last executing test programs: 2m42.641155642s ago: executing program 2 (id=5493): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={&(0x7f0000001280), 0x1, 0x400}) 2m14.925823769s ago: executing program 2 (id=5493): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={&(0x7f0000001280), 0x1, 0x400}) 1m45.581001364s ago: executing program 2 (id=5493): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={&(0x7f0000001280), 0x1, 0x400}) 1m17.621838949s ago: executing program 2 (id=5493): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={&(0x7f0000001280), 0x1, 0x400}) 48.97209039s ago: executing program 2 (id=5493): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={&(0x7f0000001280), 0x1, 0x400}) 21.721651705s ago: executing program 2 (id=5493): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={&(0x7f0000001280), 0x1, 0x400}) 7.367586644s ago: executing program 1 (id=6290): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@noinit_itable}, {@nobh}, {@i_version}]}, 0x1, 0xb90, &(0x7f0000003380)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3) r1 = open(&(0x7f0000000500)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x21000}], 0x2, 0x1800, 0x0, 0x3) 7.076581299s ago: executing program 0 (id=6291): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5.776958996s ago: executing program 0 (id=6294): semget$private(0x0, 0x4000000009, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x65, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 5.664440768s ago: executing program 3 (id=6296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000fc0)={{0x12, 0x1, 0x0, 0xf3, 0x8f, 0x8a, 0x20, 0x763, 0x1041, 0xe178, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x61, 0xd7}}]}}]}}, 0x0) 5.169770072s ago: executing program 0 (id=6297): syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 4.998582591s ago: executing program 1 (id=6299): r0 = io_uring_setup(0x177f, &(0x7f0000000340)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0xd, &(0x7f0000000080)="059f80f3ea7b119fe93daaa7c808d49a", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.526047285s ago: executing program 4 (id=6301): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x2040400) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0)=0x1, 0x4) 3.354831087s ago: executing program 3 (id=6302): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) splice(r1, 0x0, r0, &(0x7f0000000080), 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001d40), &(0x7f0000001d80)=0xc) statx(0xffffffffffffffff, 0x0, 0x400, 0x842, &(0x7f0000000600)) 3.275992061s ago: executing program 1 (id=6303): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000010000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 3.012889918s ago: executing program 4 (id=6304): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x8) 2.843432479s ago: executing program 3 (id=6305): shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") shmdt(r0) 2.630546498s ago: executing program 0 (id=6306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 2.612406938s ago: executing program 1 (id=6307): socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x32}, [@func, @call, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r0], 0x0) 2.327960486s ago: executing program 4 (id=6308): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000440)="4800000014001d1009074beafd0d8c560a84606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) 1.947106988s ago: executing program 0 (id=6309): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x0, &(0x7f00005c0000/0x2000)=nil) ioctl$UFFDIO_COPY(r0, 0xc020aa08, 0x0) 1.778861208s ago: executing program 4 (id=6310): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x0, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 1.626819072s ago: executing program 3 (id=6311): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x64, 0x0, 0x601, 0x0, 0x0, {}, [{{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}}, 0x4010) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="005087ca76000000300012800b00010067656e6576650000200002800800012000000000140007"], 0x50}, 0x1, 0x2}, 0x0) 1.399501641s ago: executing program 4 (id=6312): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 1.095031097s ago: executing program 3 (id=6313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000012002102000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080003"], 0x28}}, 0x0) 718.254775ms ago: executing program 0 (id=6314): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=@can={{}, 0x7f, 0x0, 0x0, 0x0, "15d800ac7d1e49d1"}, 0x10}, 0x2}, 0x0) 662.3531ms ago: executing program 1 (id=6315): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x0, @private1}, @in={0x2, 0x4e24, @local}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000000180)=0x10) 557.0629ms ago: executing program 3 (id=6316): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000bc0)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000007c0), 0x0, 0x0, 0x0) 57.162438ms ago: executing program 1 (id=6317): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000780)={r2}, 0x8) 0s ago: executing program 4 (id=6318): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x3e3f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x23, 0x5, 0x0) fremovexattr(r1, &(0x7f0000000380)=ANY=[]) kernel console output (not intermixed with test programs): ing to 0x8F [ 1233.613715][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1233.634517][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1233.647902][ T5243] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1233.664999][ T5243] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1233.677570][ T5243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.736171][ T5243] usb 2-1: config 0 descriptor?? [ 1234.201601][ T5243] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1234.255697][ T5243] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 1234.337643][ T5243] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1234.498357][ T5243] usb 2-1: USB disconnect, device number 42 [ 1234.674867][T19073] loop0: detected capacity change from 0 to 4096 [ 1234.749285][T19073] EXT4-fs: Ignoring removed nobh option [ 1234.758781][T19073] EXT4-fs: Ignoring removed i_version option [ 1234.767769][T18976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.934564][T18976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.968399][T19073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1235.040843][T18399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.048646][T18399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.212354][T18399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.220055][T18399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.415230][T18976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1235.429271][T18976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1235.470066][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1235.470145][ T29] audit: type=1800 audit(1723768585.797:315): pid=19073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5714" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1235.673967][T16296] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1235.758700][T17551] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.874868][T16296] usb 5-1: Using ep0 maxpacket: 16 [ 1235.944398][T16296] usb 5-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 1235.961106][T16296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.969408][T16296] usb 5-1: Product: syz [ 1235.978557][T16296] usb 5-1: Manufacturer: syz [ 1235.986809][T16296] usb 5-1: SerialNumber: syz [ 1236.038273][T16904] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1236.086338][T16296] usb 5-1: config 0 descriptor?? [ 1236.136985][T16296] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 1236.311747][T16904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.437463][T16904] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 1236.447234][T16904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.455795][T16904] usb 4-1: Product: syz [ 1236.460197][T16904] usb 4-1: Manufacturer: syz [ 1236.469947][T16904] usb 4-1: SerialNumber: syz [ 1236.534658][T16904] usb 4-1: config 0 descriptor?? [ 1236.643172][T16904] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1236.711353][T16296] gspca_sn9c20x: Write register 1000 failed -110 [ 1236.717953][T16296] gspca_sn9c20x: Device initialization failed [ 1236.730020][T16296] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 1236.744048][T16296] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1236.864980][ T25] usb 4-1: USB disconnect, device number 38 [ 1237.198410][T16296] usb 5-1: USB disconnect, device number 30 [ 1237.335061][T19105] loop1: detected capacity change from 0 to 128 [ 1237.412529][T19105] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1237.451159][T18976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.932271][T18976] veth0_vlan: entered promiscuous mode [ 1238.027119][T18976] veth1_vlan: entered promiscuous mode [ 1238.462976][T18976] veth0_macvtap: entered promiscuous mode [ 1238.564995][T18976] veth1_macvtap: entered promiscuous mode [ 1238.783132][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.794399][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.804623][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.815419][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.830860][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.842900][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.853031][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.866601][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.876800][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.887679][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.897866][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.908742][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.933211][T18976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.325312][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.343544][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.358207][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.372397][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.385848][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.399906][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.413430][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.429729][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.446821][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.458690][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.468907][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.483068][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.507304][T18976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.284338][ T1591] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1240.506254][ T1591] usb 1-1: Using ep0 maxpacket: 32 [ 1240.566582][ T1591] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.580505][ T1591] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1240.856681][ T1591] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1240.873719][ T1591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.888618][ T1591] usb 1-1: Product: syz [ 1240.896482][ T1591] usb 1-1: Manufacturer: syz [ 1240.904727][ T1591] usb 1-1: SerialNumber: syz [ 1240.977622][T19118] loop4: detected capacity change from 0 to 32768 [ 1241.040453][T18976] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.050424][T18976] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.059562][T18976] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.068723][T18976] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.327542][ T1591] usb 1-1: USB disconnect, device number 31 [ 1241.574372][T19128] loop1: detected capacity change from 0 to 128 [ 1241.625657][T19128] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1241.626739][T19128] FAT-fs (loop1): FAT read failed (blocknr 255) [ 1242.309198][T19134] loop3: detected capacity change from 0 to 8 [ 1242.343605][T19134] cramfs: Error -5 while decompressing! [ 1242.343676][T19134] cramfs: ffffffff94416718(26)->ffff8880747cc000(4096) [ 1242.343930][T19134] cramfs: Error -3 while decompressing! [ 1242.343982][T19134] cramfs: ffffffff94416732(26)->ffff8880747cd000(4096) [ 1242.344149][T19134] cramfs: Error -3 while decompressing! [ 1242.344203][T19134] cramfs: ffffffff9441674c(16)->ffff8880747ce000(4096) [ 1242.345345][T19134] cramfs: Error -5 while decompressing! [ 1242.345400][T19134] cramfs: ffffffff94416718(26)->ffff8880747cc000(4096) [ 1242.955241][T19142] unknown channel width for channel at 909000KHz? [ 1242.965524][T19142] unknown channel width for channel at 909000KHz? [ 1242.975475][T19142] unknown channel width for channel at 909000KHz? [ 1245.081921][ T25] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1245.327656][ T25] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1245.337242][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.417715][ T25] usb 4-1: config 0 descriptor?? [ 1246.539145][ T25] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 1246.672136][ T25] usb 4-1: USB disconnect, device number 39 [ 1247.603167][T19182] input: syz0 as /devices/virtual/input/input56 [ 1248.374529][T19173] loop0: detected capacity change from 0 to 32768 [ 1248.393640][T19173] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5751 (19173) [ 1248.487889][T19173] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1248.502202][T19173] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm [ 1248.516867][T19173] BTRFS info (device loop0): using free-space-tree [ 1248.532495][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1248.533610][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1248.552459][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1248.566114][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1248.585694][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1248.599112][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1248.612510][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1248.625802][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1248.656886][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1248.670293][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1248.684217][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1248.699446][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1248.713755][T19173] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1248.795717][T19173] BTRFS error (device loop0): open_ctree failed [ 1248.899848][T19178] loop1: detected capacity change from 0 to 4096 [ 1248.986762][T19178] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1249.368256][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.379691][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.598125][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.606737][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.837394][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.027551][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.139673][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.259886][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.615305][ T60] bridge_slave_1: left allmulticast mode [ 1251.629779][ T60] bridge_slave_1: left promiscuous mode [ 1251.638271][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.685657][ T60] bridge_slave_0: left allmulticast mode [ 1251.694968][ T60] bridge_slave_0: left promiscuous mode [ 1251.704893][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.288153][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.319740][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.352544][ T60] bond0 (unregistering): Released all slaves [ 1252.946730][ T60] hsr_slave_0: left promiscuous mode [ 1252.994488][ T60] hsr_slave_1: left promiscuous mode [ 1253.013113][T19227] loop3: detected capacity change from 0 to 512 [ 1253.035323][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.047010][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.066174][T19227] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1253.114340][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.125518][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.162082][T19227] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.5766: iget: bad i_size value: -67835469387268086 [ 1253.197449][ T60] veth1_macvtap: left promiscuous mode [ 1253.197896][T19227] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.5766: couldn't read orphan inode 15 (err -117) [ 1253.203380][ T60] veth0_macvtap: left promiscuous mode [ 1253.221395][ T60] veth1_vlan: left promiscuous mode [ 1253.226999][ T60] veth0_vlan: left promiscuous mode [ 1253.499099][T19227] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1253.512216][T19227] ext2 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1253.591355][T19231] loop1: detected capacity change from 0 to 2048 [ 1253.651965][T19227] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.5766: Directory hole found for htree leaf block 0 [ 1253.798409][T19237] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.5766: Directory hole found for htree leaf block 0 [ 1253.865851][T11782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1253.879315][T19231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1253.906455][T11782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1253.969459][T11782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1254.024649][T11782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1254.067574][T11782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1254.097679][T11782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1254.149892][T17654] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 1254.409463][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1254.455323][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1254.550402][T18652] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.764140][T19242] loop3: detected capacity change from 0 to 512 [ 1254.849330][T19242] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.5768: casefold flag without casefold feature [ 1254.902210][T19242] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.5768: couldn't read orphan inode 15 (err -117) [ 1255.039684][T19246] random: crng reseeded on system resumption [ 1255.239001][T19242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1255.341379][T19242] Process accounting resumed [ 1255.796109][T17654] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.165649][T19236] chnl_net:caif_netlink_parms(): no params data found [ 1256.301989][T11782] Bluetooth: hci3: command tx timeout [ 1257.064725][ T29] audit: type=1326 audit(1723768607.447:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.0.5778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a25799b9 code=0x7ffc0000 [ 1257.091428][ T29] audit: type=1326 audit(1723768607.487:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.0.5778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f37a25799b9 code=0x7ffc0000 [ 1257.119530][ T29] audit: type=1326 audit(1723768607.487:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.0.5778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a25799b9 code=0x7ffc0000 [ 1257.627424][T19277] loop0: detected capacity change from 0 to 256 [ 1257.642487][T19275] loop3: detected capacity change from 0 to 512 [ 1257.663810][T19277] exfat: Unknown parameter '01777777777777777777777' [ 1257.715686][T19275] EXT4-fs: Ignoring removed mblk_io_submit option [ 1257.779241][T19277] hْш3: renamed from lo (while UP) [ 1257.790082][T19275] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b856c118, mo2=0002] [ 1257.827985][T19275] System zones: 1-12 [ 1257.838407][T19236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.846416][T19236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.854810][T19236] bridge_slave_0: entered allmulticast mode [ 1257.871246][T19236] bridge_slave_0: entered promiscuous mode [ 1257.914286][T19236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.924582][T19236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.932580][T19236] bridge_slave_1: entered allmulticast mode [ 1257.941953][T19236] bridge_slave_1: entered promiscuous mode [ 1257.975491][T19275] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.5780: corrupted in-inode xattr: e_value size too large [ 1258.025291][T19275] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.5780: couldn't read orphan inode 15 (err -117) [ 1258.070943][T19275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1258.114804][T19265] loop4: detected capacity change from 0 to 4096 [ 1258.190345][T19236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.245863][T19236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.388306][T11782] Bluetooth: hci3: command tx timeout [ 1258.529476][T19236] team0: Port device team_slave_0 added [ 1258.531109][T17654] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.573978][T19236] team0: Port device team_slave_1 added [ 1258.857147][T19236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.864463][T19236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.895668][T19236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.290146][T19236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.305021][T19236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.336041][T19236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.917058][T19236] hsr_slave_0: entered promiscuous mode [ 1259.953774][T19236] hsr_slave_1: entered promiscuous mode [ 1259.985922][T19236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1259.994057][T19236] Cannot create hsr debugfs directory [ 1260.464502][T11782] Bluetooth: hci3: command tx timeout [ 1260.780408][T19306] loop4: detected capacity change from 0 to 2048 [ 1260.879302][T19306] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1261.729420][T19236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1262.057708][T19236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1262.257819][T19319] loop0: detected capacity change from 0 to 512 [ 1262.282427][T19236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1262.395418][T19236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1262.540004][T19319] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.5798: Parent and EA inode have the same ino 15 [ 1262.566996][T11782] Bluetooth: hci3: command tx timeout [ 1262.608304][T19319] EXT4-fs (loop0): Remounting filesystem read-only [ 1262.615419][T19319] EXT4-fs (loop0): 1 orphan inode deleted [ 1262.623347][T19319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1263.379306][T17551] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.578987][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1264.498812][T19316] loop4: detected capacity change from 0 to 32768 [ 1264.527625][T19236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.763779][T19236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.904615][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.912425][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.076244][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.084023][ T4316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.813481][T19344] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5807'. [ 1267.218513][T19348] loop4: detected capacity change from 0 to 1024 [ 1267.647553][T19236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.880269][T19355] loop3: detected capacity change from 0 to 128 [ 1268.220215][T19236] veth0_vlan: entered promiscuous mode [ 1268.305991][T19236] veth1_vlan: entered promiscuous mode [ 1268.699440][T19236] veth0_macvtap: entered promiscuous mode [ 1268.776207][T19236] veth1_macvtap: entered promiscuous mode [ 1268.948341][T19236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.959347][T19236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.969613][T19236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.980453][T19236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.990934][T19236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.001872][T19236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.012425][T19236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.023385][T19236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.038999][T19236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.050989][T19236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.063033][T19236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.074357][T19236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.090036][T19236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.157733][T19369] loop1: detected capacity change from 0 to 64 [ 1269.253078][T19236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.266524][T19236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.276724][T19236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.287521][T19236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.301169][T19236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.315177][T19236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.328785][T19236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.346778][T19236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.361448][T19236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.375414][T19236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.388944][T19236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.403039][T19236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.424942][T19236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.507431][T19371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5817'. [ 1269.516977][T19371] netlink: 'syz.3.5817': attribute type 7 has an invalid length. [ 1269.525324][T19371] netlink: 'syz.3.5817': attribute type 8 has an invalid length. [ 1269.535024][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5817'. [ 1269.618487][T19371] gretap0: entered promiscuous mode [ 1269.638384][T19371] batadv_slave_1: entered promiscuous mode [ 1269.680434][T19371] gretap0: left promiscuous mode [ 1269.693119][T19371] batadv_slave_1: left promiscuous mode [ 1269.820103][T19236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.832889][T19236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.845335][T19236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.861232][T19236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.150167][T19373] loop4: detected capacity change from 0 to 1024 [ 1270.185695][T19373] hfsplus: failed to load attributes file [ 1270.410031][T19377] loop0: detected capacity change from 0 to 2048 [ 1270.578649][T19383] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1270.599786][T19381] loop1: detected capacity change from 0 to 256 [ 1270.819094][T19383] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1270.833834][T19383] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1270.851601][T19381] FAT-fs (loop1): Directory bread(block 64) failed [ 1270.858580][T19381] FAT-fs (loop1): Directory bread(block 65) failed [ 1270.867101][T19381] FAT-fs (loop1): Directory bread(block 66) failed [ 1270.882312][T19381] FAT-fs (loop1): Directory bread(block 67) failed [ 1270.889218][T19381] FAT-fs (loop1): Directory bread(block 68) failed [ 1270.897373][T19381] FAT-fs (loop1): Directory bread(block 69) failed [ 1270.904438][T19381] FAT-fs (loop1): Directory bread(block 70) failed [ 1270.911335][T19381] FAT-fs (loop1): Directory bread(block 71) failed [ 1270.918300][T19381] FAT-fs (loop1): Directory bread(block 72) failed [ 1270.925539][T19381] FAT-fs (loop1): Directory bread(block 73) failed [ 1271.004741][T19383] Remounting filesystem read-only [ 1271.010429][ T11] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 1271.019079][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1271.029157][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1271.038934][ T11] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 1271.046899][ T11] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 1271.135673][ T11] NILFS (loop0): discard dirty page: offset=0, ino=12 [ 1271.146385][ T11] NILFS (loop0): discard dirty block: blocknr=17, size=1024 [ 1271.157292][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1271.169841][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1271.186952][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1271.372081][T19377] NILFS (loop0): mounting fs with errors [ 1271.415720][T19377] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1271.425909][T19377] Remounting filesystem read-only [ 1271.431320][T19377] NILFS (loop0): error -5 reading inode: ino=2 [ 1271.437739][T19377] NILFS (loop0): cannot mark inode dirty (ino=2): error -5 loading inode block [ 1271.552037][T18399] kworker/u8:3: attempt to access beyond end of device [ 1271.552037][T18399] loop1: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 1271.855313][T17551] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1271.864757][T17551] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 1271.871880][T17551] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 1271.879414][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1271.888788][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1271.903865][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1271.935518][T17551] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 1271.946870][T17551] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 1271.958931][T17551] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 1271.970025][T17551] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 1271.981091][T17551] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 1271.988648][T17551] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 1272.003387][T17551] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 1272.015726][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.028305][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.040889][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.144510][T17551] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 1272.151657][T17551] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 1272.159341][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.168667][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.177994][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.189107][T19392] loop4: detected capacity change from 0 to 2048 [ 1272.267210][T17551] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 1272.274431][T17551] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 1272.282185][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.291461][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.301115][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.363403][T17551] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 1272.370475][T17551] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 1272.378275][T17551] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 1272.386564][T17551] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1272.394415][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.407999][T17551] NILFS (loop0): discard dirty page: offset=131072, ino=3 [ 1272.416381][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.425724][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.435020][T17551] NILFS (loop0): discard dirty block: blocknr=46, size=1024 [ 1272.443170][T17551] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1272.503760][T19392] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1273.475436][ T5246] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1273.721864][ T5246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1273.733568][ T5246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 96, setting to 64 [ 1273.749222][ T5246] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1273.763413][ T5246] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1273.772915][ T5246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.869864][ T5246] usb 2-1: config 0 descriptor?? [ 1273.883261][T19410] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1273.884298][ T5243] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1274.193415][ T5243] usb 4-1: Using ep0 maxpacket: 8 [ 1274.216437][ T5243] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.315591][ T5243] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1274.328613][ T5243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1274.340208][ T5243] usb 4-1: SerialNumber: syz [ 1274.381515][ T25] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1274.426738][ T5243] cdc_ether 4-1:1.0: invalid descriptor buffer length [ 1274.437522][ T5243] usb 4-1: bad CDC descriptors [ 1274.465967][ T5246] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.003A/input/input57 [ 1274.578763][ T5246] uclogic 0003:28BD:0909.003A: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 1274.613936][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.624686][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1274.677017][T16888] usb 4-1: USB disconnect, device number 40 [ 1274.703136][ T25] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1274.712847][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1274.721233][ T25] usb 5-1: SerialNumber: syz [ 1274.748625][ T5246] usb 2-1: USB disconnect, device number 43 [ 1275.014541][ T25] usb 5-1: 0:2 : does not exist [ 1275.108156][ T25] usb 5-1: USB disconnect, device number 31 [ 1277.025213][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.037473][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.405400][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.413590][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.425025][ T73] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.661479][ T73] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.836210][ T73] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.065208][ T73] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.422194][ T73] bridge_slave_1: left allmulticast mode [ 1279.428195][ T73] bridge_slave_1: left promiscuous mode [ 1279.438890][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.494755][ T73] bridge_slave_0: left allmulticast mode [ 1279.504206][ T73] bridge_slave_0: left promiscuous mode [ 1279.514190][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.477693][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.519092][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.542769][ T73] bond0 (unregistering): Released all slaves [ 1280.927883][ T73] hsr_slave_0: left promiscuous mode [ 1280.939011][ T73] hsr_slave_1: left promiscuous mode [ 1280.958774][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1280.969060][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.983207][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1280.994486][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.139928][ T73] veth1_macvtap: left promiscuous mode [ 1281.145978][ T73] veth0_macvtap: left promiscuous mode [ 1281.152063][ T73] veth1_vlan: left promiscuous mode [ 1281.157614][ T73] veth0_vlan: left promiscuous mode [ 1281.838160][T19487] loop3: detected capacity change from 0 to 1024 [ 1282.017214][T19485] loop1: detected capacity change from 0 to 2048 [ 1282.185916][T19485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1282.202239][T19485] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1282.217508][T14664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1282.281170][T14664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1282.317435][T14664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1282.341286][T14664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1282.586065][T14664] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1282.597330][T14664] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1282.604061][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1282.759841][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1282.772258][T19486] loop4: detected capacity change from 0 to 4096 [ 1282.780455][T19486] ntfs3: Unknown parameter '0x0000000000000000' [ 1283.123201][T18652] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.856407][T19502] Bluetooth: MGMT ver 1.23 [ 1284.012797][T19505] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 1284.035542][T19507] loop4: detected capacity change from 0 to 128 [ 1284.062306][T19507] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1284.133430][T19507] sysv_free_block: trying to free block not in datazone [ 1284.414662][T19490] chnl_net:caif_netlink_parms(): no params data found [ 1284.463021][T17574] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1284.708337][T19515] Bluetooth: hci3: unsupported parameter 64512 [ 1284.719888][T19515] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 1284.736698][T14664] Bluetooth: hci3: command tx timeout [ 1284.824465][T19517] loop4: detected capacity change from 0 to 128 [ 1285.048714][T19517] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1285.154483][T19517] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1285.645253][ T1591] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1285.856990][ T1591] usb 1-1: config 0 has no interfaces? [ 1285.867451][ T1591] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1285.880195][ T1591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.010359][T17574] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1286.046328][ T1591] usb 1-1: config 0 descriptor?? [ 1286.368552][ T1591] usb 1-1: USB disconnect, device number 32 [ 1286.553202][T19514] loop1: detected capacity change from 0 to 32768 [ 1286.567832][T19514] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5870 (19514) [ 1286.607435][T19514] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1286.618443][T19514] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 1286.628281][T19514] BTRFS info (device loop1): using free-space-tree [ 1286.797606][T14664] Bluetooth: hci3: command tx timeout [ 1286.967444][T19490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.975870][T19490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.984153][T19490] bridge_slave_0: entered allmulticast mode [ 1286.993402][T19490] bridge_slave_0: entered promiscuous mode [ 1287.127317][T19490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.135301][T19490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.143356][T19490] bridge_slave_1: entered allmulticast mode [ 1287.159133][T19490] bridge_slave_1: entered promiscuous mode [ 1287.270164][T18652] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1287.526762][T19490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.536852][T19549] loop0: detected capacity change from 0 to 512 [ 1287.577070][T19490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.650048][T19551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5878'. [ 1287.660083][T19549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1287.660486][T19549] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1287.923323][T19490] team0: Port device team_slave_0 added [ 1288.025505][T19490] team0: Port device team_slave_1 added [ 1288.369052][T19490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.376443][T19490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.407786][T19490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.443571][T19490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.450887][T19490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.478783][T19490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.514476][T17551] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1288.884521][T14664] Bluetooth: hci3: command tx timeout [ 1289.011042][T19490] hsr_slave_0: entered promiscuous mode [ 1289.082508][T19490] hsr_slave_1: entered promiscuous mode [ 1289.163615][T19490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1289.171768][T19490] Cannot create hsr debugfs directory [ 1289.838854][T19578] program syz.0.5888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1289.985135][T19576] loop4: detected capacity change from 0 to 2048 [ 1290.857530][T19585] netlink: 'syz.1.5891': attribute type 5 has an invalid length. [ 1290.913666][T19490] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1290.949915][T14664] Bluetooth: hci3: command tx timeout [ 1291.022047][T19490] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1291.163303][T19490] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1291.228856][T19490] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1292.364295][T16296] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1292.523942][T19490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.594184][T16296] usb 1-1: Using ep0 maxpacket: 8 [ 1292.619614][T16296] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.633139][T16296] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.646530][T16296] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1292.657825][T16296] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1292.706471][T19490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.719581][T16296] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1292.732609][T16296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.744296][T16296] usb 1-1: Product: syz [ 1292.748702][T16296] usb 1-1: Manufacturer: syz [ 1292.756865][T16296] usb 1-1: SerialNumber: syz [ 1292.793757][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.801575][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.939491][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.947359][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.128700][T16296] cdc_ncm 1-1:1.0: bind() failure [ 1294.220388][T16296] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1294.237483][T16296] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1294.265613][T16296] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1294.295291][T16296] usb 1-1: USB disconnect, device number 33 [ 1294.385739][T19617] loop3: detected capacity change from 0 to 4096 [ 1294.397832][T19617] ntfs3: Unknown parameter '0xffffffffffffffff' [ 1295.357642][T19633] loop0: detected capacity change from 0 to 256 [ 1295.384295][T19633] exfat: Deprecated parameter 'utf8' [ 1295.568912][T19633] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1295.657060][T19490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.099689][T19490] veth0_vlan: entered promiscuous mode [ 1296.285121][T19490] veth1_vlan: entered promiscuous mode [ 1296.919952][T19490] veth0_macvtap: entered promiscuous mode [ 1297.059840][T19490] veth1_macvtap: entered promiscuous mode [ 1297.557938][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.568891][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.582478][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.596515][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.614174][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.629509][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.643017][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.659569][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.675200][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.690320][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.707818][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.723167][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.748017][T19490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.199208][T19642] loop4: detected capacity change from 0 to 32768 [ 1298.296156][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.309693][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.325920][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.338010][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.348261][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.359138][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.369304][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.380097][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.392594][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.404515][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.419808][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.431781][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.447126][T19490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.655043][T19490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.666697][T19490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.676031][T19490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.685218][T19490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.884604][T16296] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1298.995708][T19659] syzkaller1: entered promiscuous mode [ 1299.001848][T19659] syzkaller1: entered allmulticast mode [ 1299.108817][T16296] usb 4-1: Using ep0 maxpacket: 16 [ 1299.168313][T16296] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1299.181869][T16296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.190148][T16296] usb 4-1: Product: syz [ 1299.197544][T16296] usb 4-1: Manufacturer: syz [ 1299.202468][T16296] usb 4-1: SerialNumber: syz [ 1299.234811][T16296] usb 4-1: config 0 descriptor?? [ 1299.276590][T16296] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1299.548629][T16296] ssu100 4-1:0.0: probe with driver ssu100 failed with error -32 [ 1299.635242][T16296] usb 4-1: USB disconnect, device number 41 [ 1300.817781][T19676] loop3: detected capacity change from 0 to 1024 [ 1301.072381][T19676] hfsplus: bad catalog entry type [ 1301.419365][ T1049] hfsplus: b-tree write err: -5, ino 4 [ 1303.474612][T19696] input: syz1 as /devices/virtual/input/input58 [ 1304.649075][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f39ac00: rx timeout, send abort [ 1305.157738][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f39ac00: abort rx timeout. Force session deactivation [ 1305.460349][T19725] loop0: detected capacity change from 0 to 64 [ 1306.235112][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.244282][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.552621][T11782] Bluetooth: hci1: command 0x0406 tx timeout [ 1306.633196][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.644792][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.779676][T19742] dccp_v6_rcv: dropped packet with invalid checksum [ 1307.353070][T19751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5952'. [ 1307.696568][T14664] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 1307.759047][T19757] loop0: detected capacity change from 0 to 64 [ 1307.775446][T19757] hfs: get root inode failed [ 1307.841672][ T73] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.076847][ T73] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.259393][ T73] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.399826][ T73] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.711477][ T73] bridge_slave_1: left allmulticast mode [ 1308.717374][ T73] bridge_slave_1: left promiscuous mode [ 1308.727539][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.775040][ T73] bridge_slave_0: left allmulticast mode [ 1308.784366][ T73] bridge_slave_0: left promiscuous mode [ 1308.794500][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.432392][T19760] loop1: detected capacity change from 0 to 4096 [ 1309.461146][T19760] ntfs3: loop1: ino=3, Correct links count -> 2. [ 1309.652595][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.697999][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.728781][ T73] bond0 (unregistering): Released all slaves [ 1309.763452][T19760] ntfs3: loop1: failed to convert "0080" to cp874 [ 1309.777787][T19760] ntfs3: loop1: failed to convert name for inode 1e. [ 1310.228528][ T73] hsr_slave_0: left promiscuous mode [ 1310.259591][ T73] hsr_slave_1: left promiscuous mode [ 1310.269603][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.277364][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.287956][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.301004][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.328238][ T73] veth1_macvtap: left promiscuous mode [ 1310.334165][ T73] veth0_macvtap: left promiscuous mode [ 1310.340003][ T73] veth1_vlan: left promiscuous mode [ 1310.346050][ T73] veth0_vlan: left promiscuous mode [ 1311.548398][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1311.635433][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1312.816048][ T5243] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1313.046898][T11782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1313.069338][T11782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1313.126357][T11782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1313.192477][ T5243] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 1313.205497][ T5243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.256087][T11782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1313.304607][T11782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1313.332518][T11782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1313.446734][ T5243] usb 5-1: config 0 descriptor?? [ 1313.505658][ T5243] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1313.529633][T19774] loop1: detected capacity change from 0 to 32768 [ 1313.541138][T19774] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5962 (19774) [ 1313.610259][T19774] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1313.621076][T19774] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 1313.632498][T19774] BTRFS info (device loop1): using free-space-tree [ 1314.320160][T18652] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1314.591948][ T5246] usb 5-1: USB disconnect, device number 32 [ 1314.791433][T19780] chnl_net:caif_netlink_parms(): no params data found [ 1315.420960][ T5246] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1315.506761][T11782] Bluetooth: hci3: command tx timeout [ 1315.651499][ T5246] usb 4-1: Using ep0 maxpacket: 8 [ 1315.694851][ T5246] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 1315.703946][ T5246] usb 4-1: config 150 has no interface number 0 [ 1315.710735][ T5246] usb 4-1: config 150 interface 204 has no altsetting 0 [ 1315.717950][ T5246] usb 4-1: config 150 interface 1 has no altsetting 0 [ 1315.784075][ T5246] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1315.793592][ T5246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.801984][ T5246] usb 4-1: Product: syz [ 1315.806380][ T5246] usb 4-1: Manufacturer: syz [ 1315.811373][ T5246] usb 4-1: SerialNumber: syz [ 1316.191218][ T5246] xr_serial 4-1:150.204: xr_serial converter detected [ 1316.237187][T19826] loop0: detected capacity change from 0 to 64 [ 1316.348142][T19780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.359333][T19780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.370731][T19780] bridge_slave_0: entered allmulticast mode [ 1316.379784][T19780] bridge_slave_0: entered promiscuous mode [ 1316.526969][T19780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.546818][T19780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.558038][T19780] bridge_slave_1: entered allmulticast mode [ 1316.569779][T19780] bridge_slave_1: entered promiscuous mode [ 1316.804040][ T5246] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1316.811025][ T5246] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1316.898943][ T5246] usb 4-1: USB disconnect, device number 42 [ 1316.907968][ T5246] xr_serial 4-1:150.204: device disconnected [ 1316.915401][T19780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.989103][T19780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.279809][T19780] team0: Port device team_slave_0 added [ 1317.308785][T19780] team0: Port device team_slave_1 added [ 1317.320138][ T5243] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1317.476586][T19780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.487284][T19780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1317.516991][T19780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.538384][T19780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.550741][T19780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1317.584826][T19780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.591681][T11782] Bluetooth: hci3: command tx timeout [ 1317.644379][ T5243] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.659965][ T5243] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.679738][ T5243] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1317.777929][ T5243] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1317.787618][ T5243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.799231][ T5243] usb 1-1: Product: syz [ 1317.808612][ T5243] usb 1-1: Manufacturer: syz [ 1317.817125][ T5243] usb 1-1: SerialNumber: syz [ 1318.246252][T19835] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1318.377624][T19780] hsr_slave_0: entered promiscuous mode [ 1318.567411][T19780] hsr_slave_1: entered promiscuous mode [ 1318.768583][T19780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1318.780225][T19780] Cannot create hsr debugfs directory [ 1318.975720][T19835] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1319.424838][ T5243] cdc_ncm 1-1:1.0: bind() failure [ 1319.554292][ T5243] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1319.679072][T11782] Bluetooth: hci3: command tx timeout [ 1319.754527][ T5243] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1319.869295][T19844] loop1: detected capacity change from 0 to 32768 [ 1319.887505][ T5243] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1319.954553][ T5243] usb 1-1: USB disconnect, device number 34 [ 1320.764616][T19852] loop3: detected capacity change from 0 to 2048 [ 1320.807454][T19852] EXT4-fs: Ignoring removed mblk_io_submit option [ 1320.862484][T19859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5988'. [ 1321.027627][T19852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1321.209136][T19780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1321.270125][T19780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1321.327190][T19780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1321.359420][T19852] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5983: bg 0: block 234: padding at end of block bitmap is not set [ 1321.379752][T19780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1321.426838][T19852] EXT4-fs (loop3): Remounting filesystem read-only [ 1321.717949][T19868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5990'. [ 1321.728853][T19868] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5990'. [ 1321.754369][T11782] Bluetooth: hci3: command tx timeout [ 1321.845799][T17654] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.363558][T19871] loop0: detected capacity change from 0 to 2048 [ 1322.506001][T19871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1322.522318][T19871] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1322.714041][T19780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1322.792508][ T29] audit: type=1804 audit(1723768673.147:319): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5991" name="/newroot/210/file0/file0/file0" dev="loop0" ino=13 res=1 errno=0 [ 1322.867707][T19780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1322.981013][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.988699][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.014689][T17551] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1323.173322][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.181102][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.286624][T19780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1323.304840][T19780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1323.696509][T19895] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1323.714651][T19895] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1323.805915][ T5243] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1324.104004][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.120109][ T5243] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1324.136631][ T5243] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1324.150766][ T5243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.204305][ T5243] usb 2-1: config 0 descriptor?? [ 1324.256108][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6001'. [ 1324.491082][T19907] netlink: 'syz.4.6002': attribute type 4 has an invalid length. [ 1324.765385][ T5243] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1324.844192][ T5243] plantronics 0003:047F:FFFF.003B: No inputs registered, leaving [ 1324.939316][ T5243] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1324.986475][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1325.072248][T19780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1325.254396][ T25] usb 2-1: USB disconnect, device number 44 [ 1325.740355][T19780] veth0_vlan: entered promiscuous mode [ 1325.888486][T19780] veth1_vlan: entered promiscuous mode [ 1326.226787][T19780] veth0_macvtap: entered promiscuous mode [ 1326.330650][T19780] veth1_macvtap: entered promiscuous mode [ 1326.338443][T19921] loop4: detected capacity change from 0 to 1024 [ 1326.417422][T19921] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1326.428899][T19921] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 1326.439166][T19921] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1326.449822][T19921] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 1326.617822][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.632184][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.645613][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.659636][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.673121][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.693610][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.708443][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.722628][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.732836][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.746842][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.760218][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.774352][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.799864][T19780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1326.868970][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1326.883596][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.901060][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1326.916401][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.929870][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1326.945064][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.958452][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1326.972905][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.996525][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1327.011773][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.025404][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1327.039503][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.057871][T19780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.199006][T19780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.211769][T19780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.224279][T19780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.236646][T19780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.252193][ T5246] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1327.474348][ T5246] usb 4-1: Using ep0 maxpacket: 8 [ 1327.531218][ T5246] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1327.540202][ T5246] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1327.550877][ T5246] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1327.642902][ T5246] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1327.652487][ T5246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.662591][ T5246] usb 4-1: Product: syz [ 1327.666996][ T5246] usb 4-1: Manufacturer: syz [ 1327.672267][ T5246] usb 4-1: SerialNumber: syz [ 1328.024100][T19940] loop0: detected capacity change from 0 to 128 [ 1328.057558][T19940] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1328.119378][T19940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1328.509898][ T5246] usb 4-1: 0:2 : does not exist [ 1328.715795][T16888] usb 4-1: USB disconnect, device number 43 [ 1329.868077][T19962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6025'. [ 1330.434667][T19969] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 1330.488761][T19969] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 1330.552454][T19972] loop4: detected capacity change from 0 to 256 [ 1330.645910][T19974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6030'. [ 1330.764805][T19972] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1331.109379][T19972] exFAT-fs (loop4): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 1331.109379][T19972] [ 1331.125315][T19972] exFAT-fs (loop4): Filesystem has been set read-only [ 1332.251261][T19998] loop0: detected capacity change from 0 to 512 [ 1332.377215][T19998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1332.393017][T19998] ext4 filesystem being mounted at /223/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.449112][T20000] loop1: detected capacity change from 0 to 512 [ 1332.511536][T20000] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1332.639413][T20000] EXT4-fs (loop1): 1 orphan inode deleted [ 1332.648856][T20000] EXT4-fs (loop1): 1 truncate cleaned up [ 1332.660028][T20000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1332.750262][T19998] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.6038: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1332.951838][T20000] EXT4-fs error (device loop1): ext4_lookup:1811: inode #15: comm syz.1.6039: iget: bad extra_isize 46 (inode size 256) [ 1333.007626][T20000] EXT4-fs (loop1): Remounting filesystem read-only [ 1333.109647][T19993] loop4: detected capacity change from 0 to 4096 [ 1333.162153][T17551] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.188359][T19993] ntfs3: Unknown parameter '1844674407370955161501777777777777777777777' [ 1333.358554][T18652] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.730185][T19995] loop3: detected capacity change from 0 to 4096 [ 1333.798868][T20011] loop1: detected capacity change from 0 to 256 [ 1333.828449][T20011] vfat: Bad value for 'uid' [ 1333.833389][T20011] vfat: Bad value for 'uid' [ 1334.228397][T19995] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1334.239764][ T5243] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1334.454979][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.467483][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.550478][T16888] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1334.604548][ T5243] usb 2-1: Using ep0 maxpacket: 32 [ 1334.626250][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.641522][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.644876][ T2547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.658951][ T5243] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1334.659572][ T2547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.671969][ T5243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.696220][ T5243] usb 2-1: config 0 descriptor?? [ 1334.719283][ T5243] hub 2-1:0.0: USB hub found [ 1334.904534][T16888] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1334.926114][T16888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.941315][T16888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.951950][T16888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1335.006129][ T5243] hub 2-1:0.0: 2 ports detected [ 1335.014636][ T5243] usb 2-1: selecting invalid altsetting 1 [ 1335.024055][T20021] loop4: detected capacity change from 0 to 128 [ 1335.024147][ T5243] hub 2-1:0.0: Using single TT (err -22) [ 1335.064565][T16888] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1335.085142][T16888] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1335.096902][T16888] usb 1-1: Manufacturer: syz [ 1335.162345][T16888] usb 1-1: config 0 descriptor?? [ 1335.247503][ T5243] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1335.254356][ T5243] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1335.373573][ T5243] usbhid 2-1:0.0: can't add hid device: -71 [ 1335.394553][ T5243] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1335.509509][ T5243] usb 2-1: USB disconnect, device number 45 [ 1335.700331][T16888] appleir 0003:05AC:8243.003C: unknown main item tag 0x0 [ 1335.730249][T16888] appleir 0003:05AC:8243.003C: No inputs registered, leaving [ 1335.767903][T16888] appleir 0003:05AC:8243.003C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1335.869481][ T29] audit: type=1326 audit(1723768686.287:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20022 comm="syz.3.6046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8691f799b9 code=0x0 [ 1335.927854][ T2547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.028883][ T5243] usb 1-1: USB disconnect, device number 35 [ 1336.107195][ T2547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.320019][ T2547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.518890][ T2547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.842150][ T2547] bridge_slave_1: left allmulticast mode [ 1336.848128][ T2547] bridge_slave_1: left promiscuous mode [ 1336.855064][ T2547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.891611][ T2547] bridge_slave_0: left allmulticast mode [ 1336.897522][ T2547] bridge_slave_0: left promiscuous mode [ 1336.904731][ T2547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.496136][ T2547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.565858][ T2547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.582963][ T2547] bond0 (unregistering): Released all slaves [ 1337.956601][ T2547] hsr_slave_0: left promiscuous mode [ 1337.965129][ T2547] hsr_slave_1: left promiscuous mode [ 1337.994924][ T2547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1338.006288][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.019424][ T2547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1338.029318][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.058222][ T2547] veth1_macvtap: left promiscuous mode [ 1338.067580][ T2547] veth0_macvtap: left promiscuous mode [ 1338.077268][ T2547] veth1_vlan: left promiscuous mode [ 1338.085454][ T2547] veth0_vlan: left promiscuous mode [ 1338.496678][T20029] loop4: detected capacity change from 0 to 512 [ 1338.696087][T20029] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1338.751450][T20034] loop1: detected capacity change from 0 to 512 [ 1338.804297][T20034] EXT4-fs: Ignoring removed oldalloc option [ 1338.827409][T20029] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1338.838743][T20034] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 1338.894618][T20029] System zones: 0-2, 18-18, 34-35 [ 1339.018541][T20029] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1339.261469][ T2547] team0 (unregistering): Port device team_slave_1 removed [ 1339.485621][T14664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1339.505412][ T2547] team0 (unregistering): Port device team_slave_0 removed [ 1339.532659][T14664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1339.630161][T14664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1339.647364][T14664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1339.659084][T14664] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1339.668739][T14664] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1339.717284][T17574] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 1339.996280][T20042] loop0: detected capacity change from 0 to 7 [ 1340.265757][T20042] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 1340.274795][T20042] loop0: partition table partially beyond EOD, truncated [ 1340.285799][T20042] loop0: p1 size 538856936 extends beyond EOD, truncated [ 1340.659720][T20044] loop4: detected capacity change from 0 to 2048 [ 1340.735721][T20035] loop3: detected capacity change from 0 to 4096 [ 1340.739931][ T29] audit: type=1326 audit(1723768691.207:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20046 comm="syz.0.6054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37a25799b9 code=0x0 [ 1340.857027][T20035] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1340.885976][T20050] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1341.083224][T20035] ntfs3: loop3: Failed to load $Extend (-22). [ 1341.089666][T20035] ntfs3: loop3: Failed to initialize $Extend. [ 1341.233956][ T29] audit: type=1800 audit(1723768691.687:322): pid=20044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6053" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1341.265213][T20039] chnl_net:caif_netlink_parms(): no params data found [ 1341.756140][T18653] Bluetooth: hci3: command tx timeout [ 1341.895835][T20058] loop1: detected capacity change from 0 to 1024 [ 1342.035941][T20063] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1342.096837][T20058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1342.392123][T20058] EXT4-fs (loop1): shut down requested (0) [ 1342.417826][ T29] audit: type=1800 audit(1723768692.807:323): pid=20058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6056" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1342.736173][T18652] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.806049][T20077] loop3: detected capacity change from 0 to 256 [ 1343.044629][ T2547] Bluetooth: hci4: Frame reassembly failed (-84) [ 1343.076198][T20079] Bluetooth: hci4: Frame reassembly failed (-84) [ 1343.126654][T20039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.138124][T20039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.149438][T20039] bridge_slave_0: entered allmulticast mode [ 1343.169420][T20039] bridge_slave_0: entered promiscuous mode [ 1343.296718][T20039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.305372][T20039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.313547][T20039] bridge_slave_1: entered allmulticast mode [ 1343.322884][T20039] bridge_slave_1: entered promiscuous mode [ 1343.664753][T20039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1343.766339][T20039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.828617][T14664] Bluetooth: hci3: command tx timeout [ 1343.999095][T20039] team0: Port device team_slave_0 added [ 1344.045212][T20039] team0: Port device team_slave_1 added [ 1344.313518][T20039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.321125][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.347648][T20039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.414588][T20039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.422064][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.448801][T20039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.643951][T20093] loop0: detected capacity change from 0 to 1024 [ 1344.706203][T20093] EXT4-fs: Ignoring removed oldalloc option [ 1344.777033][T20093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1344.788219][T20039] hsr_slave_0: entered promiscuous mode [ 1344.874410][T20039] hsr_slave_1: entered promiscuous mode [ 1344.939659][T20039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1344.951341][T20039] Cannot create hsr debugfs directory [ 1345.115332][T18653] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1345.672559][T17551] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.906742][T14664] Bluetooth: hci3: command tx timeout [ 1346.340031][T20103] loop4: detected capacity change from 0 to 256 [ 1346.588988][T20103] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1346.978586][T20039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1347.044239][T20039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1347.144200][T20039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1347.252123][T20039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1347.307195][T20112] loop3: detected capacity change from 0 to 512 [ 1347.448593][T20112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1347.466803][T20112] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1347.502415][T20117] loop0: detected capacity change from 0 to 512 [ 1347.588407][T20117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1347.605140][T20117] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1347.743460][ T44] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1347.861743][T17654] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.002851][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1348.003414][T14664] Bluetooth: hci3: command tx timeout [ 1348.016023][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1348.016206][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1348.016357][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1348.016590][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1348.016748][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.106296][ T44] usb 2-1: config 0 descriptor?? [ 1348.130448][T17551] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1348.607125][ T44] plantronics 0003:047F:FFFF.003D: No inputs registered, leaving [ 1348.678875][ T44] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1348.938252][T20039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1349.238794][T20039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1349.338359][T20138] loop4: detected capacity change from 0 to 64 [ 1349.368102][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.376187][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.452918][T20139] netlink: 'syz.0.6087': attribute type 34 has an invalid length. [ 1349.488094][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.496174][ T4316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.622571][T20138] hfs: request for non-existent node 131072 in B*Tree [ 1349.629578][T20138] hfs: request for non-existent node 131072 in B*Tree [ 1350.455554][T20146] loop3: detected capacity change from 0 to 256 [ 1350.648733][T20146] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1350.700206][T20149] loop4: detected capacity change from 0 to 256 [ 1350.752055][T20149] exfat: Deprecated parameter 'namecase' [ 1350.758580][T20149] exfat: Deprecated parameter 'namecase' [ 1350.880223][T16904] usb 2-1: USB disconnect, device number 46 [ 1351.055776][T20149] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1351.319697][T20154] loop1: detected capacity change from 0 to 256 [ 1351.394585][T20154] exfat: Deprecated parameter 'namecase' [ 1351.578217][T20154] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1351.946638][T20039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.188442][T20162] loop4: detected capacity change from 0 to 64 [ 1352.647085][T20039] veth0_vlan: entered promiscuous mode [ 1352.730429][T20039] veth1_vlan: entered promiscuous mode [ 1353.158177][T20039] veth0_macvtap: entered promiscuous mode [ 1353.248550][T20039] veth1_macvtap: entered promiscuous mode [ 1353.469349][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.483665][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.497056][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.513251][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.531527][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.546950][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.560364][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.574452][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.587846][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.601944][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.619337][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.634696][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.656525][T20039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1353.797762][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6105'. [ 1353.868179][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.882537][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.895902][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.912031][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.929994][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.945285][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.958684][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.972879][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.986494][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.003894][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.017360][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.041330][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.064858][T20039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.136642][T20039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.149174][T20039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.161881][T20039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.176995][T20039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.335795][T20186] loop1: detected capacity change from 0 to 1024 [ 1354.486334][T20186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1354.571494][T20189] loop0: detected capacity change from 0 to 2048 [ 1354.673440][T20189] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1355.056475][T18652] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.825837][T20231] loop1: detected capacity change from 0 to 32768 [ 1359.913337][T16904] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1359.918758][T20231] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop1": -EINTR [ 1360.113385][T16904] usb 5-1: Using ep0 maxpacket: 32 [ 1360.237455][T16904] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1360.247129][T16904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.324042][T16904] usb 5-1: config 0 descriptor?? [ 1360.376218][T16904] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1361.520225][T20268] loop3: detected capacity change from 0 to 512 [ 1361.533049][T16904] gspca_sunplus: reg_w_riv err -71 [ 1361.538661][T16904] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1361.599341][T16904] usb 5-1: USB disconnect, device number 33 [ 1361.602824][T20268] EXT4-fs: Ignoring removed i_version option [ 1361.615283][T20268] EXT4-fs: Ignoring removed nobh option [ 1361.644525][T20268] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1361.735872][T20268] EXT4-fs (loop3): 1 truncate cleaned up [ 1361.747583][T20268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1362.148081][T17654] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.209384][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.218155][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.349286][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.357824][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.470887][ T44] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1363.689116][ T44] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1363.699884][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1363.709281][ T44] usb 4-1: config 1 has no interface number 0 [ 1363.716029][ T44] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.727393][ T44] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1363.736841][ T44] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 97, using maximum allowed: 30 [ 1363.754154][ T44] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1363.864251][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1363.874075][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.882470][ T44] usb 4-1: Product: syz [ 1363.886883][ T44] usb 4-1: Manufacturer: syz [ 1363.891946][ T44] usb 4-1: SerialNumber: syz [ 1363.893906][T20301] loop1: detected capacity change from 0 to 64 [ 1364.439517][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.685110][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.797595][ T44] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 1364.804403][ T44] cdc_ncm 4-1:1.1: bind() failure [ 1364.836714][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.856822][ T44] usb 4-1: USB disconnect, device number 44 [ 1365.006436][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.303188][ T11] bridge_slave_1: left allmulticast mode [ 1365.309081][ T11] bridge_slave_1: left promiscuous mode [ 1365.319212][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.351718][ T11] bridge_slave_0: left allmulticast mode [ 1365.357622][ T11] bridge_slave_0: left promiscuous mode [ 1365.364493][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.019701][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1366.058253][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.075184][ T11] bond0 (unregistering): Released all slaves [ 1366.440522][ T11] hsr_slave_0: left promiscuous mode [ 1366.459886][ T11] hsr_slave_1: left promiscuous mode [ 1366.480283][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1366.488367][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.498004][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1366.505894][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.532220][ T11] veth1_macvtap: left promiscuous mode [ 1366.537917][ T11] veth0_macvtap: left promiscuous mode [ 1366.550199][ T11] veth1_vlan: left promiscuous mode [ 1366.559559][ T11] veth0_vlan: left promiscuous mode [ 1367.870163][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1368.005774][T18653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1368.016957][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1368.233243][T18653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1368.243051][T18653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1368.262217][T18653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1368.273698][T18653] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1368.283225][T18653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1368.479964][T20328] netlink: 'syz.3.6156': attribute type 11 has an invalid length. [ 1369.423786][T20340] loop1: detected capacity change from 0 to 1024 [ 1369.528718][T20340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1369.877645][T20322] chnl_net:caif_netlink_parms(): no params data found [ 1369.939534][T18652] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.395120][T18653] Bluetooth: hci3: command tx timeout [ 1371.202069][T20364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6165'. [ 1371.519992][T20322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.537833][T20322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.549099][T20322] bridge_slave_0: entered allmulticast mode [ 1371.565161][T20322] bridge_slave_0: entered promiscuous mode [ 1371.587846][T20322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.599010][T20322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.620044][T20322] bridge_slave_1: entered allmulticast mode [ 1371.640178][T20322] bridge_slave_1: entered promiscuous mode [ 1371.901785][T20322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1371.979251][T20322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1372.288593][ T1591] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1372.370127][T20322] team0: Port device team_slave_0 added [ 1372.466548][T18653] Bluetooth: hci3: command tx timeout [ 1372.584051][ T1591] usb 2-1: Using ep0 maxpacket: 32 [ 1372.609058][ T1591] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.625568][ T1591] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.640049][ T1591] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1372.654852][ T1591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.684863][T20322] team0: Port device team_slave_1 added [ 1372.719650][ T1591] hub 2-1:4.0: USB hub found [ 1373.019951][ T1591] hub 2-1:4.0: 2 ports detected [ 1373.088164][T20322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1373.096057][T20322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1373.122896][T20322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1373.216060][ T1591] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1373.226220][ T1591] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1373.319165][T20322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1373.329805][T20322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1373.360301][T20322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.415625][ T1591] usb 2-1: USB disconnect, device number 47 [ 1373.788612][T20322] hsr_slave_0: entered promiscuous mode [ 1373.872739][T20322] hsr_slave_1: entered promiscuous mode [ 1373.940821][T20322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1373.948620][T20322] Cannot create hsr debugfs directory [ 1374.541130][T18653] Bluetooth: hci3: command tx timeout [ 1375.354884][T20401] loop1: detected capacity change from 0 to 256 [ 1375.447015][T20401] Process accounting resumed [ 1375.452249][T20401] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1375.466158][T20401] FAT-fs (loop1): Filesystem has been set read-only [ 1375.541364][T20401] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1375.786847][T20403] loop4: detected capacity change from 0 to 2048 [ 1376.091053][T20403] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1376.151088][T20322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1376.232189][T20322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1376.399076][T20322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1376.482673][T20322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1376.519695][T20413] netlink: 'syz.1.6188': attribute type 3 has an invalid length. [ 1376.530265][T20413] netlink: 'syz.1.6188': attribute type 3 has an invalid length. [ 1376.627734][T18653] Bluetooth: hci3: command tx timeout [ 1377.429510][T20420] loop3: detected capacity change from 0 to 2048 [ 1377.519224][T20420] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1377.559680][T20420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1377.719826][T20322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.959529][T20322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1378.045593][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.053375][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.148282][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.156088][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.019152][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6201'. [ 1379.065097][T20444] bridge1: entered promiscuous mode [ 1379.097595][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6201'. [ 1379.830474][T20322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.733131][T20322] veth0_vlan: entered promiscuous mode [ 1380.764543][T20457] loop1: detected capacity change from 0 to 2048 [ 1380.905465][T20322] veth1_vlan: entered promiscuous mode [ 1380.963416][T20457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1381.009398][T20461] loop4: detected capacity change from 0 to 2048 [ 1381.123728][T20461] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1381.209142][ T25] kernel write not supported for file /snd/seq (pid: 25 comm: kworker/1:0) [ 1381.237359][T20467] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1381.250410][T20461] syz.4.6208: attempt to access beyond end of device [ 1381.250410][T20461] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1381.625274][T20322] veth0_macvtap: entered promiscuous mode [ 1381.719292][T18652] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.751618][T20322] veth1_macvtap: entered promiscuous mode [ 1382.106315][T20322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.118628][T20322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.130294][T20322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.142239][T20322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.153590][T20322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.165386][T20322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.176635][T20322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.192010][T20322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.202993][T20322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.213827][T20322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.224156][T20322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.234955][T20322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.250414][T20322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1382.374332][T20456] loop0: detected capacity change from 0 to 32768 [ 1382.416122][T20322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.430512][T20322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.447351][T20322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.461872][T20322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.475300][T20322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.491839][T20322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.506180][T20322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.520226][T20322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.533744][T20322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.547843][T20322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.561389][T20322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.575399][T20322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.600122][T20322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1382.613011][T20456] read_mapping_page failed! [ 1382.617774][T20456] jfs_mount: dbMount failed w/rc = -5 [ 1382.629055][T20456] Mount JFS Failure: -5 [ 1382.636400][T20456] jfs_mount failed w/return code = -5 [ 1382.735033][T20322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.748207][T20322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.759590][T20322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.772475][T20322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.701447][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6215'. [ 1384.281381][ T73] tipc: Subscription rejected, illegal request [ 1385.526678][T20501] loop1: detected capacity change from 0 to 128 [ 1386.400688][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1386.538553][T20485] loop3: detected capacity change from 0 to 32768 [ 1386.634792][T20485] [ 1386.634792][T20485] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1386.634792][T20485] [ 1386.675381][T20485] [ 1386.675381][T20485] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1386.675381][T20485] [ 1386.691924][T20485] [ 1386.691924][T20485] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1386.691924][T20485] [ 1386.710326][T20485] [ 1386.710326][T20485] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1386.710326][T20485] [ 1386.833279][T17654] [ 1386.833279][T17654] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1386.833279][T17654] [ 1386.901365][T17654] [ 1386.901365][T17654] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1386.901365][T17654] [ 1387.734029][T20519] loop0: detected capacity change from 0 to 2048 [ 1387.888614][T20526] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1388.496939][ T5243] kernel write not supported for file /nvram (pid: 5243 comm: kworker/0:5) [ 1389.226016][T20539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6227'. [ 1389.413782][T20542] loop0: detected capacity change from 0 to 512 [ 1389.665009][T20542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1389.681682][T20542] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1390.229151][T17551] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1390.280291][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.291828][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.291846][ T25] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1390.417572][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.430357][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.548002][ T25] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1390.557609][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.623006][ T25] usb 4-1: config 0 descriptor?? [ 1391.138247][ T25] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1391.749512][T20571] input: syz0 as /devices/virtual/input/input60 [ 1391.759611][T20571] input: failed to attach handler leds to device input60, error: -6 [ 1391.837288][ T25] usb 4-1: USB disconnect, device number 45 [ 1391.850215][ T1049] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.044440][ T1049] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.257664][ T1049] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.373355][ T1049] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.604737][ T1049] bridge_slave_1: left allmulticast mode [ 1392.610917][ T1049] bridge_slave_1: left promiscuous mode [ 1392.617596][ T1049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.671399][ T1049] bridge_slave_0: left allmulticast mode [ 1392.677391][ T1049] bridge_slave_0: left promiscuous mode [ 1392.684186][ T1049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.342126][ T1049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.367140][ T1049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.394857][ T1049] bond0 (unregistering): Released all slaves [ 1393.787953][ T1049] hsr_slave_0: left promiscuous mode [ 1393.798327][ T1049] hsr_slave_1: left promiscuous mode [ 1393.815013][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.825579][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.838797][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.848885][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.886963][ T1049] veth1_macvtap: left promiscuous mode [ 1393.896106][ T1049] veth0_macvtap: left promiscuous mode [ 1393.905497][ T1049] veth1_vlan: left promiscuous mode [ 1393.914369][ T1049] veth0_vlan: left promiscuous mode [ 1394.632095][T20580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6245'. [ 1395.095117][ T1049] team0 (unregistering): Port device team_slave_1 removed [ 1395.206647][ T1049] team0 (unregistering): Port device team_slave_0 removed [ 1396.553285][T20584] loop4: detected capacity change from 0 to 32768 [ 1396.568717][T20584] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6248 (20584) [ 1396.613428][T20584] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1396.631585][T20584] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 1396.643072][T20584] BTRFS info (device loop4): using free-space-tree [ 1396.985528][T14664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1397.006889][T14664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1397.032869][T14664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1397.076243][T14664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1397.089574][T14664] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1397.100661][T14664] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1397.280890][ T29] audit: type=1800 audit(1723768747.697:324): pid=20584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6248" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 1397.908544][T17574] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1397.938749][T20611] loop0: detected capacity change from 0 to 2048 [ 1398.125998][T20611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1398.244769][T20611] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6253: bg 0: block 234: padding at end of block bitmap is not set [ 1398.275800][T20611] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 1398.292310][T20611] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1398.292310][T20611] [ 1398.441710][T20604] chnl_net:caif_netlink_parms(): no params data found [ 1398.605077][T17551] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.265632][T18653] Bluetooth: hci3: command tx timeout [ 1399.814943][T20642] loop0: detected capacity change from 0 to 512 [ 1399.844296][T20642] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1399.967242][T20642] EXT4-fs (loop0): 1 truncate cleaned up [ 1399.978308][T20642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1400.169115][T20604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.179188][T20604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.187189][T20604] bridge_slave_0: entered allmulticast mode [ 1400.196617][T20604] bridge_slave_0: entered promiscuous mode [ 1400.325332][T17551] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.354465][T20604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.362332][T20604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.370279][T20604] bridge_slave_1: entered allmulticast mode [ 1400.379632][T20604] bridge_slave_1: entered promiscuous mode [ 1400.582192][T20604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.622166][T20567] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1400.642361][T20604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.778735][T20604] team0: Port device team_slave_0 added [ 1400.819900][T20604] team0: Port device team_slave_1 added [ 1400.857466][T20567] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1400.867096][T20567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.886358][T20567] usb 4-1: config 0 descriptor?? [ 1400.898525][T20567] cp210x 4-1:0.0: cp210x converter detected [ 1400.913192][ T25] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1401.065415][T20604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.077047][T20604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.106751][T20604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.197634][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.209215][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1401.220768][T20604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.224998][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1401.231630][T20604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.239005][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.268756][T20604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.302991][ T25] usb 2-1: config 0 descriptor?? [ 1401.354811][T18653] Bluetooth: hci3: command tx timeout [ 1401.415770][T20567] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1401.459291][T20567] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1401.673643][ T1591] usb 4-1: USB disconnect, device number 46 [ 1401.707135][T20604] hsr_slave_0: entered promiscuous mode [ 1401.711954][ T1591] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1401.766869][T20604] hsr_slave_1: entered promiscuous mode [ 1401.780014][ T1591] cp210x 4-1:0.0: device disconnected [ 1401.805251][ T25] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1401.820915][T20604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1401.828850][T20604] Cannot create hsr debugfs directory [ 1401.856810][ T25] plantronics 0003:047F:FFFF.003E: No inputs registered, leaving [ 1401.897824][T20666] netlink: 'syz.0.6273': attribute type 7 has an invalid length. [ 1401.909713][T20666] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6273'. [ 1401.948023][ T25] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1402.093966][ T25] usb 2-1: USB disconnect, device number 48 [ 1402.414692][T20668] loop0: detected capacity change from 0 to 256 [ 1402.590269][T20668] FAT-fs (loop0): Directory bread(block 64) failed [ 1402.604122][T20668] FAT-fs (loop0): Directory bread(block 65) failed [ 1402.614470][T20668] FAT-fs (loop0): Directory bread(block 66) failed [ 1402.624767][T20668] FAT-fs (loop0): Directory bread(block 67) failed [ 1402.635052][T20668] FAT-fs (loop0): Directory bread(block 68) failed [ 1402.645120][T20668] FAT-fs (loop0): Directory bread(block 69) failed [ 1402.655365][T20668] FAT-fs (loop0): Directory bread(block 70) failed [ 1402.668088][T20668] FAT-fs (loop0): Directory bread(block 71) failed [ 1402.679073][T20668] FAT-fs (loop0): Directory bread(block 72) failed [ 1402.689272][T20668] FAT-fs (loop0): Directory bread(block 73) failed [ 1402.805846][T20664] loop4: detected capacity change from 0 to 4096 [ 1403.319082][T20672] trusted_key: syz.1.6276 sent an empty control message without MSG_MORE. [ 1403.401597][ T29] audit: type=1800 audit(1723768753.797:325): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6272" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 1403.422741][ T29] audit: type=1800 audit(1723768753.827:326): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6272" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 1403.464708][T18653] Bluetooth: hci3: command tx timeout [ 1403.553918][T20604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1403.689404][T20604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1403.725132][T20604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1403.780313][T20604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1404.057497][T20682] loop0: detected capacity change from 0 to 256 [ 1404.770206][T20692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6283'. [ 1405.125470][T20604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.246043][T20604] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.381571][T18399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.389338][T18399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.506556][T18653] Bluetooth: hci3: command tx timeout [ 1405.508903][T18399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.519809][T18399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.239357][T20707] loop1: detected capacity change from 0 to 4096 [ 1407.274625][T20707] EXT4-fs: Ignoring removed nobh option [ 1407.284070][T20707] EXT4-fs: Ignoring removed i_version option [ 1407.432891][T20707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1407.771449][T20730] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1407.771449][T20730] The task syz.0.6294 (20730) triggered the difference, watch for misbehavior. [ 1407.806393][T20604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.022438][ T25] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1408.218143][T18652] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.281936][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1408.365673][ T25] usb 4-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78 [ 1408.375498][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.384711][ T25] usb 4-1: Product: syz [ 1408.389190][ T25] usb 4-1: Manufacturer: syz [ 1408.396694][ T25] usb 4-1: SerialNumber: syz [ 1408.425290][T20604] veth0_vlan: entered promiscuous mode [ 1408.429234][ T25] usb 4-1: config 0 descriptor?? [ 1408.450226][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1408.544294][T20604] veth1_vlan: entered promiscuous mode [ 1408.775392][T20604] veth0_macvtap: entered promiscuous mode [ 1408.818763][ T25] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1408.854913][T20604] veth1_macvtap: entered promiscuous mode [ 1408.895084][ T25] usb 4-1: USB disconnect, device number 47 [ 1409.055522][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.069713][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.086106][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.100207][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.117477][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.131293][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.139383][T20739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6300'. [ 1409.141352][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.141446][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.141544][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.150912][T20739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6300'. [ 1409.164189][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.217181][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.228663][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.247357][T20604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.297900][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.313031][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.329157][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.343904][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.357797][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.371962][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.385382][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.399392][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.412868][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.429492][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.443619][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.457938][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.475645][T20604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.572646][T20604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.582293][T20604] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.591415][T20604] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.601129][T20604] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.204951][T20749] netlink: 'syz.1.6303': attribute type 3 has an invalid length. [ 1410.383581][T14664] Bluetooth: hci4: command 0x1003 tx timeout [ 1410.389954][T18653] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1410.761690][T20756] loop3: detected capacity change from 0 to 512 [ 1410.913367][T20756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1410.926959][T20756] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1411.144154][ T25] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1411.414307][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.425199][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1411.434705][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.470096][ T25] usb 2-1: config 0 descriptor?? [ 1411.543493][T17654] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.751816][ T44] usb 2-1: USB disconnect, device number 49 [ 1413.160134][T20796] loop3: detected capacity change from 0 to 1024 [ 1413.381890][T20796] hfsplus: catalog searching failed [ 1413.389846][T20801] ===================================================== [ 1413.400477][T20801] BUG: KMSAN: uninit-value in uprobe_mmap+0x2150/0x24d0 [ 1413.416503][T20801] uprobe_mmap+0x2150/0x24d0 [ 1413.427111][T20801] mmap_region+0x3dfb/0x4420 [ 1413.435256][T20801] do_mmap+0xebc/0x1b10 [ 1413.440114][T20801] vm_mmap_pgoff+0x23b/0x5a0 [ 1413.448222][T20801] ksys_mmap_pgoff+0x5cb/0x7a0 [ 1413.456684][T20801] __x64_sys_mmap+0x1a8/0x240 [ 1413.464033][T20801] x64_sys_call+0x1bfb/0x3ba0 [ 1413.468917][T20801] do_syscall_64+0xcd/0x1e0 [ 1413.473748][T20801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.479856][T20801] [ 1413.483811][T20801] Uninit was created at: [ 1413.488291][T20801] __kmalloc_cache_noprof+0x4f0/0xb00 [ 1413.497355][T20801] __netdev_adjacent_dev_insert+0x1c7/0xe90 [ 1413.506865][T20801] __netdev_upper_dev_link+0x65d/0xa20 [ 1413.518337][T20801] netdev_upper_dev_link+0x78/0xb0 [ 1413.527747][T20801] hsr_add_port+0x668/0xd90 [ 1413.535894][T20801] hsr_dev_finalize+0x720/0xa20 [ 1413.544330][T20801] hsr_newlink+0xbf8/0xcb0 [ 1413.548959][T20801] rtnl_newlink+0x2e8f/0x4200 [ 1413.557207][T20801] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1413.565901][T20801] netlink_rcv_skb+0x375/0x650 [ 1413.574343][T20801] rtnetlink_rcv+0x34/0x40 [ 1413.578970][T20801] netlink_unicast+0xf52/0x1260 [ 1413.587392][T20801] netlink_sendmsg+0x10da/0x11e0 [ 1413.595911][T20801] __sock_sendmsg+0x30f/0x380 [ 1413.604126][T20801] __sys_sendto+0x685/0x830 [ 1413.608830][T20801] __x64_sys_sendto+0x125/0x1d0 [ 1413.619543][T20801] x64_sys_call+0x3373/0x3ba0 [ 1413.628473][T20801] do_syscall_64+0xcd/0x1e0 [ 1413.636669][T20801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.646140][T20801] [ 1413.648587][T20801] CPU: 0 UID: 0 PID: 20801 Comm: syz.4.6318 Not tainted 6.11.0-rc3-syzkaller-00144-ge724918b3786 #0 [ 1413.662989][T20801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1413.676560][T20801] ===================================================== [ 1413.686998][T20801] Disabling lock debugging due to kernel taint [ 1413.696752][T20801] Kernel panic - not syncing: kmsan.panic set ... [ 1413.703316][T20801] CPU: 0 UID: 0 PID: 20801 Comm: syz.4.6318 Tainted: G B 6.11.0-rc3-syzkaller-00144-ge724918b3786 #0 [ 1413.715785][T20801] Tainted: [B]=BAD_PAGE [ 1413.720042][T20801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1413.730245][T20801] Call Trace: [ 1413.733634][T20801] [ 1413.736660][T20801] dump_stack_lvl+0x216/0x2d0 [ 1413.741530][T20801] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1413.747572][T20801] dump_stack+0x1e/0x30 [ 1413.751926][T20801] panic+0x4e2/0xcd0 [ 1413.756015][T20801] ? kmsan_get_metadata+0xe1/0x1c0 [ 1413.761366][T20801] kmsan_report+0x2c7/0x2d0 [ 1413.766087][T20801] ? filter_irq_stacks+0x60/0x1a0 [ 1413.771277][T20801] ? __msan_warning+0x95/0x120 [ 1413.776313][T20801] ? uprobe_mmap+0x2150/0x24d0 [ 1413.781242][T20801] ? mmap_region+0x3dfb/0x4420 [ 1413.786193][T20801] ? do_mmap+0xebc/0x1b10 [ 1413.790697][T20801] ? vm_mmap_pgoff+0x23b/0x5a0 [ 1413.795621][T20801] ? ksys_mmap_pgoff+0x5cb/0x7a0 [ 1413.800733][T20801] ? __x64_sys_mmap+0x1a8/0x240 [ 1413.805752][T20801] ? x64_sys_call+0x1bfb/0x3ba0 [ 1413.810793][T20801] ? do_syscall_64+0xcd/0x1e0 [ 1413.815650][T20801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.821918][T20801] ? kmsan_get_metadata+0x13e/0x1c0 [ 1413.827323][T20801] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1413.833855][T20801] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1413.840112][T20801] ? kmsan_get_metadata+0x13e/0x1c0 [ 1413.845507][T20801] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1413.852022][T20801] ? kmsan_get_metadata+0x13e/0x1c0 [ 1413.857416][T20801] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1413.863433][T20801] ? down_read+0x6bb/0xb20 [ 1413.868037][T20801] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1413.874559][T20801] ? kmsan_get_metadata+0x13e/0x1c0 [ 1413.879953][T20801] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1413.885970][T20801] __msan_warning+0x95/0x120 [ 1413.890745][T20801] uprobe_mmap+0x2150/0x24d0 [ 1413.895524][T20801] mmap_region+0x3dfb/0x4420 [ 1413.900291][T20801] ? cap_mmap_addr+0x326/0x490 [ 1413.905253][T20801] do_mmap+0xebc/0x1b10 [ 1413.909574][T20801] ? kmsan_get_metadata+0x13e/0x1c0 [ 1413.914996][T20801] vm_mmap_pgoff+0x23b/0x5a0 [ 1413.919768][T20801] ksys_mmap_pgoff+0x5cb/0x7a0 [ 1413.924708][T20801] ? kmsan_get_metadata+0x13e/0x1c0 [ 1413.930118][T20801] __x64_sys_mmap+0x1a8/0x240 [ 1413.935000][T20801] x64_sys_call+0x1bfb/0x3ba0 [ 1413.939914][T20801] do_syscall_64+0xcd/0x1e0 [ 1413.944622][T20801] ? clear_bhb_loop+0x25/0x80 [ 1413.949495][T20801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.955595][T20801] RIP: 0033:0x7ffbc0b799b9 [ 1413.960142][T20801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1413.979935][T20801] RSP: 002b:00007ffbc18ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1413.988519][T20801] RAX: ffffffffffffffda RBX: 00007ffbc0d15f80 RCX: 00007ffbc0b799b9 [ 1413.996637][T20801] RDX: 0000000000000001 RSI: 0000000000400000 RDI: 0000000020000000 [ 1414.004741][T20801] RBP: 00007ffbc0be78d8 R08: 0000000000000003 R09: 0000000000000000 [ 1414.012843][T20801] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 1414.020942][T20801] R13: 0000000000000000 R14: 00007ffbc0d15f80 R15: 00007fff2d5d2658 [ 1414.029085][T20801] [ 1414.032441][T20801] Kernel Offset: disabled [ 1414.036825][T20801] Rebooting in 86400 seconds..