last executing test programs: 1m1.323049132s ago: executing program 0 (id=440): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000b00)={0x500, 0x1, &(0x7f0000000640)=[r1], &(0x7f0000000680)=[0x5], &(0x7f0000000a80)=[r2], &(0x7f0000000ac0), 0x0, 0x2}) 1m1.048091628s ago: executing program 0 (id=444): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xda, 0x45, 0xa1, 0x40, 0x424, 0x12c, 0x4e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x8a, 0x0, 0x3, 0xf5, 0x81, 0x89, 0x2c, [], [{{0x9, 0x5, 0xf, 0x2, 0x200, 0x8, 0x1, 0x8}}, {{0x9, 0x5, 0x9, 0x2, 0x28, 0xfe, 0x77, 0xfc}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x7, 0x7, 0xa}}]}}]}}]}}, 0x0) fanotify_init(0x20, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 58.913962084s ago: executing program 0 (id=470): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_mount_image$jfs(&(0x7f0000000180), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3200012, &(0x7f0000000280)=ANY=[], 0xff, 0x6212, &(0x7f000000b1c0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa5e438, &(0x7f0000001f80)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278f5b72e23916a8c3d6696a0bf0670d64b4f5a0a0e50200000066e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc8446bd9d095cbd2eb8a982eb31402", @ANYRESHEX, @ANYRES32, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6bf1d61efea623114a0de3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f4282e05e743a0763193b1951aef02f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x101c) 57.409126878s ago: executing program 0 (id=466): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$eJzs3U9sG1kZAPDPdpJN2izdXRDaXSS20iKVP2qcP0KbABLiBBwqISpxAamExA0lTh3FTmmiSqRw64EDAoGEOHDnwpULPVFVQpxBXDmhVlCCVFCRBnnsSZ3ETlya2Gzm95Ncz/i5/t5z8r08v3njCSC3Ljb/KURMRsQfIuJCa3f/Ey627naf3Flq3gqRJFf/Vkif19zPnpr9v/MRsRMR4xHx1S9GfKtwOG59a3t1sVqtbLT3y4219XJ9a/vyjbXFlcpK5ebM/HsLC/PTc7MLJ9bWez/8zr0rv/ny2K+e/uDRgx/97rfNak22yzrbcZJaTR+N1zseG4mIz51GsCEotdszMeyK8D9p/vw+GBHvpvl/IUrpT7M/z061ZsBpS5Ik+U/ySq/inQQ4s4rpGLhQnIqI1naxODXVGsN/KM4Vq7V641PXa5s3l1tj5dditHj9RrUy3f6s8FqMFpr7M+n28/3ZA/tzEekY+MeliXR/aqlWXR5sVwcccP5A/v+z1Mp/ICf6/8gPnDXyH/JL/kN+yX/IL/kP+SX/Ib/kP+SX/If8kv+QX535n53I9eqQ6gIM1lF//8cGWA9goL5y5UrzlmTnvy/f2tpcrd26vFypr06tbS5NLdU21qdWarWV9JydteNer1qrrc98OjZvlxuVeqNc39q+tlbbvNm4lp7Xf60yOpBWAf14/Z37fypExM5nJtJbdPzJl6twtiVJIYZ9DjIwHKVhd0DA0Dj0B/n1Ap/xe35JGPD+1uUreveMn+9Z9PlYP/aVdn/9EvUCTk/xqMJnDwdXEWDgLr3l+B/klfl/yC/z/5Bfx4zxDQ8gB46a/4/2tfy6OjT/38PTF6sPcPqOnP8HzrTJLtf/SpLke692XLtrOiI+EBF/LI2+kl3rCzgLin8ttMf/ly58bPJg6VjhX+kcwFhEfPfnV396e7HR2JhpPv73vccbP2s/PjuM+gO97Z/hy/I0y2MAIL92n9xZym6DjPv4C61FCIfjj7TnJsfTEcy53cK+tQqFE1q7sHM3It7sFr/Qvt5568jHud3SofhvtO8LrZdI6zuSXjd9MPHf6oj/0Y74b7/0uwL5cL/Z/0x3y79imtOxl3/7+5/JE1ofnfV/2ZrrzvhZ/1fq0f+902eMb//i+90O76aLvR/fjXi7a/+bxRtPYx2M36zbpT7jP/rG1z7cqyz5Zet1usXPNLfKjbX1cn1r+/KNrBbz7y0szE/PzS6U0znqcjZTfdhn3/z9g17xm+1v69H+Px9q/0S7Tp/os/3//sjDr188Iv7H3+3++/dGen/g/U+SvTp8ss/4/5j9yzd7lTXjL/d4/4vd4kdWGjHXZ/z6T77k3GEA+D9S39peXaxWKxtdNkZ7F9mwYWPQGyMxwKDH9Rw7g+mggFPzPOmHXRMAAAAAAAAAAACgX71W/94/weXEw24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZ8N8AAAD//6rz1eo=") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) 55.990844149s ago: executing program 0 (id=471): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22008d0, 0x0) 55.667804156s ago: executing program 0 (id=473): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1002000}) 55.343817953s ago: executing program 32 (id=473): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1002000}) 3.872498615s ago: executing program 2 (id=889): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000001b00)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844b100e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e", @ANYRESDEC=0x0, @ANYRES64, @ANYRES8=0x0], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r0 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x1) 3.261262829s ago: executing program 2 (id=897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x378}}, 0x0) 2.845240108s ago: executing program 2 (id=900): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x3e) r1 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e21, 0x4bf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x34bbe26c}, 0x1c) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71069e2bb34ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.789817089s ago: executing program 2 (id=903): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.239485971s ago: executing program 1 (id=908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.006620676s ago: executing program 1 (id=910): pipe2$9p(&(0x7f0000000200), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 2.005644776s ago: executing program 2 (id=911): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0x1, 0x6246, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) syz_mount_image$vfat(&(0x7f0000006580), &(0x7f00000000c0)='./bus\x00', 0x9800, 0x0, 0xfd, 0x0, &(0x7f0000000100)) 1.906413328s ago: executing program 1 (id=912): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.709622683s ago: executing program 1 (id=914): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)={r2, 0x2009, 0x20, 0xaf9}, &(0x7f00000000c0)=0x18) 1.491838797s ago: executing program 1 (id=917): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000140)='./file0\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) rmdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10d042, 0x48) creat(&(0x7f0000000000)='./bus\x00', 0x0) 1.36900225s ago: executing program 5 (id=920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000200)={0xa, 0x0, [{0x80000019, 0xa, 0x0, 0x5, 0x1, 0xfffffffb, 0x8001}, {0x40000000, 0xc, 0x4, 0x200, 0x8, 0x9}, {0x80000007, 0x10000, 0x0, 0x6, 0x3, 0x8, 0x8f3d}, {0x0, 0x3789d889, 0x0, 0x8, 0x8, 0x1, 0x400}, {0x80000001, 0x0, 0x7, 0x3, 0x7, 0x4}, {0x40000001, 0x4, 0x4, 0x9, 0x10000, 0x8, 0x7}, {0x80000001, 0xce, 0x6, 0x8, 0xa, 0xde0, 0xf57}, {0x0, 0xfffffff7, 0x1, 0x101, 0x78, 0x9, 0x9}, {0xa, 0x79c9, 0x2, 0x9, 0xffff, 0xfffffde8, 0x5}, {0x80000008, 0xe917, 0x4, 0x66, 0x2, 0x3, 0x4}]}) 1.309169772s ago: executing program 3 (id=922): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x1, 0x0, 0x2, 0x3, 0x2, 0x40}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") 1.035705338s ago: executing program 5 (id=924): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f00000005c0)=""/196) 1.023605427s ago: executing program 1 (id=925): syz_pidfd_open(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000008640)=ANY=[@ANYBLOB="12010000020000402505a0a440000102030109025c0002010000010904000001020d001a052406000105240000c00d240f0100000000000000000306241a0000000905810300028000000904010000020d00000904010102020d000009058202ff03050400090503"], 0x0) 881.954141ms ago: executing program 3 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0x7, 0x5, 0x4008000d, 0xffffffff, 0x7}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001f00)=@vmx={0x100, 0x0, 0x2080, {0x26000, 0x43f00, {}, 0x0, 0x6}, {"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", "74485c02cc3d2feede8f343ae164753039c041dc8e83cbb16678625e308951b919ec42532b0ddebf7bd568e938d258f3ee00d3c529fa5056f3c4ba54a8a4a57e03b62d308475e0403e0169eae259f614fdb3572e19dacebbff87a37f3fadc45c37fa5c0ada4ad4777018737d1a633402cb48311c00a365ea9d15d383e5a9a1b8510350d8e353ba46ab94629d2c9d865b5ab0142faa11b9b3b75a010c3fa12fb17b7f22889d64516b98ecb1d3d5abdd1a9065ea3c61b75a381ca3fc72833aeb3ce266350618d35206a9fd47328077a3407f75b965a36f422cb7ccf0cdd3320bc89f8d43f54db8ad280d988f31e4bd2e0b349207c746737eaec5763673e460d3fc1ca92e147c0c0076b5ee01ef09015936e5ff2a722b0f30b853de48db22251fff8db43f5aff7cfda61aa8a30acc52547fc4f1ba86d65c5cff8a8fd4f14292d647e41fd91a8926f5ce0a92a217b47cb4a01eb1fe44da0badaa18e63df95ebd492401e4f19c351a77b4915d14dc0903ffd196bdb3bae0841dabd83c3bd336d2eb8d2b1d52e351cf1d13d2556bec6c3773cbc8326a5b1e029a9a0d5501e8615e8a2693097c32cf504806c94bd6292a0e9c273bdb7418bcd6dcab07fde463d85b0ae7a273adbfa7a6bcaf62f59d9ceb5b90ddf2fa09335e2499bc18a1c0ec28f83424571022f6e03e4b06c96ae14d25ed4655c30be46ab30ad742380a4733782ec29fcb17b0c42a18ec98d39143679cf6021e1866eb78d734417a7a90fe94ff1f7d63252a3f2f552f61d5629c4834e144a83dbf47753770fa1169a9d7581b2d2f913048d1019c35a993d20803435696eaf879060c03c1fc133773db22f0dd29064129e87bb4cb810afa8b3a4c211f5ed4ee82e542c1802001ccdd2cf4bb44655bbc18bdd810dec8bf439880402573a58ec5d98dffe37bdda12610d78ca9149111b67682f563efd0ff43d99c763fe441577287d9ea38950d9d0c488d6ccb15d7ef6bd42298e54f62914e4cc37a7affc60d5ed630d490ae630d905ac5357882458d13e1e143d3ed86196a45507a3fec8aaf538ed46c3fcc0899f20361cb7620ee559fc2d5e59381cf0475702eeadd1cde56495304b553127c8450083cd003c6a28833e5844d6c044b293bea77c2c37f0ba360fdd9df8fe29e975c18a152691b66ec0c48ca023dc2ef1e231f0239093dd85c3ac5c25099480fb45759483f7627b76ae71422352180cefd8aec61dd11fade823d272813eddfdab2c34d69822844457ed47b37249cc1fc1da7e786d0fe8897bada810a775fe63b24becd28553267057cd5a9f967196ca2d26f31a379a45e9046b1d52880393efa7daa5bbfd9709ea28b7c736cca866db084519da5a249d418d6c00291d553c6d37f3c2688ff4db0d1b29a8af482b7e17d802063b03122e4bab958db144c9ef2ef21b4789a5263a14a15d5e698509f0e1d51a0bb4e37f4a12f8a7dda9e4afe5058abaf7d6d134db578e93debc6b275fbb83833b3fed96def21326626df8e81ca29e5e6538c38afec7740c7b80dfbd57021ea9e268383a08f09ac42cf53ae6df0cdc6605c29496c816b9bfb06dd7314c360fc4d2bea8ca6121eb989ff7a0eaef8b40f77057d5f7111195ce663516842430f3b8725eab2b60988eebb93c2ac5b0cbc0e8751bedeeb2cb728ea23530b14948fcef6c6d16bacc952fdf5dcb5fc281680d9464b549357cd65d26f9a50dd4bbb48f509e4a8e1f9ce73900e61b52e4aa66f7d627e9261e7ae30d5ee7edaa1b31b851718bd66ad72f33f968b2889d7fd9583a490f8f05a45b4f67030dad0773b6ff133fa50eeda36a4f8bd9caed0d0e6acac29992e28194ccb909b5f9f72839960e2a6f773f7e71214c3d6c06dc05660d9084993f8e9775cb27c3514476ab27b07e4942a36cecc24399bcacf9b254dc8de0a14edfff1faa48ee4a86f17b5e7303cf543378f4606664bd7b4ee00bb31869047b1048afbee53489b529e0d4de612f922f0faefc741df7db47a59bf42e14be1db6c54297853cd1cf694368696006f4a2b49e7283f05479363343a121811d67df6130ac6a728668d354fa3fa98ad3ebd266e0c427366d0253e4c470b458551ef46c41764e84f90ea7f680a57f8f63988ee3f44e541139915786f1440858fa343a068f3d5337295b8d6faa846595b0ab536ed9b8eba2a5e79d83074300979573e9630fdc73fd071ee65a1519df075c5496de01ecc80724598e3c65e60b4f07738de5928ad43290c5c166cd510299408a46b29980cc488316d6f4e70b167ecc45ce62faacf3c37e59bd31961830d62b33888e7a4c0a4a294bcde3515a0b4b3312c3ec97a64036368de747b01787e9cceb13bdf08438627772d56be7b3267bb18516ccb7992d8ac18e2d7c93964893403f13c118b3c56d4f749875e85f8cb2188afb420961313cbac5ab21dbd3a8d26bfcf32068b1044079a77a79135064b00f081cd62f5312c251ddaad2c08dacef1e15eab544c6823c73abda1a7532eaa040ace18bd360bb6acbf62677665f1f681b8bac479ae3e29c7c9621ea96a439636a7c6fe2bf67f369b232dec683ed6e638c4fead14927c59a1b8201e3b90cf789128e1cf85f9db332ee539d77a5286ea8bed0cbc82ea219e9d6fc052879cb0e1a0cf78969e24e8fa9fbfd6652deb1f8237d3700810c9d8f85684b12c6f7801f591fc141a2fdf18b88bb4a97fb4f582600b130a34885c734e7abf1b5aaa9049e23118d696cf093f11524cb1c9218d1758b584f65b81b97983d350a6c67f395119716540e67f481b825d3a43213c4d86b4fca718f76625200f011ff5f504bbcb877439b9f222007ad885e6172b21ebf5482d4bd15c39b71fa980f339d141638e71ce602c898b82d6f3ebe2fe46939501a297582f1800e57610fd402297a2887d02cdffafcecf4055668f55ffb2c1a303f0d5f4cd340a6e6ae607c1626e3474835c38270ac2c4787bcbea8b3789299288c5b21a1720146a3aefcc435ea9ecbad7168ecf8e74af571e94335646bbfacdf60bec560565322ddf1359189706da5df598d97569a006d708a96a45e9537d0d6876bbdb69f438fb5f8bfe249870dd15a973d844f2645d36a09c5ad6d68830bab9ddebd683ff2edccec842bfbcff3ad3f4041c116a250650f6b1696f24c0280246b3cda9ee278b40edbd1719187836dc0139e528e6e271ca288477e09371f67c3a6755257498fb6587a24fb33cd6a75453b1607eb89dd6cb8fccc162ca030aa6ecc374c09d3d15c8d8aaeb356a5dcb8c61232b460d4faf13f842bd57f23f54dc15a3c29c31b659df855c0006fd91e7c7ef04e157c1302a3c9b8f03e26e8f820f42753d96d35f0e2c9b4205a72ddfdc583d8cd08132d5571f20e7ae2fabd40eddb159cf48930823ee81e55d9574ef263d642cb3b355315cb2647b3786050044b0442d5dd7227d338231aa618a6425e34d86fa9e9cabefed142f8d7038fb12c264ff3461e500744e7ed43e0c1b285d24e09c5aac636c222417d76e871825e9eb59552cd78c1a7beede494c351a9b933829f8d8afe1c31d07a3f87972c199cd6db93d0d4df05d6f3ee418a244933b3d013f5f6b7f2bbc44a23a77daef007c5e63beac083557da3957504e631c68294a3c5bc05e28b4a61d86304b36e52e56a6aa51405eca433d7374d022fa61b34df6fb1f648adc7c8e54b6d4b70b4218321e7cdd101c50b2b3fbe749e51b833db3b0f2108011d66a205fe2e520872404edc075defbd4e5ff9932bacd2f1e28d0c64d5d8ce07e587e1662487855103b5c473593292e392181e8609fc6986b3c99013a75c80c7c55689ae7f6ae4d1b3699138eb76b123814b6bdbf592803fcd0cfe1e7cd9a7a8d04ef5ab0cc6c12079452d6232b1aec88b1b2c99f50032b30861f1f0047e0f22fa2412d2052f788b3921f6e19a1a09fb4b319d6fc19662ef69d0b311a1b6bf8bb1c4a41032beb217102b999ab00b73158c2c91aa07ce08a4d01b7d24128514d830e8d0717dc315d73ee624ffda68d83ac8b2686b126af3e9d549adbf52443733587baaf511589b93e7606be7fefd973cf8e719b08508ac67715a77e4e40be56dfd4f5d173a73527bb900bbc8f61b94cd601261af24e4945b30fed761a101b2a732fa21a8a347041ced5551738ed2ffd822e1090e3b1129c3a569c4eaa298349b73d4a1329c8a91492f053c26378f0e7f5f8e2ba478b14de7a0fb22b7ca3f0c57ef34ad597f77d9e4d52709d0942fd618f47a03c07e32551b47f62b78c2063b08b0e4f06c5bf61a384a2e93df6445166279b3e515e08c41148f49f2e981df4dbe24b8efb52b3a3397a1d8d8ea277404c9516c9aeae255003f8df8ad2bf95eb1087859a55341b6bbfd39a37d26ed5607b465cbe6fcb34e3d456ec6023e8cb1347c1b9d816e32064945740982d16332683d2a106e66c96b7c4301865073bde539820d8c3c87542a7db15da3210a8997d1a163dfda978902e6572f1753913350b0b8d34cc6a5866c31968ae71a0c3110b3b8efd0c1ea9deeb44f9d9176e49576a0c0e9f7ec344de985c8256dad9025b1c94cac913b43388aa8e34191557b024edcfe2c9dde1547946e20e993782f2ca007ca5fc4cc9ecfa40f5f35e8ecde53fd62790c86921246783ebea20bbfcb8c6952bbd0863b7a0acb510f19fd8835184fcbd795fb0f50e1e61ec1544c56e1080eb8e566f507d550380104c82b1e064c6a25b391dc77c774e76532e2866a9f2bfdccc03b627db83556e6247872c56408876011afa0fd746c84d49034d896b555fae2a74d70b176b9ec64416cab9b249822be2a01de20a1157b729c7eab21107f20fab5be9f2644556cdf4ddcdad7438f9e60129a4451486a9eea253d54072e0a0b8b796b3bb7d9008a4616d028966c5078540c248ad5e3433982abb0097975d23ca3a9a7f3a8713cfa4107129d5281ac0b1fc68bf9a865c69b0651e40d6a4b96a71c3d009e4cf309dbffaf2fb0f52920ef473ac4717d7fe5d3b0eca4976c6bb153c5855a1594cd23704be42876e66253c104d69081c8d7f49c0480144623bfb426cf1b55c1af78023fcdcfcc76f411101456982a045e774d3a1ce63bc20bb23622732a3d95ace5f9d9f2ad390e0f3ca557068db53bcec9ae5f8f20531c5229a92ee9d9d594b6edf0ada953ea27b2289493a907602d25ecb0fd74161a4585b2a89cec0f869cc9130615aaf0952bd71a6f3039731f53f277fb016a18e14a01b4999742c5de7141148697e448fb4f9293ef4e87a716fca9f9ef59cfca10630a099ec8a58e1c92e19f4ecf8c9422107d375b0bbea135e48b0c9baaabaeba4397dc198dac83a656912178bce22569379e9dac575fef89d743d36f4b627a9639cd3649e498270b966c0b5eaa235e7e2b8bf1d26214af7d3649e2a6b9386151c6170c142d0db167cbd4f152ad8f561169c135fe8114fba923e6e70c7060a75344a620b127eea66ce6932e2b4c9952cf18a05faf989b8fa0cfa7e36e3898a4a8e8c98ba5f812e713f0a5d9850f5e991ddb417a7974f68fd4d4e5a8c41f7f0d903108ca374d79000c67f28614c2023c31284bd22cde507dec0e643dfa6b588d870fcaf3182c0064d58d1c27ced135e28ba6ae0a3c09b8f276dbf5bda96b3819218204e88ec1e5c517d87353d6539b3c75bb97922c5ce2b75c4d34070ab15bfb4f4320fc5855c16d405c28d0797af878798187277a899036d7f79efbc062d22f897065989937d0cb1b31b00"}}) 856.209691ms ago: executing program 5 (id=928): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db440000041296a1180002000000000000000e1208000f0100810401a800350020000140", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800", 0x26}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 842.385182ms ago: executing program 4 (id=929): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008fc0)=[{{&(0x7f0000002600)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f00000028c0)=[{0x10, 0x1, 0x9}], 0x10}}], 0x1, 0x40) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 744.122314ms ago: executing program 4 (id=930): socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) 696.267195ms ago: executing program 4 (id=931): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000580)='m'}) 512.268539ms ago: executing program 5 (id=932): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/image_size', 0x41180, 0x142) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 511.024879ms ago: executing program 4 (id=933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x14, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 449.15075ms ago: executing program 3 (id=934): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x3107727c8013a469, 0x2, {0x6, @struct={0x1, 0x4}, 0x0, 0x7, 0x4, 0x1, 0x2, 0x40, 0x481, @usage=0xffff, 0x2, 0x9, [0xfffffffeffffffff, 0x1, 0x3, 0x6, 0x2, 0x4]}, {0x1ff, @usage=0x4, 0x0, 0x79, 0x7, 0x71c0, 0x8, 0x8, 0x442, @usage=0x1, 0x5, 0x7c, [0x69, 0x7, 0x2, 0x8000, 0x400, 0x19]}, {0x4, @usage=0xa57, 0x0, 0x3, 0x3, 0xa, 0x57f9, 0x55a48ef6, 0x450, @usage=0xe131, 0x81, 0x4d5, [0xf6, 0x40, 0x0, 0x1, 0x5, 0x4]}, {0x8478, 0x2, 0x9}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 321.056033ms ago: executing program 4 (id=935): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x53, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 309.320314ms ago: executing program 3 (id=936): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x29, 0x0, 0x81, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/41, 0x29}], 0x1, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000080)='4\x00', 0x2) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 265.118695ms ago: executing program 2 (id=937): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$eJzs3MtvG8UfAPDvrpP8+vwllPLoAwiUR8UjadICPXABgcQBJCQ4lGNI0qo0bVATJFpVEBAqR1SJO+KIxF/AiV4QcELiCgduqFKFemnhZLT2buMY202MnYX685HWmdkda+ab3bFndrIJYGCNZy9JxI6I+DkiRuvZtQXG6z9uXLsw+8e1C7NJVKuv/57Uyl2/dmG2KFq8b3ueOZhGpB8nsa9FvUvnzp+aWViYP5vnJ5dPvzO5dO78UydPz5yYPzF/Zvro0SOHp559ZvrpnsSZxXV97/uL+/e8/OalV2ePXXrr+6+SIv6mOHpkvNPBR6rVHldXrp0N6WSoxIawIZWIyE7XcK3/j0YlVk/eaLz0UamNA/qqmmtzeKUK3MaSKLsFQDmKL/ps/ltsmzf6KN/V5+sToCzuG/lWPzIUaV5muGl+20vjEXFs5c/Psy36cx8CAGCNb7Lxz5Otxn9p3N1Q7v9pfQ1lLCLuiIhdEXFnROyOiLsiamXviYh7N1h/8yLJ38c/6ZWuAlunbPz3XL62tXb8V4z+YqyS53bW4h9Ojp9cmD9UP7aSvWT5qQ51XH7xp0/bHWsc/2VbVn8xFszbcWXof2vfMzezPNNtvM2ufhixd6hV/MnNlYAkIvZExN4u6zj5+Jf72x27dfwd9GCdqfpFxGP1878STfEXks7rk5NbYmH+0GTDVdHkhx8vvtau/n8Ufw9k539by+v/ZvxjSeN67dLG67j4yydt5zTdXv8jyRu19Ei+772Z5eWzUxEjySv1Rjfun159b5EvymfxHzzQuv/vitXfxL6IyC7i+yLi/oh4IG/7gxHxUEQc6BD/dy88/Hb38fdXFv/chs7/amIkmve0TlROffv1mkrHNhJ/dv6P1FIH8z21z7+kc1zraVd3VzMAAAD896QRsSOSdOJmOk0nJup/w787tqULi0vLTxxffPfMXP0ZgbEYTos7XaMN90On8ml9kZ9uyh/O7xt/Vtlay0/MLi7MlR08DLjtbfp/5rdK2a0D+s7zWjC42vb/LZvbDmDz+f6HwaX/w+Bq0f+3ltEOYPO1+v7/ICIuP1pCY4BN1dT/LfvBADH/h8Gl/8PgWkf///X2+nfVQEQsbY1bPyTf30QlyqxdostEpP+KZkj0KVH2JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBv/BUAAP//m5Hs/w==") statx(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1000, 0x400, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) pwrite64(r0, &(0x7f0000000140)='H', 0x1, 0x6) 209.993645ms ago: executing program 5 (id=938): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000400)={0x0, 0x0, r2, 0xfbfbfbfb}) 192.691656ms ago: executing program 3 (id=939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xb, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x9e, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x68, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x1a, [0x9c2, 0x9, 0x80000001, 0x2, 0xa, 0x7]}, @nop, @timestamp={0x8, 0xa, 0x1, 0x9}, @generic={0xfe, 0xf, "9851392bb17ea902cd4372cc4a"}, @nop, @window={0x3, 0x3, 0x7}, @mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0x2, 0x3, 0xf18}, @exp_fastopen={0xfe, 0xd, 0xf989, "bc0637c8835ff1198c"}]}}}}}}}}, 0x0) 121.242137ms ago: executing program 4 (id=940): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz1\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0x1, 0x4, 0x9, 0x1, 0x4, 0x7, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x7, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0x10, 0x6, 0x3, 0x9, 0x804d7e, 0xff, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd9, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x48, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x1000, 0x1a9e1bf8, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x6ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x4, 0x5, 0x0, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x6, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x3, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x1000, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0xa, 0x5, 0x3, 0x9, '\x00', 0x2}) 1.11181ms ago: executing program 5 (id=941): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x2000880, &(0x7f0000001900)={[{@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@fat=@flush}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@utf8}, {@shortname_mixed}, {@utf8no}, {@shortname_win95}, {@fat=@check_normal}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}]}, 0x4, 0x358, &(0x7f0000000740)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f0000000900)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(&(0x7f0000000100)='./bus\x00', 0x24042, 0x10) 0s ago: executing program 3 (id=942): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x8800000000005, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) write$binfmt_script(r3, &(0x7f0000010100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) kernel console output (not intermixed with test programs): nknown main item tag 0x0 [ 85.137558][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.145670][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.153306][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.160634][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.168272][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.175693][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.183792][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.191200][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.198525][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.205915][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.213316][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.220638][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.228066][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.235581][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.243011][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.250337][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.257753][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.265141][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.272548][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.279872][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.287752][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.290236][ T4527] udc-core: couldn't find an available UDC or it's busy [ 85.297654][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.309658][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.317123][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.322324][ T4527] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.324588][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.339325][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.347580][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.355198][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.362616][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.369950][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.377415][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.384822][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.396419][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.403863][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.413492][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 85.427718][ T23] gt683r_led 0003:1770:FF00.0001: hidraw0: USB HID v9.0c Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 85.458052][ T23] usb 2-1: USB disconnect, device number 2 [ 85.480122][ T21] gt683r_led 0003:1770:FF00.0001: failed to send set report request: -19 [ 85.515005][ T4542] fido_id[4542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 85.549943][ T21] usb 5-1: USB disconnect, device number 2 [ 85.551020][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.564443][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 86.128308][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 86.141035][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.265285][ T4561] loop2: detected capacity change from 0 to 1024 [ 86.391052][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 86.522592][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 86.556028][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.586067][ T4553] loop3: detected capacity change from 0 to 32768 [ 86.593030][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.615429][ T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.653869][ T4553] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.102 (4553) [ 86.664923][ T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.685385][ T1324] cfg80211: failed to load regulatory.db [ 86.703327][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.800358][ T4553] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 86.867512][ T4553] BTRFS info (device loop3): using free space tree [ 86.887701][ T4553] BTRFS info (device loop3): has skinny extents [ 86.991269][ T21] usb 1-1: GET_CAPABILITIES returned 0 [ 86.996853][ T21] usbtmc 1-1:16.0: can't read capabilities [ 87.066106][ T4553] BTRFS info (device loop3): enabling ssd optimizations [ 87.220997][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 87.296926][ T21] usb 1-1: USB disconnect, device number 3 [ 87.894584][ T4609] loop2: detected capacity change from 0 to 128 [ 87.955714][ T4611] device syzkaller1 entered promiscuous mode [ 88.010804][ T4609] FAT-fs (loop2): bogus number of reserved sectors [ 88.018539][ T4609] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 88.061122][ T4609] FAT-fs (loop2): Can't find a valid FAT filesystem [ 88.253911][ T4618] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 88.381255][ T4623] loop3: detected capacity change from 0 to 256 [ 88.458632][ T4623] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 88.769586][ T4630] loop4: detected capacity change from 0 to 8192 [ 88.857882][ T4644] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.192159][ T4656] capability: warning: `syz.1.139' uses deprecated v2 capabilities in a way that may be insecure [ 89.395804][ T4664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.142'. [ 89.497484][ T4665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.142'. [ 90.216546][ T4700] loop2: detected capacity change from 0 to 128 [ 90.312726][ T4657] loop3: detected capacity change from 0 to 40427 [ 90.329079][ T4700] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.354154][ T4700] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.383233][ T4657] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 90.389669][ T4657] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 90.407052][ T4657] F2FS-fs (loop3): invalid crc value [ 90.485406][ T4657] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 90.825948][ T4657] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 90.865877][ T4657] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.941056][ T4613] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.154616][ T4186] attempt to access beyond end of device [ 91.154616][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 91.194374][ T4613] usb 2-1: Using ep0 maxpacket: 32 [ 91.292356][ T4746] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000000400000000000000000000004 [ 91.312702][ T4613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.340701][ T4613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.370096][ T4613] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 91.398905][ T4613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.437353][ T4613] usb 2-1: config 0 descriptor?? [ 91.977453][ T4613] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 92.144139][ T4772] loop4: detected capacity change from 0 to 8192 [ 92.193414][ T4782] loop3: detected capacity change from 0 to 2048 [ 92.245527][ T1324] usb 2-1: USB disconnect, device number 3 [ 92.286878][ T4782] EXT4-fs (loop3): Ignoring removed orlov option [ 92.318712][ T4772] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 92.353525][ T4772] REISERFS (device loop4): using ordered data mode [ 92.360229][ T4772] reiserfs: using flush barriers [ 92.367781][ T4772] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.374934][ T4782] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,bsddf,orlov,,errors=continue. Quota mode: none. [ 92.397578][ T4782] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.435270][ T4772] REISERFS (device loop4): checking transaction log (loop4) [ 92.471774][ T4769] loop2: detected capacity change from 0 to 32768 [ 92.527447][ T4791] loop3: detected capacity change from 0 to 128 [ 92.620189][ T4791] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.647095][ T4772] REISERFS (device loop4): Using tea hash to sort names [ 92.669504][ T4769] XFS (loop2): Mounting V5 Filesystem [ 92.677812][ T4772] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 92.688450][ T4791] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.720938][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.838506][ T4769] XFS (loop2): Ending clean mount [ 92.847483][ T4769] XFS (loop2): Quotacheck needed: Please wait. [ 92.908638][ T4769] XFS (loop2): Quotacheck: Done. [ 93.013461][ T4804] sctp: [Deprecated]: syz.1.197 (pid 4804) Use of int in max_burst socket option deprecated. [ 93.013461][ T4804] Use struct sctp_assoc_value instead [ 93.143274][ T4185] XFS (loop2): Unmounting Filesystem [ 93.553285][ T4822] loop4: detected capacity change from 0 to 1024 [ 93.589761][ T4822] EXT4-fs (loop4): Ignoring removed orlov option [ 93.672089][ T4822] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 94.219249][ T4839] input: syz1 as /devices/virtual/input/input7 [ 94.237230][ T4843] loop2: detected capacity change from 0 to 256 [ 94.512747][ T4850] loop1: detected capacity change from 0 to 256 [ 94.549703][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 94.624667][ T4856] loop2: detected capacity change from 0 to 512 [ 94.679978][ T4824] loop3: detected capacity change from 0 to 32768 [ 94.702525][ T4856] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.787427][ T4858] loop1: detected capacity change from 0 to 256 [ 94.790315][ T4856] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 94.834853][ T4858] exfat: Unknown parameter 'dmaqk' [ 94.854813][ T4824] XFS (loop3): Mounting V5 Filesystem [ 94.871385][ T4229] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.146295][ T4824] XFS (loop3): Ending clean mount [ 95.233472][ T4824] XFS (loop3): Quotacheck needed: Please wait. [ 95.241111][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.263022][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.300953][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.319481][ T4873] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 95.345843][ T4873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 95.348228][ T4229] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.370492][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.388877][ T4229] usb 1-1: config 0 descriptor?? [ 95.436388][ T4824] XFS (loop3): Quotacheck: Done. [ 95.533775][ T4186] XFS (loop3): Unmounting Filesystem [ 95.557580][ T4875] loop1: detected capacity change from 0 to 1024 [ 95.584915][ T4877] loop2: detected capacity change from 0 to 512 [ 95.678019][ T4877] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 95.720523][ T4875] hfsplus: extend alloc file! (16384,256,150995124) [ 95.728988][ T4877] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 95.760945][ T4877] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 95.813482][ T4877] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 95.844854][ T4877] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 95.863016][ T4877] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.874288][ T4229] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 95.894195][ T4877] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.222: bg 0: block 34: padding at end of block bitmap is not set [ 95.920897][ T4229] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 96.025756][ T4883] loop1: detected capacity change from 0 to 128 [ 96.056400][ T4883] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 96.066675][ T4877] Quota error (device loop2): write_blk: dquota write failed [ 96.095962][ T4877] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 96.112288][ T4883] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.128669][ T4877] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.222: Failed to acquire dquot type 1 [ 96.143119][ T4229] usb 1-1: USB disconnect, device number 4 [ 96.189201][ T4877] EXT4-fs (loop2): 1 truncate cleaned up [ 96.207806][ T4877] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,bsdgroups,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback. [ 96.255727][ T4884] fido_id[4884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 96.731610][ T4613] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.898058][ T4911] loop4: detected capacity change from 0 to 256 [ 96.981067][ T4229] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.133527][ T4898] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 97.142047][ T4898] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.142190][ T4613] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.175221][ T4898] F2FS-fs (loop1): invalid crc value [ 97.223548][ T4898] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.241306][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 97.261395][ T4613] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 97.280528][ T4613] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 97.295227][ T4613] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 97.324940][ T4613] usb 3-1: config 129 has no interface number 0 [ 97.338336][ T4613] usb 3-1: config 129 has no interface number 1 [ 97.357071][ T4613] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 97.390636][ T4613] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 97.402668][ T4898] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 97.409750][ T4898] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 97.438165][ T4613] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 97.471419][ T4613] usb 3-1: config 129 interface 135 has no altsetting 0 [ 97.485499][ T4613] usb 3-1: config 129 interface 5 has no altsetting 0 [ 97.514860][ T4190] attempt to access beyond end of device [ 97.514860][ T4190] loop1: rw=2049, want=45104, limit=40427 [ 97.553525][ T4229] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 97.571254][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.589840][ T4229] usb 1-1: Product: syz [ 97.606730][ T4229] usb 1-1: Manufacturer: syz [ 97.612960][ T4229] usb 1-1: SerialNumber: syz [ 97.627224][ T4229] usb 1-1: config 0 descriptor?? [ 97.731378][ T4613] usb 3-1: string descriptor 0 read error: -22 [ 97.744806][ T4613] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 97.775247][ T4613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.854494][ T4613] usb 3-1: MIDIStreaming interface descriptor not found [ 98.106087][ T4927] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 98.112015][ T4229] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 98.128657][ T1324] usb 3-1: USB disconnect, device number 4 [ 98.156526][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.211431][ T4229] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 98.230275][ T4229] usb 1-1: media controller created [ 98.264209][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.654573][ T4937] set_capacity_and_notify: 2 callbacks suppressed [ 98.654589][ T4937] loop4: detected capacity change from 0 to 512 [ 98.761836][ T4937] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.247: bad orphan inode 15 [ 98.779268][ T4937] ext4_test_bit(bit=14, block=5) = 0 [ 98.797747][ T4937] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 98.852050][ T4229] zl10353_read_register: readreg error (reg=127, ret==0) [ 98.870652][ T4229] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 98.885780][ T4229] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 98.906149][ T4229] usb 1-1: USB disconnect, device number 5 [ 98.993507][ T4229] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 99.014827][ T4937] EXT4-fs error (device loop4): __ext4_new_inode:1082: comm syz.4.247: reserved inode found cleared - inode=1 [ 99.064514][ T4953] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 99.163411][ T4959] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.207511][ T4961] loop2: detected capacity change from 0 to 64 [ 99.548310][ T4977] device syzkaller1 entered promiscuous mode [ 99.632443][ T4983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 99.706648][ T4987] loop1: detected capacity change from 0 to 512 [ 99.790650][ T4993] loop2: detected capacity change from 0 to 512 [ 99.798643][ T4987] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.905315][ T4993] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.943356][ T4993] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.014024][ T4995] loop3: detected capacity change from 0 to 4096 [ 100.028995][ T4993] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.271: Invalid block bitmap block 0 in block_group 0 [ 100.052992][ T4993] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 100.070507][ T4993] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.271: attempt to clear invalid blocks 983261 len 1 [ 100.100976][ T4993] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.271: Invalid inode table block 0 in block_group 0 [ 100.139874][ T4993] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 100.167615][ T4995] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 100.191614][ T4993] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 100.235493][ T4993] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.271: Invalid inode table block 0 in block_group 0 [ 100.315816][ T144] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 100.335007][ T4993] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 100.349760][ T4186] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 100.383333][ T4993] EXT4-fs error (device loop2): ext4_truncate:4286: inode #11: comm syz.2.271: mark_inode_dirty error [ 100.410601][ T4186] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 100.437060][ T5015] loop4: detected capacity change from 0 to 2048 [ 100.451994][ T4186] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 100.478879][ T4225] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 100.497587][ T4993] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 100.516507][ T4186] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 100.547781][ T5015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.567701][ T4993] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.271: Invalid inode table block 0 in block_group 0 [ 100.660508][ T4993] EXT4-fs (loop2): 1 truncate cleaned up [ 100.691850][ T4993] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 100.783096][ T5025] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 101.541084][ T5056] device batadv_slave_1 entered promiscuous mode [ 101.583450][ T5056] device batadv_slave_1 left promiscuous mode [ 101.726688][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.826166][ T5064] loop0: detected capacity change from 0 to 8192 [ 101.888984][ T5047] loop2: detected capacity change from 0 to 32768 [ 101.902294][ T5064] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 101.917118][ T5064] REISERFS (device loop0): using ordered data mode [ 101.921068][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.924376][ T5064] reiserfs: using flush barriers [ 101.939111][ T5064] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.956138][ T5064] REISERFS (device loop0): checking transaction log (loop0) [ 101.969525][ T5064] REISERFS (device loop0): Using r5 hash to sort names [ 101.979344][ T5064] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 102.065520][ T5047] XFS (loop2): Mounting V5 Filesystem [ 102.105675][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 102.139292][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 102.164170][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 102.179176][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 57908, setting to 1024 [ 102.204642][ T5047] XFS (loop2): Ending clean mount [ 102.245108][ T5047] XFS (loop2): User initiated shutdown received. [ 102.253130][ T5047] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 102.268204][ T5047] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 102.338313][ T4185] XFS (loop2): Unmounting Filesystem [ 102.350574][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.352538][ T21] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 102.380174][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.407031][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.430043][ T21] usb 5-1: Product: syz [ 102.445121][ T21] usb 5-1: Manufacturer: syz [ 102.449893][ T21] usb 5-1: SerialNumber: syz [ 102.458638][ T21] usb 5-1: config 0 descriptor?? [ 102.545478][ T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.557973][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.567077][ T7] usb 4-1: SerialNumber: syz [ 102.733188][ T21] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 102.795758][ T5088] loop1: detected capacity change from 0 to 256 [ 102.874299][ T7] usb 4-1: 0:2 : does not exist [ 102.884707][ T5090] loop0: detected capacity change from 0 to 1024 [ 102.927313][ T7] usb 4-1: USB disconnect, device number 3 [ 102.967910][ T5090] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 102.975854][ T4613] usb 5-1: USB disconnect, device number 3 [ 102.991890][ T5090] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.045227][ T5090] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc=0x0000000000000007,noblock_validity,delalloc,quota,errors=remount-ro,nomblk_io_submit,dioread_nolock,mb_optimize_scan=0x0000000000000000,. Quota mode: writeback. [ 103.046949][ T5095] device syzkaller1 entered promiscuous mode [ 103.079095][ T5090] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.110905][ T26] audit: type=1804 audit(1783553317.367:3): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.311" name="/newroot/61/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 103.114023][ T5090] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.311: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.152765][ T5090] EXT4-fs (loop0): Remounting filesystem read-only [ 103.292442][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.011798][ T5136] sctp: [Deprecated]: syz.3.326 (pid 5136) Use of int in max_burst socket option deprecated. [ 104.011798][ T5136] Use struct sctp_assoc_value instead [ 104.141122][ T4616] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.380939][ T4616] usb 5-1: Using ep0 maxpacket: 8 [ 104.473091][ T5152] set_capacity_and_notify: 1 callbacks suppressed [ 104.473106][ T5152] loop1: detected capacity change from 0 to 4096 [ 104.501177][ T4616] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 104.510611][ T4616] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.532210][ T4616] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.556534][ T4616] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.587647][ T4616] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.644842][ T5162] sctp: [Deprecated]: syz.2.336 (pid 5162) Use of int in max_burst socket option deprecated. [ 104.644842][ T5162] Use struct sctp_assoc_value instead [ 104.654519][ T4616] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.714394][ T4616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.738495][ T5166] loop3: detected capacity change from 0 to 256 [ 104.785865][ T5152] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 104.828000][ T5166] exfat: Deprecated parameter 'utf8' [ 104.835295][ T5166] exfat: Deprecated parameter 'utf8' [ 104.884131][ T5166] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 104.984340][ T9] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 105.011026][ T4616] usb 5-1: usb_control_msg returned -32 [ 105.016761][ T4616] usbtmc 5-1:16.0: can't read capabilities [ 105.023516][ T4190] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 105.030040][ T4190] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 105.052136][ T4190] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 105.079265][ T4225] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 105.119401][ T4190] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 105.490228][ T5193] loop1: detected capacity change from 0 to 512 [ 105.582668][ T4229] usb 5-1: USB disconnect, device number 4 [ 105.634795][ T5193] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.350: corrupted in-inode xattr [ 105.698078][ T5193] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.350: couldn't read orphan inode 15 (err -117) [ 105.830294][ T5193] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.209106][ T1419] block nbd2: Attempted send on invalid socket [ 106.216585][ T1419] blk_update_request: I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.278216][ T5222] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 106.288554][ T5219] loop1: detected capacity change from 0 to 4096 [ 106.305571][ T5219] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 106.427939][ T5225] devtmpfs: Too few inodes for current use [ 106.606996][ T5191] loop3: detected capacity change from 0 to 32768 [ 106.886509][ T5191] XFS (loop3): Mounting V5 Filesystem [ 106.975942][ T5249] loop4: detected capacity change from 0 to 1764 [ 107.046127][ T5249] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 107.143620][ T5191] XFS (loop3): Ending clean mount [ 107.158622][ T1324] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 [ 107.194364][ T1324] XFS (loop3): Unmount and run xfs_repair [ 107.221064][ T1324] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 107.270434][ T1324] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 107.299066][ T1324] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 107.318958][ T1324] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 107.342181][ T1324] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 107.381117][ T1324] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 107.410445][ T1324] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 107.435612][ T1324] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 107.486608][ T1324] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 107.496274][ T5191] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74 [ 107.536727][ T5191] XFS (loop3): Failed to initialize disk quotas. [ 107.680552][ T4186] XFS (loop3): Unmounting Filesystem [ 107.837025][ T5244] loop1: detected capacity change from 0 to 32768 [ 107.976177][ T5244] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.361 (5244) [ 108.013864][ T5257] loop2: detected capacity change from 0 to 32768 [ 108.047414][ T5244] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 108.089668][ T5244] BTRFS info (device loop1): using free space tree [ 108.201203][ T5244] BTRFS info (device loop1): has skinny extents [ 108.210497][ T5205] loop0: detected capacity change from 0 to 32768 [ 108.267898][ T5257] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 108.485287][ T5244] BTRFS info (device loop1): enabling ssd optimizations [ 108.639215][ T5257] (syz.2.364,5257,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 108.746890][ T5257] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256 [ 108.829493][ T5257] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 108.887873][ T5257] OCFS2: File system is now read-only. [ 108.935632][ T5257] (syz.2.364,5257,0):ocfs2_test_suballoc_bit:2814 ERROR: read group 64 failed -30 [ 109.019435][ T5257] (syz.2.364,5257,0):ocfs2_test_suballoc_bit:2825 ERROR: status = -30 [ 109.057011][ T5257] (syz.2.364,5257,0):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -30 [ 109.076955][ T5257] (syz.2.364,5257,0):ocfs2_test_inode_bit:2896 ERROR: status = -30 [ 109.120683][ T5257] (syz.2.364,5257,0):ocfs2_get_parent:166 ERROR: test inode bit failed -30 [ 109.380942][ T4613] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.399406][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 109.457412][ T5319] loop1: detected capacity change from 0 to 8 [ 109.543758][ T5319] SQUASHFS error: lzo decompression failed, data probably corrupt [ 109.591367][ T5319] SQUASHFS error: Failed to read block 0x144: -5 [ 109.597790][ T5319] SQUASHFS error: Unable to read metadata cache entry [142] [ 109.651173][ T5319] SQUASHFS error: Unable to read inode 0x11f [ 109.678408][ T5283] loop3: detected capacity change from 0 to 32768 [ 109.750725][ T4613] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 109.781640][ T4613] usb 5-1: config 0 interface 0 has no altsetting 0 [ 109.807276][ T5283] XFS (loop3): Mounting V5 Filesystem [ 109.941763][ T4613] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 109.975394][ T4613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.060959][ T4613] usb 5-1: Product: syz [ 110.065360][ T4613] usb 5-1: Manufacturer: syz [ 110.070251][ T4613] usb 5-1: SerialNumber: syz [ 110.080997][ T5329] syz.2.374 (5329) used greatest stack depth: 20736 bytes left [ 110.129406][ T4613] usb 5-1: config 0 descriptor?? [ 110.138721][ T5283] XFS (loop3): Ending clean mount [ 110.155161][ T5283] XFS (loop3): Quotacheck needed: Please wait. [ 110.182454][ T4613] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 110.190115][ T4613] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 110.259579][ T4613] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 110.300978][ T4613] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 110.336536][ T4613] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 110.344403][ T4613] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 110.368066][ T4613] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 110.396181][ T4613] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 110.412926][ T5337] loop2: detected capacity change from 0 to 64 [ 110.435142][ T5333] loop0: detected capacity change from 0 to 4096 [ 110.445274][ T4613] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 110.474467][ T4613] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 110.491049][ T4613] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 110.499603][ T5319] loop1: detected capacity change from 0 to 40427 [ 110.521469][ T4613] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 110.540130][ T4613] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 110.559156][ T4613] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 110.576641][ T5319] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 110.590541][ T5319] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 110.604607][ T4613] usb 5-1: USB disconnect, device number 5 [ 110.612740][ T5319] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1ffff [ 110.629715][ T4613] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 110.639881][ T5319] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 110.690645][ T4613] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 110.701825][ T4185] hfs: node 4:3 still has 1 user(s)! [ 110.725111][ T5319] F2FS-fs (loop1): invalid crc value [ 110.795678][ T5319] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.811412][ T4613] keyspan 5-1:0.0: device disconnected [ 110.849004][ T5342] loop2: detected capacity change from 0 to 1024 [ 110.874686][ T5343] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.876043][ T5283] XFS (loop3): Quotacheck: Done. [ 111.057908][ T4186] XFS (loop3): Unmounting Filesystem [ 111.111910][ T5319] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 111.119048][ T5319] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.222925][ T5319] F2FS-fs (loop1): switch discard_unit option is not allowed [ 111.279502][ T4190] attempt to access beyond end of device [ 111.279502][ T4190] loop1: rw=2049, want=45104, limit=40427 [ 111.430995][ T4613] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.791340][ T4613] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 111.825763][ T5353] loop2: detected capacity change from 0 to 4096 [ 111.835358][ T4613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.883992][ T5357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.387'. [ 111.901143][ T4613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.921618][ T4613] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 112.041214][ T4613] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 112.059341][ T4613] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 112.095520][ T4613] usb 5-1: Manufacturer: syz [ 112.130359][ T4613] usb 5-1: config 0 descriptor?? [ 112.183654][ T5353] EXT4-fs (loop2): Test dummy encryption mode enabled [ 112.197160][ T5353] EXT4-fs (loop2): Ignoring removed orlov option [ 112.233736][ T5353] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 112.381671][ T5353] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 112.633103][ T4613] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 112.664357][ T4613] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 112.704019][ T4613] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 112.934834][ T4227] usb 5-1: USB disconnect, device number 6 [ 113.013329][ T5399] fido_id[5399]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 113.354690][ T5414] loop1: detected capacity change from 0 to 512 [ 113.361190][ T4616] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.417459][ T5364] loop0: detected capacity change from 0 to 32768 [ 113.449748][ T5414] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,stripe=0x000000000000f7b2,grpquota,. Quota mode: writeback. [ 113.497659][ T5364] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.385 (5364) [ 113.532670][ T5414] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.569716][ T5414] EXT4-fs (loop1): shut down requested (2) [ 113.600938][ T4616] usb 4-1: Using ep0 maxpacket: 32 [ 113.638794][ T5364] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 113.660430][ T5364] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 113.705250][ T5364] BTRFS info (device loop0): trying to use backup root at mount time [ 113.731453][ T4616] usb 4-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 113.756425][ T4616] usb 4-1: config 10 has 0 interfaces, different from the descriptor's value: 1 [ 113.788474][ T5364] BTRFS info (device loop0): setting nodatasum [ 113.837143][ T5364] BTRFS info (device loop0): enabling ssd optimizations [ 113.877980][ T5364] BTRFS info (device loop0): using spread ssd allocation scheme [ 113.906163][ T5364] BTRFS info (device loop0): turning on flush-on-commit [ 113.933417][ T5364] BTRFS info (device loop0): force zlib compression, level 3 [ 113.962564][ T5364] BTRFS info (device loop0): using free space tree [ 113.969148][ T5364] BTRFS info (device loop0): has skinny extents [ 113.975883][ T4616] usb 4-1: New USB device found, idVendor=0b57, idProduct=89b6, bcdDevice=c8.fb [ 113.989880][ T4616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.000066][ T4616] usb 4-1: Product: syz [ 114.009094][ T4616] usb 4-1: Manufacturer: syz [ 114.015184][ T4616] usb 4-1: SerialNumber: syz [ 114.390739][ T26] audit: type=1800 audit(1783553328.647:4): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.385" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 114.419590][ T26] audit: type=1800 audit(1783553328.677:5): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.385" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 114.657278][ T4616] usb 4-1: USB disconnect, device number 4 [ 114.859955][ T5458] process 'syz.4.411' launched '' with NULL argv: empty string added [ 115.082496][ T5465] loop2: detected capacity change from 0 to 256 [ 115.102230][ T5465] exfat: Deprecated parameter 'utf8' [ 115.107948][ T5465] exfat: Deprecated parameter 'utf8' [ 115.156446][ T5465] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 115.364760][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 115.402385][ T5478] IPVS: Error joining to the multicast group [ 115.469644][ T5482] loop1: detected capacity change from 0 to 256 [ 115.736760][ T5492] netlink: 204 bytes leftover after parsing attributes in process `syz.0.422'. [ 115.854385][ T5497] loop2: detected capacity change from 0 to 128 [ 115.900106][ T5502] Invalid argument reading file caps for ./file0 [ 115.973367][ T4197] Bluetooth: hci4: link tx timeout [ 115.978924][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.989532][ T4197] Bluetooth: hci4: link tx timeout [ 115.995411][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.003656][ T4197] Bluetooth: hci4: link tx timeout [ 116.009190][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.019619][ T4197] Bluetooth: hci4: link tx timeout [ 116.024839][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.034271][ T4197] Bluetooth: hci4: link tx timeout [ 116.039441][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.047297][ T4197] Bluetooth: hci4: link tx timeout [ 116.052727][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.060446][ T4197] Bluetooth: hci4: link tx timeout [ 116.067438][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.255942][ T5509] input: syz0 as /devices/virtual/input/input8 [ 116.332776][ T5515] netlink: 168 bytes leftover after parsing attributes in process `syz.1.433'. [ 116.388558][ T5515] netlink: 128 bytes leftover after parsing attributes in process `syz.1.433'. [ 116.437171][ T5515] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 116.481426][ T5525] loop4: detected capacity change from 0 to 1024 [ 116.509315][ T5522] device batadv_slave_1 entered promiscuous mode [ 116.530713][ T5529] device batadv_slave_1 left promiscuous mode [ 116.560465][ T5528] device batadv_slave_1 entered promiscuous mode [ 116.591107][ T5525] EXT4-fs (loop4): Ignoring removed oldalloc option [ 116.609686][ T5525] EXT4-fs (loop4): Ignoring removed oldalloc option [ 116.619741][ T5519] device batadv_slave_1 left promiscuous mode [ 116.624907][ T5525] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.782260][ T5525] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,nodioread_nolock,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 116.934588][ T5548] loop2: detected capacity change from 0 to 128 [ 117.084279][ T5469] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.265618][ T5553] loop3: detected capacity change from 0 to 1024 [ 117.461090][ T5469] usb 1-1: config 127 has an invalid interface number: 138 but max is 0 [ 117.469524][ T5469] usb 1-1: config 127 has no interface number 0 [ 117.482311][ T5469] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 117.496488][ T5469] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 117.652520][ T5546] loop1: detected capacity change from 0 to 131072 [ 117.661227][ T5469] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 117.679851][ T5469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.700010][ T5548] EXT4-fs (loop2): Ignoring removed nobh option [ 117.746051][ T5469] usb 1-1: Product: syz [ 117.760687][ T5469] usb 1-1: Manufacturer: syz [ 117.766394][ T5548] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 117.828592][ T5548] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.850601][ T5469] usb 1-1: SerialNumber: syz [ 117.858887][ T5562] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.916343][ T5546] XFS (loop1): Mounting V5 Filesystem [ 117.932688][ T5548] fscrypt (loop2, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 117.942781][ T5542] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.035872][ T5542] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.044940][ T4232] Bluetooth: hci4: command 0x0406 tx timeout [ 118.171327][ T5575] loop3: detected capacity change from 0 to 64 [ 118.298829][ T5579] loop2: detected capacity change from 0 to 512 [ 118.301708][ T5546] XFS (loop1): Starting recovery (logdev: internal) [ 118.356260][ T5546] XFS (loop1): Ending recovery (logdev: internal) [ 118.363027][ T5579] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.394512][ T5579] EXT4-fs (loop2): 1 truncate cleaned up [ 118.400360][ T5579] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 118.432049][ T5469] usb 1-1: probing VID:PID(0424:012C) [ 118.455190][ T5469] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0F [ 118.461847][ T5469] usb 1-1: vub300 testing BULK OUT EndPoint(1) 09 [ 118.469094][ T5469] usb 1-1: vub300 testing BULK OUT EndPoint(2) 0C [ 118.476367][ T5469] usb 1-1: ignoring unexpected bulk_out endpoint [ 118.483346][ T5469] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 118.495033][ T5469] vub300: probe of 1-1:127.138 failed with error -22 [ 118.505399][ T5469] usb 1-1: USB disconnect, device number 6 [ 118.520661][ T4190] XFS (loop1): Unmounting Filesystem [ 118.569445][ T4186] hfs: node 4:3 still has 1 user(s)! [ 119.420962][ T5469] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.587315][ T5598] loop0: detected capacity change from 0 to 32768 [ 119.671069][ T5469] usb 4-1: Using ep0 maxpacket: 8 [ 119.699881][ T5598] ERROR: (device loop0): dtSearch: stack overrun! [ 119.699881][ T5598] [ 119.709850][ T5601] XFS (loop2): Mounting V5 Filesystem [ 119.718735][ T5598] ERROR: (device loop0): remounting filesystem as read-only [ 119.741631][ T5597] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 119.743899][ T5598] btstack dump: [ 119.771416][ T5598] bn = 0, index = 4 [ 119.775287][ T5598] bn = 0, index = 4 [ 119.779121][ T5598] bn = 0, index = 4 [ 119.784300][ T5598] bn = 0, index = 4 [ 119.788496][ T5598] bn = 0, index = 4 [ 119.792004][ T5469] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.806876][ T5598] bn = 0, index = 4 [ 119.810730][ T5598] bn = 0, index = 4 [ 119.814943][ T5598] bn = 0, index = 0 [ 119.821811][ T5598] jfs_lookup: dtSearch returned -5 [ 119.828015][ T5598] ERROR: (device loop0): dtSearch: stack overrun! [ 119.828015][ T5598] [ 119.838341][ T5598] btstack dump: [ 119.842084][ T5598] bn = 0, index = 4 [ 119.845926][ T5598] bn = 0, index = 4 [ 119.849778][ T5598] bn = 0, index = 4 [ 119.851939][ T5469] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.854982][ T5598] bn = 0, index = 4 [ 119.867480][ T5598] bn = 0, index = 4 [ 119.885768][ T5614] (syz.4.460,5614,0):ocfs2_double_lock:1188 ERROR: status = -2 [ 119.900927][ T5469] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.904988][ T5598] bn = 0, index = 4 [ 119.920023][ T5469] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.947668][ T5614] (syz.4.460,5614,1):ocfs2_rename:1297 ERROR: status = -2 [ 119.963592][ T5598] bn = 0, index = 4 [ 119.967508][ T5598] bn = 0, index = 0 [ 119.971308][ T5614] (syz.4.460,5614,1):ocfs2_rename:1687 ERROR: status = -2 [ 119.978360][ T5469] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.999544][ T5469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.022886][ T5598] jfs_lookup: dtSearch returned -5 [ 120.046598][ T5601] XFS (loop2): Ending clean mount [ 120.069234][ T5601] XFS (loop2): Quotacheck needed: Please wait. [ 120.088796][ T5598] ERROR: (device loop0): dtReadFirst: btstack overrun [ 120.088796][ T5598] [ 120.109471][ T5616] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.135697][ T5598] btstack dump: [ 120.139384][ T5598] bn = 0, index = 0 [ 120.166104][ T5598] bn = 0, index = 0 [ 120.169982][ T5598] bn = 0, index = 0 [ 120.188988][ T4198] ocfs2: Unmounting device (7,4) on (node local) [ 120.211078][ T5598] bn = 0, index = 0 [ 120.230036][ T5601] XFS (loop2): Quotacheck: Done. [ 120.267773][ T26] audit: type=1800 audit(1783553334.527:6): pid=5601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.461" name="bus" dev="loop2" ino=9291 res=0 errno=0 [ 120.280995][ T5598] bn = 0, index = 0 [ 120.320408][ T5598] bn = 0, index = 0 [ 120.324724][ T5469] usb 4-1: GET_CAPABILITIES returned 0 [ 120.330402][ T5598] bn = 0, index = 0 [ 120.334856][ T5598] bn = 0, index = 0 [ 120.338700][ T5598] jfs_readdir: unexpected rc = -5 from dtReadNext [ 120.345401][ T5469] usbtmc 4-1:16.0: can't read capabilities [ 120.468718][ T4185] XFS (loop2): Unmounting Filesystem [ 120.555519][ T5620] set_capacity_and_notify: 3 callbacks suppressed [ 120.555535][ T5620] loop1: detected capacity change from 0 to 4096 [ 120.620953][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 120.632436][ T5463] usb 4-1: USB disconnect, device number 5 [ 120.718662][ T5622] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.841793][ T5620] NILFS (loop1): error -2 reading inode: ino=835371204608 [ 120.869315][ T5624] loop0: detected capacity change from 0 to 512 [ 121.063488][ T5624] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.080460][ T5624] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.243238][ T5624] fs-verity (loop0, inode 15): Unrecognized descriptor size: 0 bytes [ 121.504835][ T4187] VFS: Lookup of '' in ext4 loop0 would have caused loop [ 121.528653][ T4187] VFS: Lookup of '' in ext4 loop0 would have caused loop [ 121.844898][ T5626] loop2: detected capacity change from 0 to 131072 [ 121.950663][ T5626] F2FS-fs (loop2): invalid crc value [ 122.022871][ T5626] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.078156][ T5626] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 122.262483][ T4225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.397803][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 122.497213][ T4225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.569738][ T5632] loop4: detected capacity change from 0 to 32768 [ 122.658186][ T4225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.810027][ T5632] XFS (loop4): Mounting V5 Filesystem [ 122.945810][ T4225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.039014][ T5634] loop1: detected capacity change from 0 to 32768 [ 123.184778][ T5632] XFS (loop4): Ending clean mount [ 123.200670][ T5632] XFS (loop4): Quotacheck needed: Please wait. [ 123.270143][ T5634] XFS (loop1): Mounting V5 Filesystem [ 123.340584][ T5634] XFS (loop1): Ending clean mount [ 123.349194][ T5632] XFS (loop4): Quotacheck: Done. [ 123.392052][ T5651] chnl_net:caif_netlink_parms(): no params data found [ 123.594178][ T4190] XFS (loop1): Unmounting Filesystem [ 123.671458][ T4198] XFS (loop4): Unmounting Filesystem [ 124.144513][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.167063][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.206804][ T5651] device bridge_slave_0 entered promiscuous mode [ 124.296403][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.314513][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.348731][ T5651] device bridge_slave_1 entered promiscuous mode [ 124.506191][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.607133][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.784060][ T5651] team0: Port device team_slave_0 added [ 124.833693][ T5470] Bluetooth: hci3: command 0x0409 tx timeout [ 124.887611][ T5651] team0: Port device team_slave_1 added [ 124.953338][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.999482][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.071318][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.176247][ T5730] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000000400000000000000000000004 [ 125.207865][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.229938][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.257008][ T4227] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.298309][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.360631][ T5738] loop1: detected capacity change from 0 to 2048 [ 125.462318][ T5738] EXT4-fs (loop1): Ignoring removed orlov option [ 125.475284][ T5651] device hsr_slave_0 entered promiscuous mode [ 125.500608][ T5651] device hsr_slave_1 entered promiscuous mode [ 125.507546][ T4284] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 125.522182][ T5651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.554021][ T4227] usb 3-1: Using ep0 maxpacket: 8 [ 125.575718][ T5651] Cannot create hsr debugfs directory [ 125.598821][ T5738] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,bsddf,orlov,,errors=continue. Quota mode: none. [ 125.623080][ T5738] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.701235][ T4227] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.722715][ T4227] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.765213][ T4227] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.791106][ T4284] usb 5-1: Using ep0 maxpacket: 32 [ 125.805998][ T4227] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.820513][ T4227] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.881789][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.926132][ T4284] usb 5-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 125.947287][ T4284] usb 5-1: config 10 has 0 interfaces, different from the descriptor's value: 1 [ 126.008140][ T4225] device hsr_slave_0 left promiscuous mode [ 126.019348][ T4225] device hsr_slave_1 left promiscuous mode [ 126.036559][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.047175][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.074885][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.085838][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.103227][ T4225] device bridge_slave_1 left promiscuous mode [ 126.111923][ T4225] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.159660][ T4225] device bridge_slave_0 left promiscuous mode [ 126.178441][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.186420][ T4227] usb 3-1: GET_CAPABILITIES returned 0 [ 126.192686][ T4284] usb 5-1: New USB device found, idVendor=0b57, idProduct=89b6, bcdDevice=c8.fb [ 126.210926][ T4227] usbtmc 3-1:16.0: can't read capabilities [ 126.217781][ T4284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.228562][ T4284] usb 5-1: Product: syz [ 126.232877][ T4284] usb 5-1: Manufacturer: syz [ 126.237539][ T4284] usb 5-1: SerialNumber: syz [ 126.293070][ T4225] device veth1_macvtap left promiscuous mode [ 126.299938][ T4225] device veth0_macvtap left promiscuous mode [ 126.306197][ T4225] device veth1_vlan left promiscuous mode [ 126.321375][ T4225] device veth0_vlan left promiscuous mode [ 126.423765][ T4227] usb 3-1: USB disconnect, device number 5 [ 126.649877][ T5761] loop3: detected capacity change from 0 to 32768 [ 126.739726][ T5761] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 126.779692][ T5761] (syz.3.502,5761,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 126.809249][ T5761] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256 [ 126.835065][ T4225] team0 (unregistering): Port device team_slave_1 removed [ 126.852526][ T4227] usb 5-1: USB disconnect, device number 7 [ 126.859582][ T5761] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 126.871735][ T5761] OCFS2: File system is now read-only. [ 126.877280][ T5761] (syz.3.502,5761,0):ocfs2_test_suballoc_bit:2814 ERROR: read group 64 failed -30 [ 126.886629][ T5761] (syz.3.502,5761,0):ocfs2_test_suballoc_bit:2825 ERROR: status = -30 [ 126.894846][ T5761] (syz.3.502,5761,0):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -30 [ 126.904242][ T5761] (syz.3.502,5761,0):ocfs2_test_inode_bit:2896 ERROR: status = -30 [ 126.912258][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 126.918364][ T5761] (syz.3.502,5761,0):ocfs2_get_parent:166 ERROR: test inode bit failed -30 [ 126.969277][ T4225] team0 (unregistering): Port device team_slave_0 removed [ 127.012126][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 127.023678][ T5766] loop2: detected capacity change from 0 to 128 [ 127.066525][ T4225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.091211][ T4225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.101771][ T5766] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.166885][ T5766] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.215369][ T4225] bond0 (unregistering): Released all slaves [ 127.391849][ T5651] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.436280][ T5651] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.483415][ T5651] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.526873][ T5651] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.950087][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.002652][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.028135][ T5785] loop4: detected capacity change from 0 to 4096 [ 128.046383][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.070042][ T5651] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.223171][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.245029][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.250065][ T5792] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.295425][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.302653][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.329738][ T5785] NILFS (loop4): error -2 reading inode: ino=835371204608 [ 128.370799][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.400096][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.436022][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.443257][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.486432][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.519112][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.543136][ T5771] loop3: detected capacity change from 0 to 32768 [ 128.553898][ T5797] xt_hashlimit: size too large, truncated to 1048576 [ 128.606502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.651749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.676397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.685403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.696235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.713663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.722440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.731547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.740367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.750615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.845327][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.900792][ T5771] XFS (loop3): Mounting V5 Filesystem [ 129.051526][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 129.108724][ T5771] XFS (loop3): Ending clean mount [ 129.126504][ T5771] XFS (loop3): Quotacheck needed: Please wait. [ 129.182361][ T5818] loop2: detected capacity change from 0 to 256 [ 129.386865][ T5771] XFS (loop3): Quotacheck: Done. [ 129.441560][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.449118][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.478311][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.503533][ T5822] loop2: detected capacity change from 0 to 1024 [ 129.558968][ T5822] EXT4-fs (loop2): Ignoring removed orlov option [ 129.665794][ T4186] XFS (loop3): Unmounting Filesystem [ 129.672335][ T5822] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 129.901009][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 130.171249][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 130.192359][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 130.247289][ T5848] loop2: detected capacity change from 0 to 256 [ 130.270291][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.301342][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.316401][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.331136][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.349515][ T5848] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 130.380907][ T13] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 130.390054][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.400663][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.419791][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.442643][ T26] audit: type=1800 audit(1783553344.707:7): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.518" name="file1" dev="loop2" ino=1048627 res=0 errno=0 [ 130.482668][ T13] usb 5-1: config 0 descriptor?? [ 130.490524][ T5651] device veth0_vlan entered promiscuous mode [ 130.503331][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.524516][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.564969][ T5651] device veth1_vlan entered promiscuous mode [ 130.585890][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.644438][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.700457][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.742236][ T5651] device veth0_macvtap entered promiscuous mode [ 130.869081][ T5651] device veth1_macvtap entered promiscuous mode [ 130.954415][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.995752][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.026429][ T13] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 131.040955][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.080350][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.094885][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 131.120959][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.138696][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.158872][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.180089][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.222117][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.265376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.294941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.324009][ T5470] usb 5-1: USB disconnect, device number 8 [ 131.330745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.379593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.423990][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.480965][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.512667][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.547652][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.590333][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.634825][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.670952][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.706474][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.752324][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.759895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.789800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.836007][ T5651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.880761][ T5651] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.915336][ T5651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.951226][ T5651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.181242][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.189642][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.293514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.312686][ T5662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.331051][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.366550][ T5662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.408093][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.475194][ T5876] loop4: detected capacity change from 0 to 4096 [ 132.591160][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 132.642025][ T5885] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.755722][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762114][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.803412][ T13] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 132.821409][ T13] usb 3-1: config 0 has no interface number 0 [ 132.852025][ T13] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 133.091126][ T13] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 133.100231][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.174326][ T13] usb 3-1: Product: syz [ 133.178572][ T13] usb 3-1: Manufacturer: syz [ 133.219932][ T13] usb 3-1: SerialNumber: syz [ 133.262967][ T13] usb 3-1: config 0 descriptor?? [ 133.287138][ T5871] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.582176][ T5871] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.613286][ T5910] loop4: detected capacity change from 0 to 2048 [ 133.759495][ T5910] loop4: p1 p3 p4 [ 133.759495][ T5910] p1: [ 133.869038][ T5910] loop4: p4 size 589824 extends beyond EOD, truncated [ 134.343180][ T4924] udevd[4924]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 134.348935][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 134.365646][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 134.370733][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 134.471435][ T13] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 134.681892][ T13] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 134.710089][ T13] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 134.778539][ T13] asix: probe of 3-1:0.188 failed with error -71 [ 134.844541][ T13] usb 3-1: USB disconnect, device number 6 [ 135.266833][ T5949] device batadv_slave_1 entered promiscuous mode [ 135.315540][ T5949] device batadv_slave_1 left promiscuous mode [ 135.403251][ T5952] loop8: detected capacity change from 0 to 7 [ 135.451174][ T5952] Dev loop8: unable to read RDB block 7 [ 135.456963][ T5952] loop8: AHDI p1 p2 p3 [ 135.463769][ T5927] loop3: detected capacity change from 0 to 40427 [ 135.483554][ T5952] loop8: partition table partially beyond EOD, truncated [ 135.521228][ T5952] loop8: p1 start 1601398130 is beyond EOD, truncated [ 135.534810][ T5952] loop8: p2 start 1702059890 is beyond EOD, truncated [ 135.570596][ T5927] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 135.596527][ T5927] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 135.693698][ T5927] F2FS-fs (loop3): invalid crc value [ 135.767252][ T5927] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.958190][ T5927] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 136.010937][ T5927] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.106528][ T5985] loop1: detected capacity change from 0 to 128 [ 136.131132][ T4613] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.218375][ T5985] EXT4-fs (loop1): Ignoring removed nobh option [ 136.315813][ T5985] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 136.337026][ T5988] loop5: detected capacity change from 0 to 4096 [ 136.371139][ T5985] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.412905][ T4186] attempt to access beyond end of device [ 136.412905][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 136.491151][ T4613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.513969][ T5988] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 136.522016][ T5985] fscrypt (loop1, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 136.542056][ T4613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.583602][ T4613] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.635701][ T4613] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.670950][ T4613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.731644][ T4613] usb 3-1: config 0 descriptor?? [ 136.765385][ T4225] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 136.779102][ T5651] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 136.803462][ T5651] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 136.821134][ T5651] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 136.827719][ T4225] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 136.836832][ T5651] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 137.305529][ T4613] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 137.353218][ T4613] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 137.564042][ T6004] loop4: detected capacity change from 0 to 65536 [ 137.636074][ T6018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.565'. [ 137.693395][ T6028] loop3: detected capacity change from 0 to 64 [ 137.707975][ T6004] XFS (loop4): Mounting V5 Filesystem [ 137.714942][ T4613] usb 3-1: USB disconnect, device number 7 [ 137.780129][ T6004] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x41 dinode [ 137.790736][ T6004] XFS (loop4): Unmount and run xfs_repair [ 137.797883][ T6004] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 137.805344][ T6004] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 137.814250][ T6004] 00000010: 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.823515][ T6004] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 80 05 22 c0 ..e.....4.Xh..". [ 137.832428][ T6004] 00000030: 34 f7 58 68 80 05 22 c0 00 00 00 00 00 00 00 00 4.Xh.."......... [ 137.841876][ T6004] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.850751][ T6004] 00000050: 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 00 ................ [ 137.859701][ T6004] 00000060: ff ff ff ff 14 14 55 72 00 00 00 00 00 00 00 02 ......Ur........ [ 137.868642][ T6004] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 137.877865][ T6004] XFS (loop4): failed to read RT inodes [ 137.950391][ T6016] fido_id[6016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 138.043294][ T6038] loop1: detected capacity change from 0 to 256 [ 138.425420][ T6038] FAT-fs (loop1): Directory bread(block 64) failed [ 138.503923][ T6038] FAT-fs (loop1): Directory bread(block 65) failed [ 138.510582][ T6038] FAT-fs (loop1): Directory bread(block 66) failed [ 138.621006][ T6038] FAT-fs (loop1): Directory bread(block 67) failed [ 138.671709][ T6038] FAT-fs (loop1): Directory bread(block 68) failed [ 138.727491][ T6038] FAT-fs (loop1): Directory bread(block 69) failed [ 138.778847][ T6038] FAT-fs (loop1): Directory bread(block 70) failed [ 138.821002][ T6038] FAT-fs (loop1): Directory bread(block 71) failed [ 138.878671][ T6038] FAT-fs (loop1): Directory bread(block 72) failed [ 138.886257][ T6053] loop4: detected capacity change from 0 to 256 [ 138.916377][ T6038] FAT-fs (loop1): Directory bread(block 73) failed [ 139.030071][ T6040] loop5: detected capacity change from 0 to 131072 [ 139.089308][ T6053] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 139.142896][ T6040] XFS (loop5): Mounting V5 Filesystem [ 139.223137][ T26] audit: type=1800 audit(1783553353.487:8): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.573" name="file2" dev="loop4" ino=1048640 res=0 errno=0 [ 139.265768][ T26] audit: type=1800 audit(1783553353.527:9): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.573" name="file2" dev="loop4" ino=1048640 res=0 errno=0 [ 139.296915][ T6068] loop2: detected capacity change from 0 to 256 [ 139.308002][ T6053] exFAT-fs (loop4): hint_cluster is invalid (17) [ 139.326408][ T6053] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 139.340415][ T6040] XFS (loop5): Starting recovery (logdev: internal) [ 139.398848][ T6040] XFS (loop5): Ending recovery (logdev: internal) [ 139.407022][ T6071] loop3: detected capacity change from 0 to 256 [ 139.424439][ T6053] exFAT-fs (loop4): Filesystem has been set read-only [ 139.446162][ T6068] FAT-fs (loop2): Directory bread(block 64) failed [ 139.468898][ T6053] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 139.478782][ T6068] FAT-fs (loop2): Directory bread(block 65) failed [ 139.544291][ T6068] FAT-fs (loop2): Directory bread(block 66) failed [ 139.651705][ T6068] FAT-fs (loop2): Directory bread(block 67) failed [ 139.665623][ T6068] FAT-fs (loop2): Directory bread(block 68) failed [ 139.736836][ T5651] XFS (loop5): Unmounting Filesystem [ 139.741173][ T6068] FAT-fs (loop2): Directory bread(block 69) failed [ 139.761576][ T6068] FAT-fs (loop2): Directory bread(block 70) failed [ 139.768938][ T6068] FAT-fs (loop2): Directory bread(block 71) failed [ 139.886715][ T6068] FAT-fs (loop2): Directory bread(block 72) failed [ 139.929152][ T6068] FAT-fs (loop2): Directory bread(block 73) failed [ 140.459115][ T6091] tipc: Started in network mode [ 140.486772][ T6091] tipc: Node identity bbbbbb, cluster identity 4711 [ 140.502488][ T6091] tipc: Enabled bearer , priority 10 [ 140.818475][ T6098] loop3: detected capacity change from 0 to 16 [ 140.837256][ T6075] loop1: detected capacity change from 0 to 32768 [ 140.922053][ T6098] erofs: (device loop3): mounted with root inode @ nid 36. [ 141.018024][ T6075] XFS (loop1): Mounting V5 Filesystem [ 141.191416][ T6075] XFS (loop1): Ending clean mount [ 141.329358][ T6075] XFS (loop1): Quotacheck needed: Please wait. [ 141.411231][ T6075] XFS (loop1): Quotacheck: Done. [ 141.440367][ T6118] loop3: detected capacity change from 0 to 1024 [ 141.520537][ T4227] tipc: Node number set to 3149642496 [ 141.564097][ T6118] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.577076][ T4190] XFS (loop1): Unmounting Filesystem [ 141.654862][ T6088] XFS (loop5): Mounting V5 Filesystem [ 141.671568][ T6131] EXT4-fs (loop3): shut down requested (1) [ 141.779530][ T26] audit: type=1800 audit(1783553356.037:10): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.590" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 141.883340][ T6088] XFS (loop5): Ending clean mount [ 141.912600][ T6088] XFS (loop5): Quotacheck needed: Please wait. [ 141.979753][ T155] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 141.998635][ T155] Quota error (device loop3): write_blk: dquota write failed [ 142.053459][ T155] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 142.092656][ T6088] XFS (loop5): Quotacheck: Done. [ 142.180894][ T155] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 142.231072][ T155] Quota error (device loop3): write_blk: dquota write failed [ 142.238542][ T155] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 142.289944][ T155] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 142.320517][ T155] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 142.347729][ T155] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 142.365245][ T6140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.592'. [ 142.498372][ T5651] XFS (loop5): Unmounting Filesystem [ 142.551229][ T4382] Dev loop8: unable to read RDB block 7 [ 142.618168][ T4382] loop8: AHDI p1 p2 p3 [ 142.640442][ T4382] loop8: partition table partially beyond EOD, truncated [ 142.671913][ T4382] loop8: p1 start 1601398130 is beyond EOD, truncated [ 142.701290][ T4382] loop8: p2 start 1702059890 is beyond EOD, truncated [ 142.720788][ T6148] device ip6_vti0 entered promiscuous mode [ 142.730633][ T6145] Dev loop8: unable to read RDB block 7 [ 142.757823][ T6145] loop8: AHDI p1 p2 p3 [ 142.772419][ T6145] loop8: partition table partially beyond EOD, truncated [ 142.803368][ T6145] loop8: p1 start 1601398130 is beyond EOD, truncated [ 142.831213][ T6145] loop8: p2 start 1702059890 is beyond EOD, truncated [ 142.895031][ T6138] set_capacity_and_notify: 2 callbacks suppressed [ 142.895048][ T6138] loop4: detected capacity change from 0 to 40427 [ 143.009897][ T6138] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 143.058659][ T6138] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 143.106612][ T6138] F2FS-fs (loop4): invalid crc value [ 143.156570][ T6138] F2FS-fs (loop4): Found nat_bits in checkpoint [ 143.281523][ T6138] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 143.288820][ T6138] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 143.380995][ T4613] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.494967][ T6166] loop5: detected capacity change from 0 to 256 [ 143.558157][ T6166] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 143.755819][ T4613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 143.787190][ T4613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 143.855943][ T4613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 143.898680][ T4613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 57908, setting to 1024 [ 144.101211][ T4613] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 144.120663][ T4613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.129320][ T4613] usb 2-1: Product: syz [ 144.139337][ T4613] usb 2-1: Manufacturer: syz [ 144.165297][ T4613] usb 2-1: SerialNumber: syz [ 144.201930][ T4613] usb 2-1: config 0 descriptor?? [ 144.484058][ T4613] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 144.720062][ T6196] loop2: detected capacity change from 0 to 64 [ 144.743351][ T4613] usb 2-1: USB disconnect, device number 4 [ 144.865731][ T6196] attempt to access beyond end of device [ 144.865731][ T6196] loop2: rw=0, want=1026, limit=64 [ 144.894895][ T6196] Buffer I/O error on dev loop2, logical block 512, async page read [ 144.898838][ T6202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.615'. [ 144.914276][ T6196] attempt to access beyond end of device [ 144.914276][ T6196] loop2: rw=0, want=113154, limit=64 [ 144.931666][ T6196] Buffer I/O error on dev loop2, logical block 56576, async page read [ 144.970668][ T6196] Trying to free block not in datazone [ 145.509397][ T6200] loop5: detected capacity change from 0 to 32768 [ 145.632528][ T6200] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 145.815226][ T5651] ocfs2: Unmounting device (7,5) on (node local) [ 145.844728][ T6216] loop4: detected capacity change from 0 to 32768 [ 145.951247][ T6216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.619 (6216) [ 146.018978][ T6216] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 146.076869][ T6216] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 146.108459][ T6216] BTRFS info (device loop4): trying to use backup root at mount time [ 146.138877][ T6216] BTRFS info (device loop4): setting nodatasum [ 146.170506][ T6216] BTRFS info (device loop4): enabling ssd optimizations [ 146.199629][ T6216] BTRFS info (device loop4): using spread ssd allocation scheme [ 146.224545][ T6241] hugetlbfs: syz.5.625 (6241): Using mlock ulimits for SHM_HUGETLB is deprecated [ 146.241210][ T6216] BTRFS info (device loop4): turning on flush-on-commit [ 146.248446][ T6216] BTRFS info (device loop4): force zlib compression, level 3 [ 146.291192][ T6238] loop3: detected capacity change from 0 to 4096 [ 146.307856][ T6216] BTRFS info (device loop4): using free space tree [ 146.342168][ T6238] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 146.370890][ T6216] BTRFS info (device loop4): has skinny extents [ 146.465064][ T6253] loop2: detected capacity change from 0 to 128 [ 146.638332][ T6253] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 146.679878][ T6270] loop1: detected capacity change from 0 to 256 [ 146.689758][ T6253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.812111][ T6270] FAT-fs (loop1): Directory bread(block 64) failed [ 146.860028][ T6270] FAT-fs (loop1): Directory bread(block 65) failed [ 146.875374][ T6270] FAT-fs (loop1): Directory bread(block 66) failed [ 146.902441][ T6270] FAT-fs (loop1): Directory bread(block 67) failed [ 146.909112][ T6270] FAT-fs (loop1): Directory bread(block 68) failed [ 146.939513][ T26] audit: type=1800 audit(1783553361.197:11): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.619" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 146.960180][ T6270] FAT-fs (loop1): Directory bread(block 69) failed [ 146.983966][ T26] audit: type=1800 audit(1783553361.217:12): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.619" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 147.004989][ T6270] FAT-fs (loop1): Directory bread(block 70) failed [ 147.012738][ T6270] FAT-fs (loop1): Directory bread(block 71) failed [ 147.019534][ T6270] FAT-fs (loop1): Directory bread(block 72) failed [ 147.060993][ T6270] FAT-fs (loop1): Directory bread(block 73) failed [ 147.422367][ T6299] pimreg: tun_chr_ioctl cmd 1074025677 [ 147.428173][ T6299] pimreg: linktype set to 774 [ 147.462686][ T6299] pimreg: tun_chr_ioctl cmd 1074025678 [ 147.468211][ T6299] pimreg: group set to 0 [ 147.652216][ T4613] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.814775][ T6308] loop4: detected capacity change from 0 to 256 [ 148.027091][ T6320] loop5: detected capacity change from 0 to 128 [ 148.081161][ T4613] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.096030][ T6322] loop4: detected capacity change from 0 to 256 [ 148.161173][ T4613] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 148.212055][ T6327] netlink: 'syz.3.651': attribute type 5 has an invalid length. [ 148.236160][ T6322] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 148.341159][ T4613] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 148.382173][ T4613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.408286][ T4613] usb 3-1: Product: syz [ 148.428340][ T4613] usb 3-1: Manufacturer: syz [ 148.447522][ T4613] usb 3-1: SerialNumber: syz [ 148.733856][ T4613] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 149.007666][ T6316] loop1: detected capacity change from 0 to 32768 [ 149.074118][ T6316] JBD2: Ignoring recovery information on journal [ 149.176737][ T6329] loop5: detected capacity change from 0 to 40427 [ 149.208012][ T6316] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 149.271103][ T6329] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 149.292588][ T6329] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 149.305791][ T4190] ocfs2: Unmounting device (7,1) on (node local) [ 149.313962][ T6329] F2FS-fs (loop5): invalid crc value [ 149.356999][ T6329] F2FS-fs (loop5): Found nat_bits in checkpoint [ 149.488211][ T6329] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 149.516625][ T6329] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 149.631262][ T4613] usb 3-1: failed to enable PITCH for EP 0x82 [ 149.661086][ T4613] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 149.712303][ T4613] usb 3-1: clock source 0 is not valid, cannot use [ 149.742582][ T4613] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 149.767500][ T4613] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 149.901243][ T4613] usb 3-1: USB disconnect, device number 8 [ 149.987626][ T6356] loop3: detected capacity change from 0 to 32768 [ 150.066941][ T6356] JBD2: Ignoring recovery information on journal [ 150.116020][ T6356] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 150.214620][ T26] audit: type=1800 audit(1783553364.477:13): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.657" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 150.242399][ T5470] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 150.302454][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.465134][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 150.579884][ T6367] program syz.3.661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.605982][ T5470] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 150.637980][ T5470] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.668528][ T5470] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 150.725162][ T5470] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 150.791487][ T6357] loop1: detected capacity change from 0 to 32768 [ 150.886463][ T6357] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.655 (6357) [ 150.972062][ T5470] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.038808][ T5470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.108306][ T5470] usb 5-1: Product: syz [ 151.149044][ T5470] usb 5-1: Manufacturer: syz [ 151.189797][ T5470] usb 5-1: SerialNumber: syz [ 151.540781][ T6369] loop2: detected capacity change from 0 to 131072 [ 151.581561][ T6357] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 151.616670][ T6357] BTRFS info (device loop1): using free space tree [ 151.673758][ T6369] F2FS-fs (loop2): invalid crc value [ 151.683861][ T6357] BTRFS info (device loop1): has skinny extents [ 151.744147][ T6369] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.800563][ T6369] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 151.853241][ T6369] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 152.018987][ T6400] loop5: detected capacity change from 0 to 2048 [ 152.052660][ T6357] BTRFS info (device loop1): enabling ssd optimizations [ 152.157407][ T6374] loop3: detected capacity change from 0 to 32768 [ 152.175849][ T6400] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.216524][ T6400] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.355413][ T26] audit: type=1800 audit(1783553366.617:14): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.664" name="file2" dev="loop3" ino=5 res=0 errno=0 [ 152.362439][ T5470] cdc_ncm 5-1:1.0: bind() failure [ 152.501034][ T5470] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 152.541472][ T5470] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 152.584114][ T5470] usbtest: probe of 5-1:1.1 failed with error -71 [ 152.631278][ T5470] usb 5-1: USB disconnect, device number 9 [ 152.715953][ T6418] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 152.782801][ T6418] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 152.828236][ T6418] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 153.678829][ T6458] loop5: detected capacity change from 0 to 128 [ 153.902461][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 154.205827][ T6486] loop4: detected capacity change from 0 to 16 [ 154.234361][ T6486] erofs: (device loop4): mounted with root inode @ nid 36. [ 154.534594][ T6498] loop3: detected capacity change from 0 to 256 [ 154.598952][ T6504] loop2: detected capacity change from 0 to 128 [ 154.677409][ T6498] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.721106][ T6498] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 154.781479][ T6498] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 154.806890][ T6512] device geneve2 entered promiscuous mode [ 155.295673][ T6521] device syzkaller1 entered promiscuous mode [ 155.866854][ T6559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.709'. [ 156.047971][ T6565] loop1: detected capacity change from 0 to 4096 [ 156.145792][ T6565] ntfs3: loop1: Failed to load $Extend. [ 156.226183][ T6534] loop2: detected capacity change from 0 to 32768 [ 156.254101][ T6565] ntfs3: loop1: ino=5, "/" directory corrupted [ 156.282403][ T6565] ntfs3: loop1: ino=5, "/" directory corrupted [ 156.360620][ T6534] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 156.469196][ T6555] loop3: detected capacity change from 0 to 32768 [ 156.491904][ T6555] XFS: attr2 mount option is deprecated. [ 156.507865][ T6555] XFS: attr2 mount option is deprecated. [ 156.560979][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 156.640545][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 156.815232][ T6555] XFS (loop3): Mounting V5 Filesystem [ 156.906445][ T6555] XFS (loop3): Ending clean mount [ 156.977696][ T6597] loop2: detected capacity change from 0 to 256 [ 156.998017][ T6555] XFS (loop3): Quotacheck needed: Please wait. [ 157.063524][ T6597] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 157.146778][ T7] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 157.169535][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.203906][ T7] usb 5-1: Product: syz [ 157.208128][ T7] usb 5-1: Manufacturer: syz [ 157.239230][ T7] usb 5-1: SerialNumber: syz [ 157.263618][ T6555] XFS (loop3): Quotacheck: Done. [ 157.549374][ T6610] loop2: detected capacity change from 0 to 16 [ 157.571522][ T4186] XFS (loop3): Unmounting Filesystem [ 157.589496][ T6610] erofs: (device loop2): mounted with root inode @ nid 36. [ 157.702819][ T6610] overlayfs: failed to get redirect (-117) [ 157.765442][ T6587] loop1: detected capacity change from 0 to 32768 [ 158.547440][ T6637] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 158.581266][ T1324] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.595983][ T6637] ext4 filesystem being mounted at /159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.628215][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.661799][ T6645] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.766333][ T6645] EXT4-fs (loop1): 1 truncate cleaned up [ 158.789724][ T6645] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 158.871066][ T1324] usb 3-1: Using ep0 maxpacket: 8 [ 158.899571][ T6655] set_capacity_and_notify: 2 callbacks suppressed [ 158.899589][ T6655] loop5: detected capacity change from 0 to 512 [ 158.961099][ T6645] EXT4-fs (loop1): shut down requested (2) [ 159.071411][ T1324] usb 3-1: config 6 has an invalid interface number: 49 but max is 0 [ 159.111301][ T1324] usb 3-1: config 6 has no interface number 0 [ 159.167644][ T1324] usb 3-1: language id specifier not provided by device, defaulting to English [ 159.180167][ T6659] tipc: Started in network mode [ 159.187469][ T6661] loop3: detected capacity change from 0 to 1024 [ 159.200421][ T6659] tipc: Node identity 2e000000000040000000000000000001, cluster identity 4711 [ 159.229843][ T6659] tipc: Enabling of bearer rejected, failed to enable media [ 159.249030][ T6664] loop1: detected capacity change from 0 to 512 [ 159.306296][ T6664] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.331361][ T1324] usb 3-1: New USB device found, idVendor=1c9e, idProduct=9b01, bcdDevice=ec.3a [ 159.363061][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.382201][ T1324] usb 3-1: Product: syz [ 159.390298][ T6664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8016c018, mo2=0002] [ 159.420246][ T1324] usb 3-1: Manufacturer: 㤪⎤๏诶膢❾偤鎘ꠇ엖ᜊ羍⪁ꇪ⏞왞鐳쬒仳ꄴ뾮꒖ [ 159.474831][ T6664] EXT4-fs (loop1): 1 truncate cleaned up [ 159.480535][ T6664] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,grpquota,debug_want_extra_isize=0x000000000000006c,mb_optimize_scan=0x0000000000000001,debug,data=journal,noblock_validity,,errors=continue. Quota mode: writeback. [ 159.560245][ T1324] usb 3-1: SerialNumber: syz [ 159.586837][ T26] audit: type=1800 audit(1783553373.847:15): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.732" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 159.694973][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'. [ 159.769299][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.734'. [ 159.821557][ T6671] device gretap0 entered promiscuous mode [ 159.859008][ T6671] Zero length message leads to an empty skb [ 159.865188][ T7] rtl8150 5-1:1.0: couldn't reset the device [ 159.873980][ T7] rtl8150: probe of 5-1:1.0 failed with error -5 [ 159.927498][ T7] usb 5-1: USB disconnect, device number 10 [ 159.975080][ T1324] option 3-1:6.49: GSM modem (1-port) converter detected [ 160.043719][ T1324] usb 3-1: USB disconnect, device number 9 [ 160.118987][ T1324] option 3-1:6.49: device disconnected [ 160.568572][ T6695] loop3: detected capacity change from 0 to 8 [ 160.688495][ T6695] SQUASHFS error: Unable to read inode 0x0 [ 160.691757][ T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 161.261167][ T21] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 161.290977][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.319613][ T6722] loop2: detected capacity change from 0 to 512 [ 161.326885][ T21] usb 5-1: Product: syz [ 161.351155][ T21] usb 5-1: Manufacturer: syz [ 161.355836][ T21] usb 5-1: SerialNumber: syz [ 161.380433][ T21] usb 5-1: config 0 descriptor?? [ 161.408930][ T6722] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 161.422106][ T21] hub 5-1:0.0: bad descriptor, ignoring hub [ 161.428076][ T21] hub: probe of 5-1:0.0 failed with error -5 [ 161.466012][ T26] audit: type=1800 audit(1783553375.727:16): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.755" name="file1" dev="loop2" ino=26 res=0 errno=0 [ 161.571172][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 161.636814][ T21] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 161.670473][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.701336][ T21] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 161.734646][ T21] usb 5-1: media controller created [ 161.781695][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.846836][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 161.890641][ T21] DVB: Unable to find symbol dib7000p_attach() [ 161.897148][ T21] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 162.066825][ T7] usb 2-1: config 6 has an invalid interface number: 49 but max is 0 [ 162.084716][ T7] usb 2-1: config 6 has no interface number 0 [ 162.091462][ T1107] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.155779][ T7] usb 2-1: language id specifier not provided by device, defaulting to English [ 162.248931][ T6730] loop3: detected capacity change from 0 to 32768 [ 162.325839][ T7] usb 2-1: New USB device found, idVendor=1c9e, idProduct=9b01, bcdDevice=ec.3a [ 162.345395][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.405125][ T7] usb 2-1: Product: syz [ 162.427228][ T7] usb 2-1: Manufacturer: 㤪⎤๏诶膢❾偤鎘ꠇ엖ᜊ羍⪁ꇪ⏞왞鐳쬒仳ꄴ뾮꒖ [ 162.491219][ T1107] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 162.500788][ T7] usb 2-1: SerialNumber: syz [ 162.517217][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.560557][ T1107] usb 3-1: config 0 descriptor?? [ 162.623540][ T1107] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 162.834827][ T6739] loop5: detected capacity change from 0 to 131072 [ 162.881831][ T21] rc_core: IR keymap rc-dib0700-rc5 not found [ 162.888000][ T21] Registered IR keymap rc-empty [ 162.897165][ T21] dvb-usb: could not initialize remote control. [ 162.904627][ T21] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 162.905457][ T7] option 2-1:6.49: GSM modem (1-port) converter detected [ 162.959724][ T21] usb 5-1: USB disconnect, device number 11 [ 162.990194][ T6739] F2FS-fs (loop5): invalid crc value [ 163.026533][ T21] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 163.065473][ T7] usb 2-1: USB disconnect, device number 5 [ 163.083853][ T6739] F2FS-fs (loop5): Found nat_bits in checkpoint [ 163.112192][ T7] option 2-1:6.49: device disconnected [ 163.133904][ T6739] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 163.189448][ T6739] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 163.473069][ T6759] loop1: detected capacity change from 0 to 512 [ 163.502101][ T6761] loop4: detected capacity change from 0 to 16 [ 163.545489][ T1107] gspca_stv06xx: I2C: Read error writing address: -71 [ 163.561548][ T6761] erofs: (device loop4): mounted with root inode @ nid 36. [ 163.625502][ T6761] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 163.631500][ T1107] usb 3-1: USB disconnect, device number 10 [ 163.674562][ T6763] loop3: detected capacity change from 0 to 256 [ 163.705702][ T6759] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,auto_da_alloc=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 163.727649][ T6759] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.861781][ T6759] EXT4-fs error (device loop1): ext4_xattr_block_find:1857: inode #12: comm syz.1.770: corrupted xattr block 6 [ 163.929983][ T6768] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.163302][ T6775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.777'. [ 164.240086][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'. [ 164.404704][ T6784] netlink: 'syz.4.780': attribute type 29 has an invalid length. [ 164.421344][ T6784] netlink: 'syz.4.780': attribute type 29 has an invalid length. [ 164.423692][ T6784] netlink: 'syz.4.780': attribute type 29 has an invalid length. [ 164.424316][ T6784] netlink: 'syz.4.780': attribute type 29 has an invalid length. [ 164.424891][ T6784] netlink: 'syz.4.780': attribute type 29 has an invalid length. [ 164.597240][ T6793] set_capacity_and_notify: 1 callbacks suppressed [ 164.597259][ T6793] loop1: detected capacity change from 0 to 128 [ 164.737733][ T6793] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.737853][ T6793] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.761476][ T6801] loop3: detected capacity change from 0 to 1024 [ 164.867523][ T6801] EXT4-fs (loop3): inline encryption not supported [ 164.913646][ T6801] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,journal_dev=0x0000000000000003,resuid=0x000000000000ee01,resuid=0x0000000000000000,inlinecrypt,grpid,norecovery,user_xattr,,errors=continue. Quota mode: none. [ 165.135390][ T6811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.788'. [ 165.146658][ T6813] loop2: detected capacity change from 0 to 256 [ 165.184961][ T6811] device ip6gre1 entered promiscuous mode [ 165.202395][ T6813] exfat: Deprecated parameter 'utf8' [ 165.275060][ T6813] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 165.571550][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.591176][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.620277][ T6431] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.905724][ T6838] loop4: detected capacity change from 0 to 2048 [ 165.963232][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 165.973951][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.008935][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.045222][ T6842] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.345978][ T6820] loop1: detected capacity change from 0 to 40427 [ 166.425711][ T6820] F2FS-fs (loop1): invalid crc value [ 166.433227][ T6854] binder: 6853:6854 ioctl 4018620d 0 returned -22 [ 166.499013][ T6820] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.692798][ T6820] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 166.772644][ T6820] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 166.957444][ T6874] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 166.964475][ T6874] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.030615][ T6874] vhci_hcd vhci_hcd.0: Device attached [ 167.172478][ T6885] device batadv_slave_1 entered promiscuous mode [ 167.190956][ T6431] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.192476][ T6882] device batadv_slave_1 left promiscuous mode [ 167.291492][ T26] audit: type=1326 audit(1783553381.547:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.3.820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0793a17e59 code=0x7ffc0000 [ 167.301157][ T4612] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 167.378672][ T26] audit: type=1326 audit(1783553381.597:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.3.820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07939d868e code=0x7ffc0000 [ 167.402671][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.440097][ T26] audit: type=1326 audit(1783553381.597:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.3.820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0793a17e59 code=0x7ffc0000 [ 167.464822][ T6431] usb 3-1: Using ep0 maxpacket: 16 [ 167.513885][ T26] audit: type=1326 audit(1783553381.607:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.3.820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07939d868e code=0x7ffc0000 [ 167.537935][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.569233][ T6875] vhci_hcd: connection closed [ 167.574986][ T4225] vhci_hcd: stop threads [ 167.602483][ T4225] vhci_hcd: release socket [ 167.611472][ T6431] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.620071][ T6431] usb 3-1: no configurations [ 167.635478][ T4225] vhci_hcd: disconnect device [ 167.653231][ T6431] usb 3-1: can't read configurations, error -22 [ 167.661210][ T26] audit: type=1326 audit(1783553381.607:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.3.820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07939d868e code=0x7ffc0000 [ 167.685696][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.730932][ T26] audit: type=1326 audit(1783553381.607:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.3.820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07939d868e code=0x7ffc0000 [ 167.755331][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.788618][ T6880] loop4: detected capacity change from 0 to 32768 [ 167.801042][ T26] audit: type=1326 audit(1783553381.607:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.3.820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07939d868e code=0x7ffc0000 [ 167.882345][ T6905] program syz.5.824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.901195][ T6880] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.817 (6880) [ 167.919801][ T26] audit: type=1326 audit(1783553381.607:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.3.820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07939d868e code=0x7ffc0000 [ 167.965460][ T26] audit: type=1326 audit(1783553381.607:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.3.820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07939d868e code=0x7ffc0000 [ 167.989704][ T26] audit: type=1326 audit(1783553381.607:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.3.820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07939d868e code=0x7ffc0000 [ 168.013933][ T6880] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 168.040998][ T6880] BTRFS info (device loop4): enabling disk space caching [ 168.051920][ T6880] BTRFS info (device loop4): force clearing of disk cache [ 168.087014][ T6880] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 168.159152][ T6880] BTRFS info (device loop4): use zstd compression, level 3 [ 168.188369][ T6880] BTRFS info (device loop4): disk space caching is enabled [ 168.244529][ T6880] BTRFS info (device loop4): has skinny extents [ 168.580413][ T6946] loop2: detected capacity change from 0 to 128 [ 168.665180][ T6880] BTRFS info (device loop4): enabling ssd optimizations [ 168.704923][ T6946] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.716408][ T6946] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.728693][ T6880] BTRFS info (device loop4): clearing free space tree [ 168.739111][ T6880] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.753993][ T6880] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 168.838344][ T6911] loop1: detected capacity change from 0 to 32768 [ 168.897085][ T6911] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.825 (6911) [ 168.929831][ T6911] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 168.948557][ T6911] BTRFS info (device loop1): enabling auto defrag [ 168.983549][ T6911] BTRFS info (device loop1): force clearing of disk cache [ 168.990776][ T6911] BTRFS info (device loop1): ignoring data csums [ 169.059450][ T6911] BTRFS info (device loop1): turning on async discard [ 169.100949][ T6911] BTRFS info (device loop1): setting nodatacow, compression disabled [ 169.158917][ T6962] loop5: detected capacity change from 0 to 512 [ 169.170924][ T6911] BTRFS info (device loop1): turning off async discard [ 169.177853][ T6911] BTRFS info (device loop1): disabling free space tree [ 169.229841][ T6911] BTRFS info (device loop1): has skinny extents [ 169.244136][ T6962] EXT4-fs (loop5): Ignoring removed orlov option [ 169.265842][ T6965] loop3: detected capacity change from 0 to 64 [ 169.418153][ T6962] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,init_itable,sysvgroups,orlov,. Quota mode: writeback. [ 169.497595][ T6962] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.629048][ T6962] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 169.711016][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.251268][ T7012] loop5: detected capacity change from 0 to 512 [ 170.355167][ T7012] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 170.466786][ T7012] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 170.513008][ T7012] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.813234][ T7014] loop3: detected capacity change from 0 to 32768 [ 170.978312][ T7014] XFS (loop3): Mounting V5 Filesystem [ 171.117392][ T7014] XFS (loop3): Ending clean mount [ 171.132905][ T7014] XFS (loop3): Quotacheck needed: Please wait. [ 171.295514][ T7014] XFS (loop3): Quotacheck: Done. [ 171.430647][ T7045] loop1: detected capacity change from 0 to 8192 [ 171.695264][ T7014] syz.3.844 (7014) used greatest stack depth: 20352 bytes left [ 171.733842][ T4186] XFS (loop3): Unmounting Filesystem [ 171.763349][ T7059] netlink: 'syz.5.858': attribute type 49 has an invalid length. [ 171.878722][ T7064] loop2: detected capacity change from 0 to 1024 [ 171.917688][ T7059] device ip6gretap0 entered promiscuous mode [ 171.985099][ T7062] loop1: detected capacity change from 0 to 4096 [ 172.059542][ T7062] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 172.399672][ T7072] loop2: detected capacity change from 0 to 512 [ 172.529985][ T7076] netlink: 104 bytes leftover after parsing attributes in process `syz.5.865'. [ 172.545876][ T7078] fuse: Invalid group_id [ 172.584624][ T7072] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 172.847129][ T7072] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 173.014959][ T7072] loop2: detected capacity change from 0 to 512 [ 173.122069][ T7072] EXT4-fs (loop2): error: journal path ./file1 is not a block device [ 173.381139][ T1419] block nbd3: Attempted send on invalid socket [ 173.387518][ T1419] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.458556][ T7115] loop2: detected capacity change from 0 to 512 [ 173.526612][ T7115] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.566658][ T7115] EXT4-fs (loop2): 1 truncate cleaned up [ 173.598497][ T7115] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,user_xattr,. Quota mode: none. [ 173.929885][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 173.983774][ T7139] loop5: detected capacity change from 0 to 8 [ 174.008906][ T4382] udevd[4382]: incorrect cramfs checksum on /dev/loop5 [ 174.055516][ T7139] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 174.122344][ T4382] udevd[4382]: incorrect cramfs checksum on /dev/loop5 [ 174.188366][ T7146] loop4: detected capacity change from 0 to 64 [ 174.443778][ T7142] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.488137][ T7156] Invalid argument reading file caps for ./file0 [ 174.619840][ T7159] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 174.741921][ T7159] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 174.750093][ T7159] System zones: 1-12 [ 174.766169][ T7159] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.894: corrupted in-inode xattr [ 174.856611][ T7159] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.894: couldn't read orphan inode 15 (err -117) [ 174.891342][ T7159] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,nombcache,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 175.071735][ T7176] netlink: 'syz.2.903': attribute type 39 has an invalid length. [ 175.110164][ T7144] XFS (loop3): Mounting V5 Filesystem [ 175.263153][ T7144] XFS (loop3): Ending clean mount [ 175.264638][ T7184] set_capacity_and_notify: 3 callbacks suppressed [ 175.264679][ T7184] loop5: detected capacity change from 0 to 128 [ 175.347512][ T7184] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 175.412031][ T7184] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.514238][ T4186] XFS (loop3): Unmounting Filesystem [ 175.559788][ T7188] loop4: detected capacity change from 0 to 256 [ 175.697115][ T7193] loop5: detected capacity change from 0 to 512 [ 175.844861][ T7193] EXT4-fs (loop5): Ignoring removed bh option [ 175.909326][ T7193] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.907: corrupted in-inode xattr [ 176.050940][ T7193] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.907: couldn't read orphan inode 15 (err -117) [ 176.186602][ T7193] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000001,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 176.243762][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 176.278484][ T7209] device gtp0 entered promiscuous mode [ 176.454143][ T7219] loop1: detected capacity change from 0 to 256 [ 176.601969][ T7219] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 176.626447][ T7225] loop3: detected capacity change from 0 to 512 [ 176.716244][ T7225] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 176.748420][ T7197] loop2: detected capacity change from 0 to 32768 [ 176.761985][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 176.762001][ T26] audit: type=1800 audit(1783553391.027:90): pid=7219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.917" name="file2" dev="loop1" ino=1048663 res=0 errno=0 [ 176.794855][ T7230] Invalid argument reading file caps for ./file0 [ 176.839196][ T7225] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 176.865158][ T7225] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.885504][ T7197] [ 176.885504][ T7197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.885504][ T7197] [ 177.007073][ T26] audit: type=1800 audit(1783553391.267:91): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.911" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 177.098350][ T7197] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 177.098350][ T7197] [ 177.113007][ T7243] device macvtap1 entered promiscuous mode [ 177.158043][ T7197] xtLookup: xtSearch returned -5 [ 177.165032][ T7244] ERROR: (device loop2): diWrite: ixpxd invalid [ 177.165032][ T7244] [ 177.194366][ T7246] netlink: 20 bytes leftover after parsing attributes in process `syz.5.928'. [ 177.207855][ T6431] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 177.220240][ T7197] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 177.220240][ T7197] [ 177.237698][ T7249] binder: 7247:7249 ioctl c0306201 2000000006c0 returned -14 [ 177.277591][ T7244] ERROR: (device loop2): txCommit: [ 177.277591][ T7244] [ 177.330111][ T7197] xtLookup: xtSearch returned -5 [ 177.344607][ T7197] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 177.344607][ T7197] [ 177.398476][ T7197] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 177.398476][ T7197] [ 177.472115][ T7197] xtLookup: xtSearch returned -5 [ 177.494227][ T7197] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 177.494227][ T7197] [ 177.601063][ T6431] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 177.629144][ T6431] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 177.657777][ T154] [ 177.657777][ T154] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.657777][ T154] [ 177.680678][ T6431] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 145, changing to 11 [ 177.708081][ T154] [ 177.708081][ T154] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.708081][ T154] [ 177.746953][ T4185] [ 177.746953][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.746953][ T4185] [ 177.779986][ T4185] [ 177.779986][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.779986][ T4185] [ 177.827625][ T277] [ 177.827625][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.827625][ T277] [ 177.865183][ T7270] loop5: detected capacity change from 0 to 256 [ 177.881386][ T6431] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 177.901038][ T277] ================================================================== [ 177.909866][ T277] BUG: KASAN: use-after-free in txEnd+0x329/0x520 [ 177.916322][ T277] Write of size 8 at addr ffff888077e79040 by task jfsCommit/277 [ 177.924074][ T277] [ 177.926465][ T277] CPU: 1 PID: 277 Comm: jfsCommit Not tainted syzkaller #0 [ 177.933692][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.943787][ T277] Call Trace: [ 177.947095][ T277] [ 177.950052][ T277] dump_stack_lvl+0x188/0x250 [ 177.954774][ T277] ? show_regs_print_info+0x20/0x20 [ 177.960012][ T277] ? _printk+0xda/0x130 [ 177.964204][ T277] ? txEnd+0x329/0x520 [ 177.968307][ T277] ? load_image+0x410/0x410 [ 177.972884][ T277] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 177.978396][ T277] print_address_description+0x60/0x2d0 [ 177.983984][ T277] ? txEnd+0x329/0x520 [ 177.988085][ T277] kasan_report+0xdf/0x130 [ 177.992545][ T277] ? txEnd+0x329/0x520 [ 177.996680][ T277] kasan_check_range+0x235/0x290 [ 178.001656][ T277] txEnd+0x329/0x520 [ 178.005588][ T277] jfs_lazycommit+0x5cf/0xb60 [ 178.010312][ T277] ? txFreelock+0x5a0/0x5a0 [ 178.014842][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 178.020778][ T277] ? sched_dynamic_update+0x210/0x210 [ 178.026202][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 178.032137][ T277] ? __kthread_parkme+0x14e/0x1b0 [ 178.037200][ T277] kthread+0x42e/0x520 [ 178.041306][ T277] ? txFreelock+0x5a0/0x5a0 [ 178.045842][ T277] ? kthread_blkcg+0xd0/0xd0 [ 178.050467][ T277] ret_from_fork+0x1f/0x30 [ 178.054938][ T277] [ 178.057987][ T277] [ 178.060330][ T277] Allocated by task 7197: [ 178.064680][ T277] __kasan_kmalloc+0xaf/0xe0 [ 178.069307][ T277] lmLogOpen+0x2c0/0xf90 [ 178.073581][ T277] jfs_mount_rw+0xfb/0x5a0 [ 178.078035][ T277] jfs_fill_super+0x58d/0xad0 [ 178.082747][ T277] mount_bdev+0x28a/0x3c0 [ 178.087106][ T277] legacy_get_tree+0xe6/0x180 [ 178.091823][ T277] vfs_get_tree+0x88/0x270 [ 178.096268][ T277] do_new_mount+0x247/0xa40 [ 178.100801][ T277] __se_sys_mount+0x2e3/0x3d0 [ 178.105500][ T277] do_syscall_64+0x4c/0xa0 [ 178.109928][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.115836][ T277] [ 178.118167][ T277] Freed by task 4185: [ 178.122152][ T277] kasan_set_track+0x4b/0x70 [ 178.126756][ T277] kasan_set_free_info+0x1f/0x40 [ 178.131709][ T277] ____kasan_slab_free+0xd5/0x110 [ 178.136742][ T277] slab_free_freelist_hook+0xec/0x170 [ 178.142126][ T277] kfree+0xef/0x2a0 [ 178.145952][ T277] lmLogClose+0x292/0x530 [ 178.150301][ T277] jfs_umount+0x288/0x360 [ 178.154647][ T277] jfs_put_super+0x88/0x190 [ 178.159187][ T277] generic_shutdown_super+0x130/0x300 [ 178.164576][ T277] kill_block_super+0x7c/0xe0 [ 178.169271][ T277] deactivate_locked_super+0x93/0xf0 [ 178.174571][ T277] cleanup_mnt+0x426/0x4d0 [ 178.179002][ T277] task_work_run+0x125/0x1a0 [ 178.183610][ T277] exit_to_user_mode_loop+0x10f/0x130 [ 178.188996][ T277] exit_to_user_mode_prepare+0xee/0x180 [ 178.194552][ T277] syscall_exit_to_user_mode+0x16/0x40 [ 178.200030][ T277] do_syscall_64+0x58/0xa0 [ 178.204457][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.210378][ T277] [ 178.212711][ T277] Last potentially related work creation: [ 178.218432][ T277] kasan_save_stack+0x35/0x60 [ 178.223121][ T277] kasan_record_aux_stack+0xb8/0x100 [ 178.228417][ T277] call_rcu+0x189/0x900 [ 178.232583][ T277] sctp_association_free+0x69d/0x7e0 [ 178.237888][ T277] sctp_do_sm+0x373c/0x5610 [ 178.242404][ T277] sctp_assoc_bh_rcv+0x3ee/0x630 [ 178.247356][ T277] sctp_backlog_rcv+0x157/0x3b0 [ 178.252230][ T277] __release_sock+0x1e6/0x460 [ 178.256919][ T277] release_sock+0x5b/0x1b0 [ 178.261349][ T277] sctp_close+0x6a7/0x890 [ 178.265688][ T277] inet_release+0x139/0x180 [ 178.270204][ T277] sock_close+0xbf/0x210 [ 178.274461][ T277] __fput+0x212/0x8c0 [ 178.278456][ T277] task_work_run+0x125/0x1a0 [ 178.283151][ T277] exit_to_user_mode_loop+0x10f/0x130 [ 178.288543][ T277] exit_to_user_mode_prepare+0xee/0x180 [ 178.294459][ T277] syscall_exit_to_user_mode+0x16/0x40 [ 178.299950][ T277] do_syscall_64+0x58/0xa0 [ 178.304921][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.310937][ T277] [ 178.313281][ T277] The buggy address belongs to the object at ffff888077e79000 [ 178.313281][ T277] which belongs to the cache kmalloc-1k of size 1024 [ 178.327745][ T277] The buggy address is located 64 bytes inside of [ 178.327745][ T277] 1024-byte region [ffff888077e79000, ffff888077e79400) [ 178.341136][ T277] The buggy address belongs to the page: [ 178.346795][ T277] page:ffffea0001df9e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77e78 [ 178.356964][ T277] head:ffffea0001df9e00 order:3 compound_mapcount:0 compound_pincount:0 [ 178.365305][ T277] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 178.373343][ T277] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 178.381944][ T277] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 178.390542][ T277] page dumped because: kasan: bad access detected [ 178.397497][ T277] page_owner tracks the page as allocated [ 178.403338][ T277] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4186, ts 68226733355, free_ts 68176912559 [ 178.422452][ T277] get_page_from_freelist+0x24f6/0x2670 [ 178.428016][ T277] __alloc_pages+0x1ee/0x480 [ 178.432624][ T277] new_slab+0xc0/0x4b0 [ 178.436701][ T277] ___slab_alloc+0x807/0xdd0 [ 178.441301][ T277] __kmalloc_node_track_caller+0x13d/0x3a0 [ 178.447116][ T277] __alloc_skb+0x22c/0x750 [ 178.451544][ T277] rtmsg_fib+0xd7/0x440 [ 178.455708][ T277] fib_table_insert+0xd20/0x1b70 [ 178.460660][ T277] fib_magic+0x2ca/0x3b0 [ 178.464913][ T277] fib_add_ifaddr+0x372/0x5c0 [ 178.469607][ T277] fib_inetaddr_event+0x13c/0x1c0 [ 178.474647][ T277] blocking_notifier_call_chain+0x103/0x1b0 [ 178.480555][ T277] __inet_insert_ifa+0x9ea/0xbd0 [ 178.485510][ T277] inetdev_event+0xdf2/0x1350 [ 178.490201][ T277] raw_notifier_call_chain+0xcb/0x160 [ 178.495594][ T277] __dev_notify_flags+0x194/0x300 [ 178.500650][ T277] page last free stack trace: [ 178.505332][ T277] free_unref_page_prepare+0x637/0x6c0 [ 178.510823][ T277] free_unref_page+0x8f/0x2a0 [ 178.515530][ T277] qlist_free_all+0x35/0x90 [ 178.520391][ T277] kasan_quarantine_reduce+0x150/0x160 [ 178.526201][ T277] __kasan_slab_alloc+0x2f/0xc0 [ 178.531086][ T277] slab_post_alloc_hook+0x4c/0x380 [ 178.536218][ T277] kmem_cache_alloc_node+0x184/0x2c0 [ 178.541518][ T277] __alloc_skb+0xf4/0x750 [ 178.545860][ T277] netlink_sendmsg+0x654/0xbe0 [ 178.550736][ T277] __sys_sendto+0x46d/0x620 [ 178.555374][ T277] __x64_sys_sendto+0xda/0xf0 [ 178.560073][ T277] do_syscall_64+0x4c/0xa0 [ 178.564505][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.570419][ T277] [ 178.572756][ T277] Memory state around the buggy address: [ 178.578399][ T277] ffff888077e78f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 178.586470][ T277] ffff888077e78f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 178.594803][ T277] >ffff888077e79000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.602875][ T277] ^ [ 178.609036][ T277] ffff888077e79080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.617107][ T277] ffff888077e79100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.625176][ T277] ================================================================== [ 178.633254][ T277] Disabling lock debugging due to kernel taint [ 178.640033][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.659186][ T6431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.667445][ T6431] usb 2-1: Product: syz [ 178.672041][ T6431] usb 2-1: Manufacturer: syz [ 178.685635][ T7270] FAT-fs (loop5): Directory bread(block 64) failed [ 178.692331][ T6431] usb 2-1: SerialNumber: syz [ 178.699652][ T7270] FAT-fs (loop5): Directory bread(block 65) failed [ 178.708153][ T7270] FAT-fs (loop5): Directory bread(block 66) failed [ 178.716467][ T7270] FAT-fs (loop5): Directory bread(block 67) failed [ 178.724658][ T7270] FAT-fs (loop5): Directory bread(block 68) failed [ 178.733067][ T7270] FAT-fs (loop5): Directory bread(block 69) failed [ 178.739726][ T7270] FAT-fs (loop5): Directory bread(block 70) failed [ 178.747459][ T7270] FAT-fs (loop5): Directory bread(block 71) failed [ 178.753777][ T277] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 178.761159][ T7270] FAT-fs (loop5): Directory bread(block 72) failed [ 178.761214][ T277] CPU: 0 PID: 277 Comm: jfsCommit Tainted: G B syzkaller #0 [ 178.769608][ T7270] FAT-fs (loop5): Directory bread(block 73) failed [ 178.776931][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 178.776945][ T277] Call Trace: [ 178.776952][ T277] [ 178.776959][ T277] dump_stack_lvl+0x188/0x250 [ 178.776987][ T277] ? show_regs_print_info+0x20/0x20 [ 178.777009][ T277] ? load_image+0x410/0x410 [ 178.777036][ T277] panic+0x2f8/0x850 [ 178.777058][ T277] ? bpf_jit_dump+0xd0/0xd0 [ 178.777076][ T277] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 178.777099][ T277] ? check_panic_on_warn+0x6c/0xa0 [ 178.777122][ T277] ? txEnd+0x329/0x520 [ 178.777139][ T277] check_panic_on_warn+0x80/0xa0 [ 178.777160][ T277] ? txEnd+0x329/0x520 [ 178.777176][ T277] end_report+0x6d/0xf0 [ 178.777197][ T277] kasan_report+0x102/0x130 [ 178.777218][ T277] ? txEnd+0x329/0x520 [ 178.777237][ T277] kasan_check_range+0x235/0x290 [ 178.777259][ T277] txEnd+0x329/0x520 [ 178.777278][ T277] jfs_lazycommit+0x5cf/0xb60 [ 178.777299][ T277] ? txFreelock+0x5a0/0x5a0 [ 178.777316][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 178.777340][ T277] ? sched_dynamic_update+0x210/0x210 [ 178.777364][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 178.777388][ T277] ? __kthread_parkme+0x14e/0x1b0 [ 178.777409][ T277] kthread+0x42e/0x520 [ 178.777426][ T277] ? txFreelock+0x5a0/0x5a0 [ 178.777443][ T277] ? kthread_blkcg+0xd0/0xd0 [ 178.777462][ T277] ret_from_fork+0x1f/0x30 [ 178.777497][ T277] [ 178.777885][ T277] Kernel Offset: disabled [ 178.926921][ T277] Rebooting in 86400 seconds..