0 failed with error -71 [ 204.081494][ T5437] usb 1-1: Using ep0 maxpacket: 16 [ 204.096306][ T5437] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.096403][ T5437] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.102499][ T5437] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.130150][ T5437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.135626][ T5510] usb 2-1: USB disconnect, device number 6 [ 204.144268][ T5437] usb 1-1: Product: syz [ 204.144290][ T5437] usb 1-1: Manufacturer: syz [ 204.144370][ T5437] usb 1-1: SerialNumber: syz [ 204.379283][ T5437] usb 1-1: 0:2 : does not exist [ 204.402294][ T5437] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 204.486181][ T5437] usb 1-1: USB disconnect, device number 5 [ 204.890330][ T4561] udevd[4561]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.210335][ T5741] loop1: detected capacity change from 0 to 64 [ 205.217359][ T5741] hfs: unable to parse mount options [ 205.247174][ T5743] loop4: detected capacity change from 0 to 1024 [ 205.262538][ T4561] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.291550][ T5743] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.422052][ T5743] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 205.660787][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 205.881515][ T5437] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 206.091461][ T5437] usb 3-1: Using ep0 maxpacket: 16 [ 206.101496][ T5437] usb 3-1: no configurations [ 206.119544][ T5758] overlayfs: overlapping lowerdir path [ 206.132667][ T5437] usb 3-1: can't read configurations, error -22 [ 206.291383][ T5437] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 206.382600][ T5760] device syzkaller0 entered promiscuous mode [ 206.491582][ T5437] usb 3-1: Using ep0 maxpacket: 16 [ 206.500348][ T5437] usb 3-1: no configurations [ 206.545836][ T5437] usb 3-1: can't read configurations, error -22 [ 206.629870][ T5437] usb usb3-port1: attempt power cycle [ 206.951162][ T5769] loop4: detected capacity change from 0 to 2048 [ 207.025356][ T5769] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 207.091503][ T5437] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 207.132266][ T5437] usb 3-1: Using ep0 maxpacket: 16 [ 207.141519][ T5769] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 207.157959][ T5769] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 207.170343][ T5769] EXT4-fs (loop4): This should not happen!! Data will be lost [ 207.170343][ T5769] [ 207.180097][ T5769] EXT4-fs (loop4): Total free blocks count 0 [ 207.186089][ T5769] EXT4-fs (loop4): Free/Dirty block details [ 207.192062][ T5769] EXT4-fs (loop4): free_blocks=66060288 [ 207.197665][ T5769] EXT4-fs (loop4): dirty_blocks=48 [ 207.202930][ T5769] EXT4-fs (loop4): Block reservation details [ 207.208911][ T5769] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 207.221172][ T5437] usb 3-1: no configurations [ 207.253563][ T5437] usb 3-1: can't read configurations, error -22 [ 207.306604][ T4408] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 207.361660][ T5510] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 207.421655][ T5437] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 207.452356][ T5437] usb 3-1: Using ep0 maxpacket: 16 [ 207.466787][ T5437] usb 3-1: no configurations [ 207.963010][ T5437] usb 3-1: can't read configurations, error -22 [ 207.981445][ T5510] usb 1-1: Using ep0 maxpacket: 8 [ 207.992104][ T5510] usb 1-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 208.011732][ T5510] usb 1-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 208.021262][ T5510] usb 1-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 208.044699][ T5510] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 208.052343][ T5437] usb usb3-port1: unable to enumerate USB device [ 208.058282][ T5510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.084964][ T5510] usb 1-1: Product: syz [ 208.089356][ T5510] usb 1-1: Manufacturer: syz [ 208.097956][ T5510] usb 1-1: SerialNumber: syz [ 208.721264][ T5510] snd-usb-audio: probe of 1-1:65.0 failed with error -71 [ 208.778132][ T5510] usb 1-1: USB disconnect, device number 6 [ 208.895297][ T5784] loop2: detected capacity change from 0 to 64 [ 208.902260][ T5784] hfs: unable to parse mount options [ 208.937657][ T4561] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.166440][ T5789] loop2: detected capacity change from 0 to 1024 [ 209.209794][ T5789] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.399258][ T5789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 210.536446][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 210.869989][ T5810] loop0: detected capacity change from 0 to 32768 [ 210.924947][ T5810] JBD2: Ignoring recovery information on journal [ 210.974500][ T5810] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 211.012186][ T5816] binder: 5815:5816 ioctl c0306201 2000000003c0 returned -14 [ 211.662377][ T5814] device syzkaller0 entered promiscuous mode [ 211.794370][ T5823] loop4: detected capacity change from 0 to 64 [ 211.801512][ T5823] hfs: unable to parse mount options [ 211.867689][ T4409] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.941480][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 212.031850][ T4310] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 212.141704][ T4671] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 212.232245][ T4310] usb 2-1: Using ep0 maxpacket: 16 [ 212.239578][ T4310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.281416][ T4310] usb 2-1: config 0 has no interfaces? [ 212.298947][ T4310] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 212.321955][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.342002][ T4310] usb 2-1: Product: syz [ 212.351716][ T4671] usb 4-1: Using ep0 maxpacket: 8 [ 212.353249][ T4310] usb 2-1: Manufacturer: syz [ 212.369851][ T4671] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 212.378832][ T4310] usb 2-1: SerialNumber: syz [ 212.414705][ T4671] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 212.426146][ T4310] usb 2-1: config 0 descriptor?? [ 212.433853][ T4671] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 212.477861][ T5837] loop2: detected capacity change from 0 to 1024 [ 212.508499][ T4671] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 212.539090][ T5837] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.560133][ T4671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.586694][ T4671] usb 4-1: Product: syz [ 212.603506][ T4671] usb 4-1: Manufacturer: syz [ 212.617752][ T4671] usb 4-1: SerialNumber: syz [ 212.634693][ T5837] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 212.675371][ T4281] usb 2-1: USB disconnect, device number 7 [ 212.809673][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 212.881258][ T4671] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 212.953118][ T4671] usb 4-1: USB disconnect, device number 7 [ 213.143537][ T5846] loop2: detected capacity change from 0 to 2048 [ 213.265670][ T5846] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.426865][ T5852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.470833][ T5852] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 213.487636][ T5852] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 213.500137][ T5852] EXT4-fs (loop2): This should not happen!! Data will be lost [ 213.500137][ T5852] [ 213.510850][ T5852] EXT4-fs (loop2): Total free blocks count 0 [ 213.517308][ T5852] EXT4-fs (loop2): Free/Dirty block details [ 213.523344][ T5852] EXT4-fs (loop2): free_blocks=66060288 [ 213.529244][ T5852] EXT4-fs (loop2): dirty_blocks=48 [ 213.534760][ T5852] EXT4-fs (loop2): Block reservation details [ 213.540948][ T5852] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 213.724559][ T5853] binder: BINDER_SET_CONTEXT_MGR already set [ 213.730612][ T5853] binder: 5851:5853 ioctl 4018620d 200000000040 returned -16 [ 213.940694][ T5855] loop3: detected capacity change from 0 to 32768 [ 213.964031][ T5856] binder: 5851:5856 ioctl c0306201 2000000003c0 returned -14 [ 213.989469][ T5855] JBD2: Ignoring recovery information on journal [ 214.041159][ T38] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 214.083219][ T5855] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 215.004840][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 215.074013][ T5864] loop2: detected capacity change from 0 to 64 [ 215.080899][ T5864] hfs: unable to parse mount options [ 215.261661][ T5870] device syzkaller0 entered promiscuous mode [ 217.485633][ T5885] loop4: detected capacity change from 0 to 2048 [ 217.659957][ T5885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 217.731620][ T5511] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 217.937395][ T5885] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 217.954202][ T5885] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 217.961530][ T5511] usb 2-1: Using ep0 maxpacket: 16 [ 218.002429][ T5885] EXT4-fs (loop4): This should not happen!! Data will be lost [ 218.002429][ T5885] [ 218.013520][ T5885] EXT4-fs (loop4): Total free blocks count 0 [ 218.020181][ T5885] EXT4-fs (loop4): Free/Dirty block details [ 218.030875][ T5511] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.065779][ T5511] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.084059][ T5885] EXT4-fs (loop4): free_blocks=66060288 [ 218.095363][ T5885] EXT4-fs (loop4): dirty_blocks=48 [ 218.105610][ T5511] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.115017][ T5885] EXT4-fs (loop4): Block reservation details [ 218.125106][ T5511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.141542][ T5511] usb 2-1: Product: syz [ 218.151739][ T5511] usb 2-1: Manufacturer: syz [ 218.156562][ T5885] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 218.171762][ T5511] usb 2-1: SerialNumber: syz [ 218.241674][ T4310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 218.258061][ T4553] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 218.396071][ T5511] usb 2-1: 0:2 : does not exist [ 218.413196][ T5511] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 218.431669][ T4310] usb 1-1: Using ep0 maxpacket: 8 [ 218.453497][ T4310] usb 1-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 218.522611][ T4310] usb 1-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 218.542507][ T5511] usb 2-1: USB disconnect, device number 8 [ 218.588720][ T4310] usb 1-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 218.626805][ T5898] loop4: detected capacity change from 0 to 32768 [ 218.655614][ T5898] JBD2: Ignoring recovery information on journal [ 218.697440][ T5898] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 218.699406][ T4310] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 218.734785][ T5902] binder: BINDER_SET_CONTEXT_MGR already set [ 218.741202][ T5902] binder: 5901:5902 ioctl 4018620d 200000000040 returned -16 [ 218.859156][ T4561] udevd[4561]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.862593][ T5903] binder: 5901:5903 ioctl c0306201 2000000003c0 returned -14 [ 219.236246][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.381103][ T4310] usb 1-1: Product: syz [ 219.391425][ T4310] usb 1-1: Manufacturer: syz [ 219.418445][ T4310] usb 1-1: SerialNumber: syz [ 219.534893][ T4275] ocfs2: Unmounting device (7,4) on (node local) [ 219.607700][ T5908] loop3: detected capacity change from 0 to 64 [ 219.614845][ T5908] hfs: unable to parse mount options [ 219.638094][ T5907] loop1: detected capacity change from 0 to 1024 [ 219.654398][ T5907] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.686541][ T4499] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 219.720234][ T4310] snd-usb-audio: probe of 1-1:65.0 failed with error -71 [ 219.796726][ T4310] usb 1-1: USB disconnect, device number 7 [ 219.843457][ T5911] loop2: detected capacity change from 0 to 1024 [ 219.869141][ T5907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 219.880382][ T5911] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.036614][ T5911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 220.101892][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 220.111609][ T4281] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 220.391525][ T4281] usb 5-1: Using ep0 maxpacket: 16 [ 220.405284][ T4281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.441917][ T4281] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.468325][ T4281] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 220.577591][ T4281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.614819][ T4281] usb 5-1: config 0 descriptor?? [ 220.908033][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 221.002319][ T5926] device syzkaller0 entered promiscuous mode [ 221.061700][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.072658][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.085224][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.093136][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.103247][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.111978][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.119351][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.129795][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.139147][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.147127][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.162441][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.171159][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.181538][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.189301][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.201154][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.210917][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.221046][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.228986][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.241395][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.248862][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.257696][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.271712][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.280345][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.289533][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.299718][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.309397][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.320111][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.332557][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.357674][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.398071][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.431733][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.460036][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.475718][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 221.476063][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.495369][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.544571][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.573753][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.589934][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.598981][ T4281] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 221.718277][ T4281] samsung 0003:0419:0600.0001: hidraw0: USB HID v0.0b Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 221.867683][ T4281] usb 5-1: USB disconnect, device number 7 [ 222.444170][ T5948] binder: BINDER_SET_CONTEXT_MGR already set [ 222.486520][ T5946] loop2: detected capacity change from 0 to 32768 [ 222.517127][ T5946] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.445 (5946) [ 222.539974][ T5946] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 222.550549][ T5946] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 222.553890][ T5948] binder: 5947:5948 ioctl 4018620d 200000000040 returned -16 [ 222.559382][ T5946] BTRFS info (device loop2): setting nodatacow, compression disabled [ 222.574920][ T5946] BTRFS info (device loop2): force clearing of disk cache [ 222.582150][ T5946] BTRFS info (device loop2): enabling ssd optimizations [ 222.589164][ T5946] BTRFS info (device loop2): using spread ssd allocation scheme [ 222.596940][ T5946] BTRFS info (device loop2): turning off barriers [ 222.603445][ T5946] BTRFS info (device loop2): disabling free space tree [ 222.610434][ T5946] BTRFS info (device loop2): not using ssd optimizations [ 222.617581][ T5946] BTRFS info (device loop2): not using spread ssd allocation scheme [ 222.653071][ T5942] fido_id[5942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 222.677177][ T5950] binder: 5947:5950 ioctl c0306201 2000000003c0 returned -14 [ 222.864466][ T5951] loop4: detected capacity change from 0 to 32768 [ 223.654794][ T5951] JBD2: Ignoring recovery information on journal [ 223.718928][ T5959] loop0: detected capacity change from 0 to 64 [ 223.726193][ T5959] hfs: unable to parse mount options [ 223.788908][ T4409] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 223.799483][ T5951] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 223.844179][ T5946] BTRFS info (device loop2): rebuilding free space tree [ 223.865840][ T5946] BTRFS info (device loop2): disabling free space tree [ 223.873201][ T5946] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.883064][ T5946] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 224.701004][ T5980] loop1: detected capacity change from 0 to 1024 [ 224.708085][ T4277] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.733421][ T5980] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 224.803484][ T5913] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop2 scanned by udevd (5913) [ 224.828387][ T4275] ocfs2: Unmounting device (7,4) on (node local) [ 224.933826][ T5980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 225.248412][ T5991] overlayfs: failed to resolve './file1/file0': -2 [ 225.382755][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 226.821453][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 226.850045][ T6009] binder: 6008:6009 ioctl c0306201 2000000003c0 returned -14 [ 226.876929][ T6007] device syzkaller0 entered promiscuous mode [ 227.024846][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 227.035592][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 227.080468][ T7] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 227.111077][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 227.140921][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.366297][ T7] usb 2-1: Product: ⬅ꞏᴗ㜝Ꞇ읖漠ｓ [ 227.386527][ T7] usb 2-1: SerialNumber: syz [ 227.422241][ T6015] loop3: detected capacity change from 0 to 40427 [ 227.428854][ T6005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.472806][ T6019] befs: (nullb0): invalid magic header [ 227.496516][ T6015] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 228.218213][ T7] usb 2-1: MIDIStreaming interface descriptor not found [ 228.690193][ T6021] loop4: detected capacity change from 0 to 64 [ 228.746161][ T6021] hfs: unable to parse mount options [ 229.829886][ T7] usb 2-1: USB disconnect, device number 9 [ 230.216226][ T4343] udevd[4343]: setting owner of /dev/dmmidi3 to uid=0, gid=29 failed: No such file or directory [ 230.577202][ T6031] overlayfs: failed to resolve './file1/file0': -2 [ 230.592561][ T6030] loop4: detected capacity change from 0 to 1024 [ 230.647087][ T6030] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 230.714360][ T4561] udevd[4561]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.863658][ T6030] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 231.664818][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 231.680949][ T6046] loop3: detected capacity change from 0 to 1024 [ 231.725122][ T6046] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 231.803888][ T6046] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 232.480380][ T6054] loop4: detected capacity change from 0 to 2048 [ 232.544417][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 232.631235][ T6054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 232.849692][ T6060] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 232.946685][ T6060] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 232.992771][ T6062] binder: 6061:6062 ioctl c0306201 2000000003c0 returned -14 [ 233.065589][ T6060] EXT4-fs (loop4): This should not happen!! Data will be lost [ 233.065589][ T6060] [ 233.095056][ T6060] EXT4-fs (loop4): Total free blocks count 0 [ 233.101128][ T6060] EXT4-fs (loop4): Free/Dirty block details [ 233.135052][ T6060] EXT4-fs (loop4): free_blocks=66060288 [ 233.167504][ T6060] EXT4-fs (loop4): dirty_blocks=48 [ 233.181593][ T6060] EXT4-fs (loop4): Block reservation details [ 233.197076][ T6060] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 233.300961][ T6069] device syzkaller0 entered promiscuous mode [ 233.322985][ T4300] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 233.604063][ T6073] loop4: detected capacity change from 0 to 64 [ 233.614727][ T6073] hfs: unable to parse mount options [ 234.360282][ T6075] loop3: detected capacity change from 0 to 256 [ 234.506522][ T6075] FAT-fs (loop3): Directory bread(block 64) failed [ 234.532632][ T6075] FAT-fs (loop3): Directory bread(block 65) failed [ 234.654340][ T6077] loop2: detected capacity change from 0 to 32768 [ 234.673855][ T6075] FAT-fs (loop3): Directory bread(block 66) failed [ 234.695252][ T6075] FAT-fs (loop3): Directory bread(block 67) failed [ 234.718143][ T6075] FAT-fs (loop3): Directory bread(block 68) failed [ 234.724833][ T6077] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 234.735267][ T6077] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 234.744083][ T6077] BTRFS info (device loop2): setting nodatacow, compression disabled [ 234.744146][ T6077] BTRFS info (device loop2): force clearing of disk cache [ 234.744165][ T6077] BTRFS info (device loop2): enabling ssd optimizations [ 234.744181][ T6077] BTRFS info (device loop2): using spread ssd allocation scheme [ 234.744198][ T6077] BTRFS info (device loop2): turning off barriers [ 234.744218][ T6077] BTRFS info (device loop2): disabling free space tree [ 234.771448][ T6075] FAT-fs (loop3): Directory bread(block 69) failed [ 234.774535][ T6077] BTRFS info (device loop2): not using ssd optimizations [ 234.802254][ T6077] BTRFS info (device loop2): not using spread ssd allocation scheme [ 234.828783][ T6075] FAT-fs (loop3): Directory bread(block 70) failed [ 234.908081][ T6075] FAT-fs (loop3): Directory bread(block 71) failed [ 234.908206][ T6075] FAT-fs (loop3): Directory bread(block 72) failed [ 234.908237][ T6075] FAT-fs (loop3): Directory bread(block 73) failed [ 235.138469][ T6077] BTRFS info (device loop2): rebuilding free space tree [ 235.148739][ T6077] BTRFS info (device loop2): disabling free space tree [ 235.148803][ T6077] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 235.148870][ T6077] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 235.532991][ T4277] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 237.679616][ T6129] loop1: detected capacity change from 0 to 32768 [ 237.771546][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 237.790577][ T6129] JBD2: Ignoring recovery information on journal [ 237.806910][ T6137] loop4: detected capacity change from 0 to 64 [ 237.817606][ T6137] hfs: unable to parse mount options [ 238.071630][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 238.125693][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.157670][ T6129] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 238.496512][ T7] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 239.394192][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.641238][ T7] usb 4-1: Product: syz [ 239.931999][ T7] usb 4-1: Manufacturer: syz [ 240.197143][ T7] usb 4-1: SerialNumber: syz [ 240.857974][ T7] usb 4-1: config 0 descriptor?? [ 241.120988][ T6144] loop0: detected capacity change from 0 to 2048 [ 241.208734][ T7] usb 4-1: can't set config #0, error -71 [ 241.253949][ T7] usb 4-1: USB disconnect, device number 8 [ 241.313851][ T6144] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 241.541612][ T6157] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 241.648149][ T6157] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 241.648223][ T6157] EXT4-fs (loop0): This should not happen!! Data will be lost [ 241.648223][ T6157] [ 241.648243][ T6157] EXT4-fs (loop0): Total free blocks count 0 [ 241.648259][ T6157] EXT4-fs (loop0): Free/Dirty block details [ 241.648277][ T6157] EXT4-fs (loop0): free_blocks=66060288 [ 241.648295][ T6157] EXT4-fs (loop0): dirty_blocks=48 [ 241.648311][ T6157] EXT4-fs (loop0): Block reservation details [ 241.648325][ T6157] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 241.742063][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 241.868959][ T4373] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 242.681239][ T6170] loop4: detected capacity change from 0 to 1024 [ 242.933641][ T6170] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 243.137310][ T6170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 243.913986][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 244.187519][ T6184] Process accounting resumed [ 244.447645][ T6186] loop0: detected capacity change from 0 to 32768 [ 244.543380][ T6186] JBD2: Ignoring recovery information on journal [ 244.627254][ T6186] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 245.466059][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 245.600003][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.217607][ T6198] loop2: detected capacity change from 0 to 1024 [ 246.245443][ T6198] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.298502][ T6198] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 246.918047][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 246.929842][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.205767][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.382870][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.404211][ T6209] loop1: detected capacity change from 0 to 1024 [ 247.426515][ T6209] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.519622][ T6209] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 248.303389][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 248.667192][ T6226] loop0: detected capacity change from 0 to 64 [ 248.680065][ T6226] hfs: unable to parse mount options [ 249.886174][ T6231] loop2: detected capacity change from 0 to 32768 [ 249.918358][ T6231] JBD2: Ignoring recovery information on journal [ 250.001629][ T6231] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 251.152565][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.171722][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.180156][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.188242][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.196885][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 251.204323][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.425257][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 251.492267][ T6249] loop1: detected capacity change from 0 to 1024 [ 251.540261][ T6249] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.627895][ T6249] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 252.667190][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 252.827570][ T6242] loop0: detected capacity change from 0 to 32768 [ 252.936330][ T6242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.520 (6242) [ 253.022806][ T6242] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 253.044754][ T6244] chnl_net:caif_netlink_parms(): no params data found [ 253.077942][ T6242] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 253.119257][ T6242] BTRFS info (device loop0): setting nodatasum [ 253.171508][ T6242] BTRFS info (device loop0): force zlib compression, level 3 [ 253.178997][ T6242] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 253.231596][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 253.239485][ T6242] BTRFS info (device loop0): use lzo compression, level 0 [ 253.255180][ T6242] BTRFS info (device loop0): turning on flush-on-commit [ 253.264433][ T6242] BTRFS info (device loop0): enabling auto defrag [ 253.281429][ T6242] BTRFS info (device loop0): max_inline at 4096 [ 253.281968][ T6271] loop1: detected capacity change from 0 to 1024 [ 253.287740][ T6242] BTRFS info (device loop0): using free space tree [ 253.347859][ T6271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.473581][ T6271] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 254.116248][ T6242] BTRFS error (device loop0): open_ctree failed: -12 [ 254.411712][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 254.719859][ T6302] loop1: detected capacity change from 0 to 2048 [ 254.871812][ T6302] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 254.970938][ T6315] loop2: detected capacity change from 0 to 64 [ 254.982286][ T6315] hfs: unable to parse mount options [ 255.311362][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 255.793317][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.800213][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.400533][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 257.485560][ T6319] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 257.508669][ T6319] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 257.524556][ T6319] EXT4-fs (loop1): This should not happen!! Data will be lost [ 257.524556][ T6319] [ 257.538285][ T6319] EXT4-fs (loop1): Total free blocks count 0 [ 257.544873][ T6319] EXT4-fs (loop1): Free/Dirty block details [ 257.551560][ T6319] EXT4-fs (loop1): free_blocks=66060288 [ 257.558314][ T6319] EXT4-fs (loop1): dirty_blocks=48 [ 257.564048][ T6319] EXT4-fs (loop1): Block reservation details [ 257.570861][ T6319] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 257.867557][ T4553] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 257.902222][ T9] device hsr_slave_0 left promiscuous mode [ 257.913550][ T9] device hsr_slave_1 left promiscuous mode [ 257.964331][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.021664][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.041383][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.060978][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.073855][ T9] device bridge_slave_1 left promiscuous mode [ 258.092434][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.230059][ T6322] loop2: detected capacity change from 0 to 32768 [ 258.268588][ T9] device bridge_slave_0 left promiscuous mode [ 258.277539][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.354334][ T6322] JBD2: Ignoring recovery information on journal [ 258.387993][ T6333] loop1: detected capacity change from 0 to 1024 [ 258.411999][ T6322] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 258.466597][ T9] device veth1_macvtap left promiscuous mode [ 258.697079][ T6333] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.717850][ T9] device veth0_macvtap left promiscuous mode [ 258.818676][ T9] device veth1_vlan left promiscuous mode [ 258.925760][ T9] device veth0_vlan left promiscuous mode [ 258.993842][ T6333] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 259.407088][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 259.639817][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 260.346029][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 260.627203][ T6352] loop1: detected capacity change from 0 to 1024 [ 260.718682][ T6352] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 260.793111][ T6352] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 261.673670][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 263.495694][ T6373] loop1: detected capacity change from 0 to 64 [ 263.510113][ T6373] hfs: unable to parse mount options [ 263.556965][ T9] team0 (unregistering): Port device team_slave_1 removed [ 264.242722][ T9] team0 (unregistering): Port device team_slave_0 removed [ 264.414823][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.500309][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.104112][ T9] bond0 (unregistering): Released all slaves [ 265.236275][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.236370][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.237328][ T6244] device bridge_slave_0 entered promiscuous mode [ 265.398419][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.398496][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.399698][ T6244] device bridge_slave_1 entered promiscuous mode [ 265.479321][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.542718][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.606506][ T6244] team0: Port device team_slave_0 added [ 265.684278][ T6244] team0: Port device team_slave_1 added [ 265.800442][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.858977][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.885096][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.181751][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 266.401539][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 266.416269][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.541546][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.551995][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.595386][ T7] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 266.631314][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.639367][ T7] usb 2-1: Product: syz [ 266.653177][ T7] usb 2-1: Manufacturer: syz [ 266.663314][ T7] usb 2-1: SerialNumber: syz [ 266.681113][ T7] usb 2-1: config 0 descriptor?? [ 266.902446][ T6109] usb 2-1: USB disconnect, device number 10 [ 267.028969][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.046767][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.147134][ T6391] loop2: detected capacity change from 0 to 32768 [ 267.153924][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.372854][ T6391] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.546 (6391) [ 267.782607][ T6391] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 267.796998][ T6244] device hsr_slave_0 entered promiscuous mode [ 267.830931][ T6391] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 267.861839][ T6244] device hsr_slave_1 entered promiscuous mode [ 267.917777][ T6391] BTRFS info (device loop2): setting nodatacow, compression disabled [ 267.927526][ T6244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.956889][ T6244] Cannot create hsr debugfs directory [ 267.967953][ T6391] BTRFS info (device loop2): force clearing of disk cache [ 268.027449][ T6391] BTRFS info (device loop2): enabling ssd optimizations [ 268.058242][ T6391] BTRFS info (device loop2): using spread ssd allocation scheme [ 268.170751][ T6391] BTRFS info (device loop2): turning off barriers [ 268.305145][ T6391] BTRFS info (device loop2): disabling free space tree [ 268.473141][ T6391] BTRFS info (device loop2): not using ssd optimizations [ 268.616469][ T6391] BTRFS info (device loop2): not using spread ssd allocation scheme [ 268.965010][ T6391] BTRFS error (device loop2): open_ctree failed: -12 [ 269.062375][ T6038] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (6038) [ 269.588159][ T6443] loop1: detected capacity change from 0 to 32768 [ 269.625307][ T6443] JBD2: Ignoring recovery information on journal [ 269.670026][ T6443] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 270.507909][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 270.751379][ T6244] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 270.791635][ T5510] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 270.826623][ T6244] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 270.887606][ T6244] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 270.920736][ T6244] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.001397][ T5510] usb 3-1: Using ep0 maxpacket: 8 [ 271.008552][ T5510] usb 3-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 271.427132][ T5510] usb 3-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 271.639472][ T5510] usb 3-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 271.733191][ T5510] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 271.794804][ T5510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.810956][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.839219][ T5510] usb 3-1: Product: syz [ 271.846631][ T5510] usb 3-1: Manufacturer: syz [ 271.870113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.881639][ T5510] usb 3-1: SerialNumber: syz [ 271.886119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.954108][ T6244] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.995365][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.012387][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.042336][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.049514][ T4553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.108440][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.137572][ T5510] snd-usb-audio: probe of 3-1:65.0 failed with error -71 [ 272.156291][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.187713][ T5510] usb 3-1: USB disconnect, device number 11 [ 272.202129][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.240534][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.247840][ T4553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.281725][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.315385][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.399814][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.414510][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.433091][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.444101][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.462809][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.489325][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.515037][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.541470][ T125] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 272.561842][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.593277][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.614251][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.662247][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 272.701618][ T125] usb 4-1: device descriptor read/64, error -71 [ 272.861415][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 272.869100][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.003407][ T125] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 273.160417][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 273.254324][ T14] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 273.254908][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.255102][ T14] usb 1-1: Product: syz [ 273.255289][ T14] usb 1-1: Manufacturer: syz [ 273.255620][ T14] usb 1-1: SerialNumber: syz [ 273.311609][ T125] usb 4-1: device descriptor read/64, error -71 [ 273.491690][ T125] usb usb4-port1: attempt power cycle [ 273.507426][ T14] usb 1-1: config 0 descriptor?? [ 273.710466][ T7] usb 1-1: USB disconnect, device number 8 [ 273.775542][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.814822][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.839953][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.906982][ T125] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 273.945173][ T6500] device syzkaller0 entered promiscuous mode [ 273.961591][ T125] usb 4-1: device descriptor read/8, error -71 [ 274.257577][ T125] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 274.312833][ T125] usb 4-1: device descriptor read/8, error -71 [ 274.423103][ T6506] loop2: detected capacity change from 0 to 32768 [ 274.524472][ T6506] JBD2: Ignoring recovery information on journal [ 274.591768][ T125] usb usb4-port1: unable to enumerate USB device [ 274.639635][ T6506] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 275.338583][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 276.295046][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.310254][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.447730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.474013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.701448][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 276.877416][ T6244] device veth0_vlan entered promiscuous mode [ 276.886247][ T6244] device veth1_vlan entered promiscuous mode [ 276.913368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.946324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.981724][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 276.986884][ T14] usb 1-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 276.987565][ T14] usb 1-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 276.987747][ T14] usb 1-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 276.996971][ T14] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 276.997023][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.997066][ T14] usb 1-1: Product: syz [ 276.997117][ T14] usb 1-1: Manufacturer: syz [ 276.997167][ T14] usb 1-1: SerialNumber: syz [ 277.304218][ T1002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.325358][ T1002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.370069][ T14] snd-usb-audio: probe of 1-1:65.0 failed with error -71 [ 277.427177][ T6244] device veth0_macvtap entered promiscuous mode [ 277.445910][ T14] usb 1-1: USB disconnect, device number 9 [ 277.461235][ T1002] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.494122][ T6244] device veth1_macvtap entered promiscuous mode [ 277.550501][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.551178][ T6549] loop3: detected capacity change from 0 to 2048 [ 277.568348][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.579301][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.597993][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.608294][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.650486][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.688736][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.709668][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.748476][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.760518][ T6549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 277.766506][ T6546] device syzkaller0 entered promiscuous mode [ 277.801652][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.882380][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.940839][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.136102][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.158935][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.190575][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.262932][ T6549] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 279.162023][ T6549] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 279.174572][ T6549] EXT4-fs (loop3): This should not happen!! Data will be lost [ 279.174572][ T6549] [ 279.184257][ T6549] EXT4-fs (loop3): Total free blocks count 0 [ 279.190239][ T6549] EXT4-fs (loop3): Free/Dirty block details [ 279.196165][ T6549] EXT4-fs (loop3): free_blocks=66060288 [ 279.201752][ T6549] EXT4-fs (loop3): dirty_blocks=48 [ 279.206868][ T6549] EXT4-fs (loop3): Block reservation details [ 279.212882][ T6549] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 279.253335][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.294783][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.331036][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.348850][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.426827][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.439561][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 279.676798][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.709854][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.752856][ T6244] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.800653][ T6244] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.824847][ T6244] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.841233][ T6571] loop0: detected capacity change from 0 to 32768 [ 279.854094][ T6244] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.958083][ T6571] JBD2: Ignoring recovery information on journal [ 279.961734][ T6105] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 280.026987][ T6571] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 280.121690][ T6105] usb 2-1: device descriptor read/64, error -71 [ 280.401404][ T6105] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 280.561792][ T6105] usb 2-1: device descriptor read/64, error -71 [ 280.682423][ T6105] usb usb2-port1: attempt power cycle [ 280.772695][ T4443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.780583][ T4443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.865072][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.950186][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 280.996048][ T4443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.009248][ T4443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.039775][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.101517][ T6105] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 281.184653][ T6105] usb 2-1: device descriptor read/8, error -71 [ 281.451510][ T6105] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 281.483517][ T6105] usb 2-1: device descriptor read/8, error -71 [ 281.602291][ T6105] usb usb2-port1: unable to enumerate USB device [ 282.363488][ T6105] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 282.379699][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 282.531488][ T6105] usb 4-1: device descriptor read/64, error -32 [ 282.801454][ T6105] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 283.832300][ T6105] usb 4-1: Using ep0 maxpacket: 8 [ 283.844005][ T6105] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 283.884053][ T6105] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 283.906941][ T6622] device syzkaller0 entered promiscuous mode [ 283.925336][ T6105] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 283.973969][ T6105] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 283.993663][ T6105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.010281][ T6627] loop1: detected capacity change from 0 to 2048 [ 284.017101][ T6105] usb 4-1: Product: syz [ 284.023968][ T6105] usb 4-1: Manufacturer: syz [ 284.049594][ T6105] usb 4-1: SerialNumber: syz [ 284.128241][ T6627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 284.405451][ T6632] loop2: detected capacity change from 0 to 32768 [ 284.417330][ T6105] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 284.433505][ T6105] usb 4-1: USB disconnect, device number 14 [ 284.575645][ T6632] JBD2: Ignoring recovery information on journal [ 284.628470][ T6632] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 285.263756][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 285.341774][ T6638] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 285.382382][ T6638] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 285.426640][ T6638] EXT4-fs (loop1): This should not happen!! Data will be lost [ 285.426640][ T6638] [ 285.497996][ T6638] EXT4-fs (loop1): Total free blocks count 0 [ 285.530956][ T6638] EXT4-fs (loop1): Free/Dirty block details [ 285.557878][ T6638] EXT4-fs (loop1): free_blocks=66060288 [ 285.582877][ T6638] EXT4-fs (loop1): dirty_blocks=48 [ 285.608395][ T6638] EXT4-fs (loop1): Block reservation details [ 285.615045][ T6638] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 285.776800][ T4472] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 286.101483][ T5218] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 286.271687][ T5218] usb 4-1: device descriptor read/64, error -71 [ 286.371470][ T125] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 286.571630][ T125] usb 2-1: Using ep0 maxpacket: 16 [ 286.927725][ T125] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.960005][ T125] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.321500][ T5218] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 287.339094][ T125] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.369191][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.454133][ T125] usb 2-1: Product: syz [ 287.458969][ T125] usb 2-1: Manufacturer: syz [ 287.465673][ T125] usb 2-1: SerialNumber: syz [ 287.511395][ T5218] usb 4-1: device descriptor read/64, error -71 [ 287.555277][ T6677] device syzkaller0 entered promiscuous mode [ 287.631721][ T5218] usb usb4-port1: attempt power cycle [ 287.703281][ T125] usb 2-1: 0:2 : does not exist [ 287.728850][ T125] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 287.790282][ T125] usb 2-1: USB disconnect, device number 15 [ 288.035683][ T6038] udevd[6038]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.051861][ T5218] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 288.286372][ T5510] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 288.336517][ T6686] loop0: detected capacity change from 0 to 32768 [ 288.350245][ T5218] usb 4-1: device descriptor read/8, error -71 [ 288.440344][ T6686] JBD2: Ignoring recovery information on journal [ 288.491417][ T5510] usb 6-1: Using ep0 maxpacket: 8 [ 288.502997][ T5510] usb 6-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 288.549317][ T5510] usb 6-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 288.610008][ T5510] usb 6-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 288.631359][ T5218] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 288.664136][ T5510] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 288.684745][ T5218] usb 4-1: device descriptor read/8, error -71 [ 288.691702][ T5510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.698068][ T6686] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 288.723112][ T5510] usb 6-1: Product: syz [ 289.260189][ T5218] usb usb4-port1: unable to enumerate USB device [ 289.287603][ T5510] usb 6-1: Manufacturer: syz [ 289.299951][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 289.308637][ T5510] usb 6-1: SerialNumber: syz [ 289.559060][ T5510] snd-usb-audio: probe of 6-1:65.0 failed with error -71 [ 289.661412][ T5510] usb 6-1: USB disconnect, device number 2 [ 291.217208][ T6725] device syzkaller0 entered promiscuous mode [ 291.848701][ T6739] loop3: detected capacity change from 0 to 32768 [ 291.895794][ T6739] JBD2: Ignoring recovery information on journal [ 291.945371][ T6739] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 292.131510][ T4314] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 292.321899][ T4314] usb 1-1: device descriptor read/64, error -71 [ 292.611425][ T4314] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 292.722659][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 292.744753][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 292.801549][ T4314] usb 1-1: device descriptor read/64, error -71 [ 292.921405][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 292.921978][ T4314] usb usb1-port1: attempt power cycle [ 292.975395][ T7] usb 2-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 293.011475][ T7] usb 2-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 293.283039][ T7] usb 2-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 293.401673][ T4314] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 293.458659][ T4314] usb 1-1: device descriptor read/8, error -71 [ 293.604877][ T7] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 293.665162][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.690578][ T7] usb 2-1: Product: syz [ 293.701530][ T7] usb 2-1: Manufacturer: syz [ 293.724784][ T7] usb 2-1: SerialNumber: syz [ 293.971023][ T7] snd-usb-audio: probe of 2-1:65.0 failed with error -71 [ 294.051130][ T7] usb 2-1: USB disconnect, device number 16 [ 294.307887][ T4314] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 294.352366][ T4314] usb 1-1: device descriptor read/8, error -71 [ 294.570776][ T4314] usb usb1-port1: unable to enumerate USB device [ 294.864630][ T6780] loop2: detected capacity change from 0 to 1024 [ 294.958008][ T6780] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.386827][ T6780] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 296.438880][ T6806] loop1: detected capacity change from 0 to 32768 [ 296.582696][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 296.656571][ T6806] JBD2: Ignoring recovery information on journal [ 296.710787][ T6806] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 297.286822][ T5510] libceph: connect (1)[c::]:6789 error -101 [ 297.325021][ T5510] libceph: mon0 (1)[c::]:6789 connect error [ 297.438093][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 297.519619][ T6814] ceph: No mds server is up or the cluster is laggy [ 297.632175][ T4359] libceph: connect (1)[c::]:6789 error -101 [ 297.720944][ T4359] libceph: mon0 (1)[c::]:6789 connect error [ 297.726575][ T6820] loop0: detected capacity change from 0 to 2048 [ 297.880622][ T6820] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.221626][ T5510] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 298.501567][ T5510] usb 4-1: Using ep0 maxpacket: 8 [ 298.533168][ T5510] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 298.675282][ T5510] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 298.684688][ T5510] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 298.702212][ T5510] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 298.725521][ T5510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.801410][ T5510] usb 4-1: Product: syz [ 298.807607][ T5510] usb 4-1: Manufacturer: syz [ 298.812378][ T5510] usb 4-1: SerialNumber: syz [ 299.101108][ T5510] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 299.170908][ T5510] usb 4-1: USB disconnect, device number 19 [ 299.191481][ T4359] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 299.290992][ T6842] loop2: detected capacity change from 0 to 1024 [ 299.320549][ T6842] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 299.371403][ T4359] usb 6-1: device descriptor read/64, error -71 [ 299.399879][ T6842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 300.291732][ T4359] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 300.367568][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 300.461485][ T4359] usb 6-1: device descriptor read/64, error -71 [ 300.581631][ T4359] usb usb6-port1: attempt power cycle [ 300.776477][ T6859] loop3: detected capacity change from 0 to 32768 [ 300.817209][ T6859] JBD2: Ignoring recovery information on journal [ 300.873543][ T6859] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 300.951877][ T5510] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 300.991500][ T4359] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 301.063870][ T4359] usb 6-1: device descriptor read/8, error -71 [ 301.078374][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 301.143507][ T5510] usb 3-1: Using ep0 maxpacket: 16 [ 301.150620][ T5510] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.201302][ T5510] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.247697][ T5510] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.313901][ T5510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.326968][ T5510] usb 3-1: Product: syz [ 301.331567][ T4359] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 301.350384][ T5510] usb 3-1: Manufacturer: syz [ 301.362340][ T5510] usb 3-1: SerialNumber: syz [ 301.372444][ T4359] usb 6-1: device descriptor read/8, error -71 [ 301.682688][ T4359] usb usb6-port1: unable to enumerate USB device [ 302.008200][ T5510] usb 3-1: 0:2 : does not exist [ 302.031829][ T5510] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 302.160357][ T5510] usb 3-1: USB disconnect, device number 12 [ 303.178500][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.271450][ T6105] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 303.386370][ T6903] loop5: detected capacity change from 0 to 2048 [ 303.473909][ T6903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.481317][ T6105] usb 4-1: Using ep0 maxpacket: 8 [ 303.500189][ T6105] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 303.520371][ T6105] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 303.854064][ T6105] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 303.873694][ T6105] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 303.884468][ T6105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.892614][ T6105] usb 4-1: Product: syz [ 303.896799][ T6105] usb 4-1: Manufacturer: syz [ 303.902272][ T6105] usb 4-1: SerialNumber: syz [ 304.118016][ T6105] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 304.198622][ T6105] usb 4-1: USB disconnect, device number 20 [ 304.387892][ T6916] loop2: detected capacity change from 0 to 32768 [ 304.423365][ T6916] JBD2: Ignoring recovery information on journal [ 304.496303][ T6916] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 304.585538][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 305.175399][ T6928] loop1: detected capacity change from 0 to 1024 [ 305.203064][ T6928] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.286341][ T6928] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 305.381388][ T6105] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 305.571792][ T6105] usb 4-1: device descriptor read/64, error -71 [ 305.882030][ T6105] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 306.051462][ T6105] usb 4-1: device descriptor read/64, error -71 [ 306.135537][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 306.221647][ T6105] usb usb4-port1: attempt power cycle [ 306.631978][ T6105] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 306.675586][ T6105] usb 4-1: device descriptor read/8, error -71 [ 306.871976][ T6958] loop5: detected capacity change from 0 to 32768 [ 306.887324][ T6958] JBD2: Ignoring recovery information on journal [ 306.921626][ T4311] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 306.932215][ T6958] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 306.986204][ T6105] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 307.021455][ T5510] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 307.048064][ T6105] usb 4-1: device descriptor read/8, error -71 [ 307.062901][ T6244] ocfs2: Unmounting device (7,5) on (node local) [ 307.128537][ T4311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 307.151433][ T4314] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 307.160849][ T4311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.181527][ T6105] usb usb4-port1: unable to enumerate USB device [ 307.189216][ T4311] usb 3-1: too many endpoints for config 1 interface 1 altsetting 2: 128, using maximum allowed: 30 [ 307.205500][ T4311] usb 3-1: config 1 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 307.211501][ T5510] usb 1-1: Using ep0 maxpacket: 16 [ 307.224542][ T4311] usb 3-1: config 1 interface 1 has no altsetting 1 [ 307.240094][ T4311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.243304][ T5510] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.251711][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.286880][ T4311] usb 3-1: Product: syz [ 307.291131][ T4311] usb 3-1: Manufacturer: syz [ 307.300394][ T5510] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.301132][ T4311] usb 3-1: SerialNumber: syz [ 307.318901][ T5510] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.338938][ T5510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.360822][ T5510] usb 1-1: Product: syz [ 307.380314][ T5510] usb 1-1: Manufacturer: syz [ 307.387342][ T5510] usb 1-1: SerialNumber: syz [ 307.391531][ T4314] usb 2-1: Using ep0 maxpacket: 8 [ 307.400074][ T4314] usb 2-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 307.419764][ T4314] usb 2-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 307.442967][ T6969] loop5: detected capacity change from 0 to 2048 [ 307.460774][ T4314] usb 2-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 307.494012][ T4314] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 307.501722][ T6969] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 307.504144][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.520530][ T4314] usb 2-1: Product: syz [ 307.525482][ T4314] usb 2-1: Manufacturer: syz [ 307.530213][ T4314] usb 2-1: SerialNumber: syz [ 307.663784][ T5510] usb 1-1: 0:2 : does not exist [ 307.684689][ T5510] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 307.766731][ T6974] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 307.823761][ T4314] snd-usb-audio: probe of 2-1:65.0 failed with error -71 [ 307.835684][ T5510] usb 1-1: USB disconnect, device number 14 [ 307.851717][ T6974] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 307.885798][ T6974] EXT4-fs (loop5): This should not happen!! Data will be lost [ 307.885798][ T6974] [ 307.917406][ T4314] usb 2-1: USB disconnect, device number 17 [ 307.924354][ T6974] EXT4-fs (loop5): Total free blocks count 0 [ 307.934135][ T6974] EXT4-fs (loop5): Free/Dirty block details [ 307.940215][ T6974] EXT4-fs (loop5): free_blocks=66060288 [ 307.982143][ T6974] EXT4-fs (loop5): dirty_blocks=48 [ 307.992629][ T6974] EXT4-fs (loop5): Block reservation details [ 308.005894][ T6974] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 308.077233][ T4443] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 308.162226][ T4561] udevd[4561]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.349824][ T6979] loop3: detected capacity change from 0 to 1024 [ 308.383521][ T6979] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 308.471745][ T6979] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 309.516976][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 309.528374][ T4311] usb 3-1: selecting invalid altsetting 1 [ 309.547604][ T4311] cdc_ncm 3-1:1.0: bind() failure [ 309.576698][ T4311] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 309.634500][ T4311] cdc_ncm 3-1:1.1: bind() failure [ 309.712522][ T4311] usb 3-1: USB disconnect, device number 13 [ 310.073296][ T7004] loop2: detected capacity change from 0 to 32768 [ 310.132501][ T7004] JBD2: Ignoring recovery information on journal [ 310.229085][ T7004] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 310.382241][ T5510] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 310.434563][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 310.479412][ T7021] loop3: detected capacity change from 0 to 2048 [ 310.582644][ T7021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 310.594529][ T5510] usb 1-1: no configurations [ 310.599216][ T5510] usb 1-1: can't read configurations, error -22 [ 310.784265][ T5510] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 310.832564][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 311.121574][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 311.134061][ T5510] usb 1-1: no configurations [ 311.140591][ T5510] usb 1-1: can't read configurations, error -22 [ 311.150377][ T7] usb 2-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 311.295845][ T7030] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 311.301583][ T5510] usb usb1-port1: attempt power cycle [ 311.322923][ T7] usb 2-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 311.362805][ T7] usb 2-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 311.399223][ T7] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 311.409728][ T7030] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 311.431596][ T7030] EXT4-fs (loop3): This should not happen!! Data will be lost [ 311.431596][ T7030] [ 311.448944][ T7030] EXT4-fs (loop3): Total free blocks count 0 [ 311.459565][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.477677][ T7] usb 2-1: Product: syz [ 311.484829][ T7] usb 2-1: Manufacturer: syz [ 311.489483][ T7] usb 2-1: SerialNumber: syz [ 311.515477][ T7030] EXT4-fs (loop3): Free/Dirty block details [ 311.531809][ T7030] EXT4-fs (loop3): free_blocks=66060288 [ 311.539549][ T7030] EXT4-fs (loop3): dirty_blocks=48 [ 311.573917][ T7030] EXT4-fs (loop3): Block reservation details [ 311.618684][ T7030] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 311.744747][ T7] snd-usb-audio: probe of 2-1:65.0 failed with error -71 [ 311.793339][ T5510] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 311.830545][ T7] usb 2-1: USB disconnect, device number 18 [ 311.847740][ T4490] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 311.866927][ T5510] usb 1-1: no configurations [ 311.900061][ T5510] usb 1-1: can't read configurations, error -22 [ 311.994714][ T7038] loop2: detected capacity change from 0 to 1024 [ 312.028440][ T7038] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 312.061555][ T5510] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 312.110622][ T7038] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 312.129536][ T5510] usb 1-1: no configurations [ 312.134496][ T5510] usb 1-1: can't read configurations, error -22 [ 312.152688][ T5510] usb usb1-port1: unable to enumerate USB device [ 313.568270][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 314.097403][ T7063] loop1: detected capacity change from 0 to 32768 [ 314.191599][ T7063] JBD2: Ignoring recovery information on journal [ 314.319616][ T7063] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 314.482191][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 314.678322][ T7086] loop2: detected capacity change from 0 to 1024 [ 314.725523][ T7086] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 314.765885][ T7086] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 315.040824][ T5511] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 315.421348][ T5511] usb 2-1: Using ep0 maxpacket: 8 [ 315.423269][ T5511] usb 2-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 315.423300][ T5511] usb 2-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 315.423362][ T5511] usb 2-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 315.425586][ T5511] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 315.425617][ T5511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.425639][ T5511] usb 2-1: Product: syz [ 315.425656][ T5511] usb 2-1: Manufacturer: syz [ 315.425673][ T5511] usb 2-1: SerialNumber: syz [ 315.641528][ T5511] snd-usb-audio: probe of 2-1:65.0 failed with error -71 [ 315.674720][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 315.731205][ T5511] usb 2-1: USB disconnect, device number 19 [ 315.741678][ T22] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 315.952324][ T22] usb 6-1: no configurations [ 315.957046][ T22] usb 6-1: can't read configurations, error -22 [ 316.141497][ T22] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 316.334195][ T22] usb 6-1: no configurations [ 316.340405][ T22] usb 6-1: can't read configurations, error -22 [ 316.350670][ T22] usb usb6-port1: attempt power cycle [ 316.801329][ T22] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 316.852729][ T22] usb 6-1: no configurations [ 316.857396][ T22] usb 6-1: can't read configurations, error -22 [ 317.234553][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.241037][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.270945][ T7118] loop1: detected capacity change from 0 to 32768 [ 317.279445][ T22] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 317.313609][ T22] usb 6-1: no configurations [ 317.318316][ T22] usb 6-1: can't read configurations, error -22 [ 317.331476][ T22] usb usb6-port1: unable to enumerate USB device [ 317.344234][ T7118] JBD2: Ignoring recovery information on journal [ 317.376848][ T7118] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 318.177569][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 318.324234][ T7138] netlink: 40 bytes leftover after parsing attributes in process `syz.0.723'. [ 319.051480][ T4311] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 319.241430][ T4311] usb 1-1: Using ep0 maxpacket: 8 [ 319.249353][ T4311] usb 1-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 319.249458][ T4311] usb 1-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 319.249739][ T4311] usb 1-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 319.271413][ T4311] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 319.271448][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.271470][ T4311] usb 1-1: Product: syz [ 319.271487][ T4311] usb 1-1: Manufacturer: syz [ 319.271504][ T4311] usb 1-1: SerialNumber: syz [ 319.491453][ T4311] snd-usb-audio: probe of 1-1:65.0 failed with error -71 [ 319.497233][ T4311] usb 1-1: USB disconnect, device number 19 [ 319.559778][ T7157] loop1: detected capacity change from 0 to 1024 [ 319.594790][ T7157] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 319.662516][ T7157] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 320.523255][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 320.794568][ T7173] loop3: detected capacity change from 0 to 32768 [ 320.908758][ T7173] JBD2: Ignoring recovery information on journal [ 321.012353][ T7186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.738'. [ 321.210355][ T7173] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 321.210430][ T7182] loop2: detected capacity change from 0 to 32768 [ 321.246420][ T7182] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 321.256883][ T7182] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 321.266709][ T7182] BTRFS info (device loop2): setting nodatacow, compression disabled [ 321.275102][ T7182] BTRFS info (device loop2): force clearing of disk cache [ 321.282342][ T7182] BTRFS info (device loop2): enabling ssd optimizations [ 321.289404][ T7182] BTRFS info (device loop2): using spread ssd allocation scheme [ 321.297208][ T7182] BTRFS info (device loop2): turning off barriers [ 321.303864][ T7182] BTRFS info (device loop2): disabling free space tree [ 321.311390][ T7182] BTRFS info (device loop2): not using ssd optimizations [ 321.319989][ T7182] BTRFS info (device loop2): not using spread ssd allocation scheme [ 321.392364][ T7] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 321.684715][ T7] usb 2-1: no configurations [ 321.699217][ T7] usb 2-1: can't read configurations, error -22 [ 322.002493][ T7182] BTRFS info (device loop2): rebuilding free space tree [ 322.016569][ T7182] BTRFS info (device loop2): disabling free space tree [ 322.023886][ T7182] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 322.033863][ T7182] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 322.049140][ T7] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 322.252880][ T7] usb 2-1: no configurations [ 322.258332][ T7] usb 2-1: can't read configurations, error -22 [ 322.367144][ T7] usb usb2-port1: attempt power cycle [ 322.668393][ T4277] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 322.871612][ T7] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 322.945982][ T7] usb 2-1: no configurations [ 322.950655][ T7] usb 2-1: can't read configurations, error -22 [ 323.079191][ T6026] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop2 scanned by udevd (6026) [ 323.092902][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 323.161971][ T7222] overlayfs: failed to resolve './file1': -2 [ 323.196939][ T7] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 323.253528][ T7] usb 2-1: no configurations [ 323.258212][ T7] usb 2-1: can't read configurations, error -22 [ 323.285149][ T7] usb usb2-port1: unable to enumerate USB device [ 323.737230][ T7238] loop0: detected capacity change from 0 to 1024 [ 323.771389][ T7238] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 323.821568][ T4314] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 323.838399][ T7238] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 324.031477][ T4314] usb 6-1: Using ep0 maxpacket: 8 [ 324.047357][ T4314] usb 6-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 324.047481][ T4314] usb 6-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 324.047761][ T4314] usb 6-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 324.077966][ T4314] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 324.078120][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.078212][ T4314] usb 6-1: Product: syz [ 324.078300][ T4314] usb 6-1: Manufacturer: syz [ 324.078389][ T4314] usb 6-1: SerialNumber: syz [ 324.431478][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 324.432005][ T4314] snd-usb-audio: probe of 6-1:65.0 failed with error -71 [ 324.470121][ T4314] usb 6-1: USB disconnect, device number 11 [ 324.709774][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 324.799612][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.750'. [ 325.163467][ T7256] loop0: detected capacity change from 0 to 32768 [ 325.200461][ T7256] JBD2: Ignoring recovery information on journal [ 325.258208][ T7256] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 325.963502][ T6108] libceph: connect (1)[c::]:6789 error -101 [ 325.969583][ T6108] libceph: mon0 (1)[c::]:6789 connect error [ 326.309393][ T7269] loop5: detected capacity change from 0 to 32768 [ 326.317738][ T6108] libceph: connect (1)[c::]:6789 error -101 [ 326.324899][ T6108] libceph: mon0 (1)[c::]:6789 connect error [ 326.336425][ T7269] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 326.450867][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 326.465748][ T7276] loop1: detected capacity change from 0 to 512 [ 326.789342][ T7263] ceph: No mds server is up or the cluster is laggy [ 326.866163][ T6108] libceph: connect (1)[c::]:6789 error -101 [ 326.958840][ T6108] libceph: mon0 (1)[c::]:6789 connect error [ 328.906585][ T7282] overlayfs: failed to resolve './file1': -2 [ 330.296415][ T6026] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 330.797524][ T7294] loop5: detected capacity change from 0 to 1024 [ 330.822112][ T7294] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 330.895943][ T4313] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 330.948949][ T7294] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 331.251918][ T4313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.692231][ T4313] usb 3-1: config 0 has no interfaces? [ 332.737110][ T4313] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 332.767764][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.777519][ T4313] usb 3-1: Product: syz [ 332.792846][ T4313] usb 3-1: Manufacturer: syz [ 332.838004][ T4313] usb 3-1: SerialNumber: syz [ 332.861302][ T5511] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 332.885798][ T4313] usb 3-1: config 0 descriptor?? [ 333.008092][ T6244] EXT4-fs (loop5): unmounting filesystem. [ 333.081859][ T5511] usb 1-1: Using ep0 maxpacket: 8 [ 333.092976][ T5511] usb 1-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 333.138360][ T5511] usb 1-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 333.164041][ T5511] usb 1-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 333.234041][ T5511] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 333.271387][ T5511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.281618][ T5511] usb 1-1: Product: syz [ 333.285838][ T5511] usb 1-1: Manufacturer: syz [ 333.317800][ T5511] usb 1-1: SerialNumber: syz [ 333.550689][ T5511] snd-usb-audio: probe of 1-1:65.0 failed with error -71 [ 333.566063][ T5511] usb 1-1: USB disconnect, device number 20 [ 333.683569][ T7329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'. [ 334.080550][ T5218] libceph: connect (1)[c::]:6789 error -101 [ 334.098045][ T5218] libceph: mon0 (1)[c::]:6789 connect error [ 334.255637][ T5218] usb 3-1: USB disconnect, device number 14 [ 334.328471][ T7347] overlayfs: failed to resolve './file1': -2 [ 334.441837][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 334.448354][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 334.528748][ T7356] loop3: detected capacity change from 0 to 1024 [ 334.608869][ T7356] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 334.783929][ T7366] loop2: detected capacity change from 0 to 512 [ 334.826320][ T7356] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 334.851129][ T7338] ceph: No mds server is up or the cluster is laggy [ 334.973162][ T5218] libceph: connect (1)[c::]:6789 error -101 [ 335.242178][ T5218] libceph: mon0 (1)[c::]:6789 connect error [ 336.512945][ T7360] loop0: detected capacity change from 0 to 2048 [ 336.991642][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 337.004763][ T7360] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 340.160143][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 340.353381][ T7388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.780'. [ 340.732883][ T7390] loop0: detected capacity change from 0 to 40427 [ 340.772042][ T7390] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 340.941324][ T6108] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 340.962997][ T5069] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 341.171204][ T5069] usb 2-1: Using ep0 maxpacket: 8 [ 341.264916][ T5069] usb 2-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 341.375077][ T5069] usb 2-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 341.471466][ T5069] usb 2-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 341.574121][ T5069] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 341.640560][ T5069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.714084][ T7406] loop5: detected capacity change from 0 to 1024 [ 341.719982][ T5069] usb 2-1: Product: syz [ 341.735778][ T7406] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 341.751882][ T5069] usb 2-1: Manufacturer: syz [ 341.784368][ T6108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.784987][ T5069] usb 2-1: SerialNumber: syz [ 341.796649][ T7406] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 341.841451][ T6108] usb 4-1: config 0 has no interfaces? [ 341.850175][ T6108] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 341.872207][ T6108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.373590][ T6108] usb 4-1: Product: syz [ 342.378153][ T6108] usb 4-1: Manufacturer: syz [ 342.385659][ T6108] usb 4-1: SerialNumber: syz [ 342.439242][ T6108] usb 4-1: config 0 descriptor?? [ 342.442635][ T5069] snd-usb-audio: probe of 2-1:65.0 failed with error -71 [ 343.012683][ T6244] EXT4-fs (loop5): unmounting filesystem. [ 343.034285][ T5069] usb 2-1: USB disconnect, device number 24 [ 343.367165][ T7420] loop2: detected capacity change from 0 to 2048 [ 343.619427][ T7424] loop5: detected capacity change from 0 to 1024 [ 343.882255][ T7424] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 343.934245][ T7424] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 343.963200][ T22] usb 4-1: USB disconnect, device number 25 [ 344.024789][ T7420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 344.362776][ T7435] raw_sendmsg: syz.3.794 forgot to set AF_INET. Fix it! [ 346.419493][ T7443] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 346.435288][ T7443] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 346.448365][ T7443] EXT4-fs (loop2): This should not happen!! Data will be lost [ 346.448365][ T7443] [ 346.458392][ T7443] EXT4-fs (loop2): Total free blocks count 0 [ 346.464781][ T7443] EXT4-fs (loop2): Free/Dirty block details [ 346.471019][ T7443] EXT4-fs (loop2): free_blocks=66060288 [ 346.476899][ T7443] EXT4-fs (loop2): dirty_blocks=48 [ 346.482423][ T7443] EXT4-fs (loop2): Block reservation details [ 346.488553][ T7443] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 346.949555][ T6244] EXT4-fs (loop5): unmounting filesystem. [ 347.141934][ T4324] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 347.489831][ T7459] loop0: detected capacity change from 0 to 40427 [ 347.506927][ T7459] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 347.751515][ T6109] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 348.481480][ T6109] usb 4-1: Using ep0 maxpacket: 8 [ 348.496918][ T6109] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 348.506813][ T6109] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 348.520874][ T6109] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 348.563131][ T6109] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 348.625019][ T6109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.685449][ T6109] usb 4-1: Product: syz [ 348.705397][ T6109] usb 4-1: Manufacturer: syz [ 348.710333][ T6109] usb 4-1: SerialNumber: syz [ 349.141775][ T6109] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 349.189178][ T6109] usb 4-1: USB disconnect, device number 26 [ 350.889114][ T7485] loop2: detected capacity change from 0 to 1024 [ 351.177726][ T7485] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 351.339355][ T7485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 351.441329][ T4311] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 351.711401][ T4311] usb 6-1: Using ep0 maxpacket: 16 [ 352.507497][ T4311] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.549423][ T4311] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.597886][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 352.719564][ T4311] usb 6-1: string descriptor 0 read error: -71 [ 352.739885][ T4311] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.793653][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.857321][ T4311] usb 6-1: can't set config #1, error -71 [ 352.880403][ T7504] loop0: detected capacity change from 0 to 2048 [ 352.907507][ T4311] usb 6-1: USB disconnect, device number 12 [ 353.021754][ T7504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 353.140188][ T7522] device syzkaller0 entered promiscuous mode [ 353.411907][ T7520] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 353.495918][ T7520] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 33 with error 28 [ 353.557943][ T7520] EXT4-fs (loop0): This should not happen!! Data will be lost [ 353.557943][ T7520] [ 353.662111][ T7520] EXT4-fs (loop0): Total free blocks count 0 [ 353.668731][ T7520] EXT4-fs (loop0): Free/Dirty block details [ 353.675039][ T7520] EXT4-fs (loop0): free_blocks=66060288 [ 353.811386][ T7520] EXT4-fs (loop0): dirty_blocks=48 [ 353.826054][ T7520] EXT4-fs (loop0): Block reservation details [ 353.836218][ T7520] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 354.066905][ T4490] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 354.900866][ T7547] loop0: detected capacity change from 0 to 1024 [ 355.443376][ T7547] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 355.547110][ T7547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 356.378018][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 356.551379][ T5069] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 356.731523][ T4314] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 356.755034][ T5069] usb 3-1: unable to get BOS descriptor or descriptor too short [ 356.780852][ T5069] usb 3-1: not running at top speed; connect to a high speed hub [ 356.811373][ T5069] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.842645][ T5069] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.866849][ T5069] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 356.898684][ T5069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.941867][ T4314] usb 4-1: Using ep0 maxpacket: 8 [ 356.951768][ T125] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 356.967233][ T5069] usb 3-1: Product: syz [ 356.998433][ T5069] usb 3-1: Manufacturer: syz [ 357.031160][ T5069] usb 3-1: SerialNumber: syz [ 357.151527][ T125] usb 2-1: Using ep0 maxpacket: 16 [ 357.164433][ T125] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.323923][ T125] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.497368][ T125] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.676016][ T5069] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 357.699067][ T4314] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 357.707944][ T4314] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 357.717559][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.723075][ T4314] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 357.741420][ T5069] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 357.745903][ T4314] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 357.757940][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.765997][ T125] usb 2-1: Product: syz [ 357.766021][ T125] usb 2-1: Manufacturer: syz [ 357.766037][ T125] usb 2-1: SerialNumber: syz [ 357.786938][ T4314] usb 4-1: Product: syz [ 357.791473][ T4314] usb 4-1: Manufacturer: syz [ 357.796097][ T4314] usb 4-1: SerialNumber: syz [ 357.811787][ T5069] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 357.895291][ T5069] usb 3-1: USB disconnect, device number 15 [ 358.013898][ T125] usb 2-1: 0:2 : does not exist [ 358.024558][ T125] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 358.027030][ T4314] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 358.122811][ T125] usb 2-1: USB disconnect, device number 25 [ 358.124542][ T4314] usb 4-1: USB disconnect, device number 27 [ 358.423822][ T6038] udevd[6038]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 361.579217][ T4256] kernel write not supported for file bpf-prog (pid: 4256 comm: kworker/1:3) [ 361.845961][ T7623] loop5: detected capacity change from 0 to 2048 [ 361.974912][ T7623] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.962312][ T4359] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 363.341460][ T4359] usb 2-1: Using ep0 maxpacket: 16 [ 363.359522][ T4359] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.390597][ T4359] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.420849][ T4359] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.446697][ T4359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.471588][ T5510] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 363.486627][ T4359] usb 2-1: Product: syz [ 363.501110][ T4359] usb 2-1: Manufacturer: syz [ 363.511138][ T4359] usb 2-1: SerialNumber: syz [ 363.681447][ T5510] usb 4-1: Using ep0 maxpacket: 8 [ 363.706214][ T5510] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 363.724380][ T5510] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 363.843393][ T7653] loop2: detected capacity change from 0 to 32768 [ 363.855454][ T4359] usb 2-1: 0:2 : does not exist [ 363.879678][ T5510] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 363.900617][ T4359] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 364.059834][ T5510] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 364.089937][ T4359] usb 2-1: USB disconnect, device number 26 [ 364.096649][ T5510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.105470][ T5510] usb 4-1: Product: syz [ 364.110215][ T5510] usb 4-1: Manufacturer: syz [ 364.115522][ T5510] usb 4-1: SerialNumber: syz [ 364.351491][ T4270] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 364.846907][ T7658] read_mapping_page failed! [ 365.202460][ T6038] udevd[6038]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.243177][ T5510] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 365.272062][ T5510] usb 4-1: USB disconnect, device number 28 [ 371.588412][ T7699] loop2: detected capacity change from 0 to 2048 [ 371.660381][ T7699] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.800135][ T4359] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 372.677477][ T4359] usb 6-1: Using ep0 maxpacket: 8 [ 372.691412][ T4359] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 372.691436][ T4359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.691449][ T4359] usb 6-1: Product: syz [ 372.691459][ T4359] usb 6-1: Manufacturer: syz [ 372.691469][ T4359] usb 6-1: SerialNumber: syz [ 372.692618][ T4359] usb 6-1: config 0 descriptor?? [ 372.694368][ T4359] gspca_main: se401-2.14.0 probing 047d:5003 [ 373.099960][ T4359] gspca_se401: ExtraFeatures: 117 [ 373.105371][ T4359] gspca_se401: Too many frame sizes [ 373.307355][ T6108] usb 6-1: USB disconnect, device number 13 [ 373.321315][ T4311] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 373.531299][ T4311] usb 4-1: Using ep0 maxpacket: 8 [ 373.531324][ T4359] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 373.538226][ T4311] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 373.560693][ T4311] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 373.591886][ T4311] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 373.643299][ T4311] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 374.982715][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.992246][ T4359] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 375.004267][ T4311] usb 4-1: Product: syz [ 375.017487][ T4311] usb 4-1: Manufacturer: syz [ 375.021427][ T4359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.033002][ T4311] usb 4-1: SerialNumber: syz [ 376.362177][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 376.375655][ T4359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.391358][ T4359] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 376.435259][ T4359] usb 2-1: string descriptor 0 read error: -71 [ 376.451359][ T4359] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 376.460497][ T4359] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 376.496702][ T4359] usb 2-1: config 0 descriptor?? [ 376.522281][ T4311] usb 4-1: can't set config #65, error -71 [ 376.528832][ T4359] usb 2-1: can't set config #0, error -71 [ 376.542474][ T4311] usb 4-1: USB disconnect, device number 29 [ 376.578686][ T4359] usb 2-1: USB disconnect, device number 27 [ 376.725906][ T7739] loop1: detected capacity change from 0 to 256 [ 376.773191][ T7739] exfat: Deprecated parameter 'utf8' [ 376.786359][ T7739] exfat: Deprecated parameter 'namecase' [ 376.928186][ T7739] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 377.171454][ T4311] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 377.361557][ T4311] usb 4-1: Using ep0 maxpacket: 16 [ 377.387573][ T4311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.398288][ T4311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.443592][ T4311] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.478094][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.498219][ T4311] usb 4-1: Product: syz [ 377.505287][ T4311] usb 4-1: Manufacturer: syz [ 377.509930][ T4311] usb 4-1: SerialNumber: syz [ 377.733613][ T4311] usb 4-1: 0:2 : does not exist [ 377.744576][ T4311] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 377.798400][ T4311] usb 4-1: USB disconnect, device number 30 [ 378.042468][ T6038] udevd[6038]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.346226][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.352726][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.835322][ T125] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 384.323597][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 384.336711][ T125] usb 2-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 384.396441][ T125] usb 2-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 384.444852][ T125] usb 2-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 384.450290][ T7791] device syzkaller0 entered promiscuous mode [ 384.473798][ T125] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 384.491384][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.511554][ T125] usb 2-1: Product: syz [ 384.515862][ T125] usb 2-1: Manufacturer: syz [ 384.520501][ T125] usb 2-1: SerialNumber: syz [ 386.112081][ T125] snd-usb-audio: probe of 2-1:65.0 failed with error -71 [ 386.155980][ T125] usb 2-1: USB disconnect, device number 28 [ 386.944656][ T7807] binder: 7806:7807 ioctl 4018620d 0 returned -22 [ 386.954768][ T7807] binder: 7806:7807 ioctl c0306201 2000000003c0 returned -14 [ 387.992141][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.892'. [ 390.398595][ T7838] device syzkaller0 entered promiscuous mode [ 391.618666][ T7852] binder: BINDER_SET_CONTEXT_MGR already set [ 391.646104][ T7852] binder: 7851:7852 ioctl 4018620d 200000000040 returned -16 [ 391.666548][ T7837] loop3: detected capacity change from 0 to 32768 [ 391.701368][ T6109] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 391.712836][ T7837] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.899 (7837) [ 391.781779][ T7857] loop0: detected capacity change from 0 to 2048 [ 391.806055][ T7837] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 391.839333][ T7857] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.871100][ T7837] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 391.917840][ T7837] BTRFS info (device loop3): turning on sync discard [ 391.931355][ T6109] usb 3-1: Using ep0 maxpacket: 8 [ 391.973268][ T7837] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 391.975662][ T6109] usb 3-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 391.983115][ T7837] BTRFS info (device loop3): use zstd compression, level 3 [ 392.012662][ T7837] BTRFS info (device loop3): turning on async discard [ 392.090972][ T6109] usb 3-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 392.101389][ T6109] usb 3-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 392.106727][ T7837] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 392.115767][ T6109] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 392.134284][ T6109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.142606][ T6109] usb 3-1: Product: syz [ 392.147051][ T6109] usb 3-1: Manufacturer: syz [ 392.152046][ T6109] usb 3-1: SerialNumber: syz [ 392.617852][ T7837] BTRFS info (device loop3): trying to use backup root at mount time [ 392.642948][ T7837] BTRFS info (device loop3): force zlib compression, level 3 [ 392.650712][ T7837] BTRFS info (device loop3): using free space tree [ 392.690794][ T6109] snd-usb-audio: probe of 3-1:65.0 failed with error -71 [ 392.711790][ T6109] usb 3-1: USB disconnect, device number 16 [ 393.080172][ T4496] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 393.432383][ T7837] BTRFS error (device loop3): failed to load root extent [ 393.464947][ T7837] BTRFS warning (device loop3): try to load backup roots slot 1 [ 393.631864][ T4490] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 393.814396][ T7837] BTRFS warning (device loop3): couldn't read tree root [ 393.846162][ T7837] BTRFS warning (device loop3): try to load backup roots slot 2 [ 393.935484][ T7837] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 393.947636][ T7837] BTRFS warning (device loop3): couldn't read tree root [ 393.957104][ T7837] BTRFS warning (device loop3): try to load backup roots slot 3 [ 394.153778][ T7837] BTRFS error (device loop3): open_ctree failed: -22 [ 395.455018][ T7901] device syzkaller0 entered promiscuous mode [ 396.426032][ T7911] binder: BINDER_SET_CONTEXT_MGR already set [ 396.470949][ T7911] binder: 7910:7911 ioctl 4018620d 200000000040 returned -16 [ 396.674788][ T5437] libceph: connect (1)[c::]:6789 error -101 [ 396.701592][ T5437] libceph: mon0 (1)[c::]:6789 connect error [ 397.375208][ T7916] ceph: No mds server is up or the cluster is laggy [ 397.631034][ T5437] libceph: connect (1)[c::]:6789 error -101 [ 397.731519][ T5437] libceph: mon0 (1)[c::]:6789 connect error [ 398.771341][ T5069] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 398.841285][ T5510] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 398.991339][ T5069] usb 6-1: Using ep0 maxpacket: 8 [ 398.998604][ T5069] usb 6-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 399.057625][ T5069] usb 6-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 399.067592][ T5510] usb 1-1: Using ep0 maxpacket: 16 [ 399.075022][ T5510] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.108358][ T5069] usb 6-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 399.138601][ T5510] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.149717][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 399.173561][ T5069] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 399.191833][ T5069] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.196788][ T7941] device syzkaller0 entered promiscuous mode [ 399.202066][ T5510] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.241305][ T5510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.254510][ T5069] usb 6-1: Product: syz [ 399.258720][ T5069] usb 6-1: Manufacturer: syz [ 399.277391][ T5510] usb 1-1: Product: syz [ 399.300850][ T5069] usb 6-1: SerialNumber: syz [ 399.305916][ T5510] usb 1-1: Manufacturer: syz [ 399.310569][ T5510] usb 1-1: SerialNumber: syz [ 399.552557][ T5510] usb 1-1: 0:2 : does not exist [ 399.557700][ T5069] snd-usb-audio: probe of 6-1:65.0 failed with error -71 [ 399.577919][ T5510] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 399.608761][ T5069] usb 6-1: USB disconnect, device number 14 [ 399.648139][ T5510] usb 1-1: USB disconnect, device number 21 [ 399.698719][ T7949] binder: BINDER_SET_CONTEXT_MGR already set [ 399.735203][ T7949] binder: 7947:7949 ioctl 4018620d 200000000040 returned -16 [ 399.913366][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.973201][ C1] ------------[ cut here ]------------ [ 400.979207][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600 [ 400.989043][ C1] Modules linked in: [ 400.993083][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 401.000136][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.010274][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 401.016670][ C1] Code: 24 4c 89 e7 e8 8e 2e 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 a9 8f d1 f7 0f 0b e9 f6 f7 ff ff e8 9d 8f d1 f7 <0f> 0b e9 48 fb ff ff e8 91 8f d1 f7 48 c7 c7 90 dc fa 8d 4c 89 e6 [ 401.036529][ C1] RSP: 0018:ffffc900001e0a30 EFLAGS: 00010246 [ 401.042847][ C1] RAX: ffffffff89b0e4f3 RBX: ffffffff89b0d2f6 RCX: ffff888017739dc0 [ 401.050855][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.058879][ C1] RBP: 0000000000000000 R08: ffff888017739dc0 R09: 0000000000000003 [ 401.066906][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888079f86228 [ 401.074931][ C1] R13: dffffc0000000000 R14: ffff888079f86760 R15: ffff888056e46424 [ 401.082958][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 401.091942][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.098727][ C1] CR2: 000000110c413ed2 CR3: 000000005e6fc000 CR4: 00000000003506e0 [ 401.106755][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 401.114783][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 401.122803][ C1] Call Trace: [ 401.126114][ C1] [ 401.128987][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 401.134615][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 401.140117][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 401.145723][ C1] ? read_lock_is_recursive+0x10/0x10 [ 401.151142][ C1] __iterate_interfaces+0x243/0x500 [ 401.156414][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 401.162711][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 401.169941][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 401.176239][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 401.183435][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 401.188684][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 401.193949][ C1] ? hw_scan_work+0xf50/0xf50 [ 401.198675][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 401.203842][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 401.209964][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 401.215139][ C1] handle_softirqs+0x2a1/0x930 [ 401.219946][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 401.224851][ C1] ? do_softirq+0x210/0x210 [ 401.229389][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 401.234648][ C1] __irq_exit_rcu+0x13b/0x230 [ 401.239361][ C1] ? irq_exit_rcu+0x20/0x20 [ 401.243928][ C1] irq_exit_rcu+0x5/0x20 [ 401.248196][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 401.253900][ C1] [ 401.256857][ C1] [ 401.259810][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 401.265845][ C1] RIP: 0010:default_idle+0xb/0x10 [ 401.270987][ C1] Code: 48 89 df e8 47 c2 9b f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 eb 4e 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 401.290654][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 401.296785][ C1] RAX: cbdbf8967c23be00 RBX: ffffffff8a37c257 RCX: cbdbf8967c23be00 [ 401.304811][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 401.312830][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 401.320835][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 401.328853][ C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 1ffff9200002efc8 [ 401.337054][ C1] ? default_idle_call+0x77/0xc0 [ 401.342065][ C1] default_idle_call+0x84/0xc0 [ 401.347119][ C1] do_idle+0x3a2/0x680 [ 401.351254][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 401.356488][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 401.362191][ C1] ? schedule_idle+0x57/0x90 [ 401.366924][ C1] cpu_startup_entry+0x3f/0x60 [ 401.371853][ C1] start_secondary+0xe4/0xf0 [ 401.376513][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 401.382493][ C1] [ 401.385628][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 401.392930][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 401.399979][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.410233][ C1] Call Trace: [ 401.413549][ C1] [ 401.416425][ C1] dump_stack_lvl+0x188/0x24e [ 401.421137][ C1] ? memcpy+0x3c/0x60 [ 401.425171][ C1] ? show_regs_print_info+0x12/0x12 [ 401.430407][ C1] ? load_image+0x400/0x400 [ 401.435041][ C1] panic+0x2e5/0x730 [ 401.438967][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 401.443556][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 401.449672][ C1] __warn+0x2f8/0x4f0 [ 401.453768][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 401.459608][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 401.465440][ C1] report_bug+0x2ba/0x4f0 [ 401.469918][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 401.475699][ C1] handle_bug+0x3a/0x70 [ 401.479903][ C1] exc_invalid_op+0x16/0x40 [ 401.484449][ C1] asm_exc_invalid_op+0x16/0x20 [ 401.489332][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 401.495692][ C1] Code: 24 4c 89 e7 e8 8e 2e 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 a9 8f d1 f7 0f 0b e9 f6 f7 ff ff e8 9d 8f d1 f7 <0f> 0b e9 48 fb ff ff e8 91 8f d1 f7 48 c7 c7 90 dc fa 8d 4c 89 e6 [ 401.515344][ C1] RSP: 0018:ffffc900001e0a30 EFLAGS: 00010246 [ 401.521440][ C1] RAX: ffffffff89b0e4f3 RBX: ffffffff89b0d2f6 RCX: ffff888017739dc0 [ 401.529434][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.537543][ C1] RBP: 0000000000000000 R08: ffff888017739dc0 R09: 0000000000000003 [ 401.545560][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888079f86228 [ 401.553567][ C1] R13: dffffc0000000000 R14: ffff888079f86760 R15: ffff888056e46424 [ 401.561585][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 401.567178][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 401.572959][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 401.578549][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 401.584054][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 401.589642][ C1] ? read_lock_is_recursive+0x10/0x10 [ 401.595065][ C1] __iterate_interfaces+0x243/0x500 [ 401.600298][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 401.606576][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 401.613813][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 401.620085][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 401.627150][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 401.632422][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 401.637763][ C1] ? hw_scan_work+0xf50/0xf50 [ 401.642498][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 401.647643][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 401.653758][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 401.658907][ C1] handle_softirqs+0x2a1/0x930 [ 401.663708][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 401.668599][ C1] ? do_softirq+0x210/0x210 [ 401.673175][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 401.678664][ C1] __irq_exit_rcu+0x13b/0x230 [ 401.683374][ C1] ? irq_exit_rcu+0x20/0x20 [ 401.687914][ C1] irq_exit_rcu+0x5/0x20 [ 401.692177][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 401.697854][ C1] [ 401.700815][ C1] [ 401.703770][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 401.709785][ C1] RIP: 0010:default_idle+0xb/0x10 [ 401.714847][ C1] Code: 48 89 df e8 47 c2 9b f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 eb 4e 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 401.735093][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 401.741191][ C1] RAX: cbdbf8967c23be00 RBX: ffffffff8a37c257 RCX: cbdbf8967c23be00 [ 401.749273][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 401.757276][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 401.765282][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 401.773284][ C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 1ffff9200002efc8 [ 401.781296][ C1] ? default_idle_call+0x77/0xc0 [ 401.786329][ C1] default_idle_call+0x84/0xc0 [ 401.791125][ C1] do_idle+0x3a2/0x680 [ 401.795497][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 401.800742][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 401.806419][ C1] ? schedule_idle+0x57/0x90 [ 401.811229][ C1] cpu_startup_entry+0x3f/0x60 [ 401.816169][ C1] start_secondary+0xe4/0xf0 [ 401.820787][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 401.826730][ C1] [ 401.830206][ C1] Kernel Offset: disabled [ 401.834596][ C1] Rebooting in 86400 seconds..