last executing test programs: 3.40208423s ago: executing program 3 (id=1624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c890}, 0x4) 3.158618681s ago: executing program 3 (id=1628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x84, 0x30, 0x1, 0x5000000, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x0, 0x2, 0x7, 0x8}, {}, 0x0, 0xffffffff}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x20068000) 3.104436477s ago: executing program 3 (id=1631): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0}) 2.356274693s ago: executing program 0 (id=1641): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_names\x00') lseek(r0, 0x9, 0x0) 2.022021102s ago: executing program 0 (id=1647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "5060dbe72f3e1159678f806a0000000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0) 1.857895526s ago: executing program 0 (id=1650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.628776157s ago: executing program 4 (id=1653): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xa6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.581327951s ago: executing program 0 (id=1654): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000240)='./file2\x00', 0x280000c, &(0x7f0000000000)=ANY=[], 0x1, 0x6f7, &(0x7f0000000640)="$eJzs3c1r5OYZAPBH47E9dmHjTfajLYEMCaSlprv2Gqd1L92WUnwIJU0PPZtdb9bsrDfYTnFCqb1N/4AecuopPfi29FBS6HGhPTcESq4+Bgq55OTbFGmk+fB82hmvneT3M5Je6f3Qq0cjaTTCKIBvrNX5KNfr9b3V+dd30/nDg6XaxMHSdJ5di4ipiChFlBuTSDYjy72dD/GddGFePum3ng82Vt789IvDzxpz5XzIypcG1ethqnvRfj5ENSIm8mm3yT4tfnR89R3t3elsr18jAyTNLUwD9koRuPjLyZuCcap32W/mPflvNh5U/STHLXBBJY3rZpe5iNmIqEQ0rvr52aH0bHs3fvvn3QEAAAA4qZlhBbpv1587iqPYjUtn1SUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Osrf/5/kQ6lIVyMp3v8/lS+LPP2V9Ml0Y/r0vDsCAAAAAAAAAGPw0lEcxW5cKubrSfbM/+W2Z/zfindiO9ZjK27EbqzFTuzEVixGxFxbQ1O7azs7W4tZzYgrA2reio971LzVv4+3B2/CP399mg0HAAAAAAAAgIurMiT/wWT3sj/Gauv5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXARJxERjkg1XivRclMoRUYmIqbTcfsTHRfrCeX+619Kk18KnZ94ZAAAAGK9K52xSGaHOc3txFLtxqZivJ9k9/7XsfrkS78Rm7MRG7EQt1uNufg+d3vWXDg+WaocHSw/Tobvdn31+oq5nLUbjt4fea/52VmIm7sVGtuRG3Ikk6plS0fm9xvTh4UHSo1+P0z4lP80N6M1EW/puOrr+UZb+c+evCOUTbeIplfrmzGW5k82ILDxu1bhc7Jnee2jo3ikPXNNilJq//FwZvKbeMX88eO2zx0r1/OXmXByPxK0oNffQtcGRiPjeP5789n5t88H9e9vzF2eTetobWuJ4JJbaInH9axSJ4RaySFxtzq/GL+M3MR+fT78RW7ERv4u12In1apG/ln+e0/Hc4Eh9Mts+98awnqTHZLV5/urVp2p09Cmq8YsstRYvRxJzcSk2IolHEZPr8Vr2dysWm2eD1h6+OsJRXxrhTNum8v1s0gxTzPQv+7fRmhyXNK6X2+Lads7NjoPLHUtaUXq+Z5SKa93o16M25e/mibSF9wdeH56145FYbIvEC/0+L42Q/rWejrdrmw+27q+9PeL6Xs2nxaezx4mk/mW25/TSPfx8VPKNu5yN096ln44074VmrzvjNZU/cWkodeVdbdZrHKm/ikdxN9qP1B/FcizHSlb6WlZ6suuKleZdb7bUeQ5P89JvWuXmg53271uPotb4PgTAxTb7g9mpmf/N/Gfmw5k/zdyfeb3y8+kfT784FZP/nvxJeWHi1dKLyd/jw/hD6/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4ve1333uwVqutb/VOlHpnJYNrrdWKN/INKtORSPJX5YxQOBmpwcGJ6Xzzv2w7HYnqqRos3tY4vHB1fF3tSiT7+Q5rLqkM3xfZW572RtrLSVfA08qn7nPxfqkzisaYEtXxNVh8YAeVGXpUFm9W68iaiIhehYecOCbGdQYCzsvNnYdv39x+970fbjxce2v9rfXNyeXllYWV5deWbt7bqK0vNMZtFZ7Jy2+BZ6F10W9fWop4aXjdAS9qBQAAAAAAAAAAAM7Q8f/oOIv/hXhy3hsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfKWtzkf5aSSxuHBjIZ0/PFiqpUORbpUsR0QpIpLfRyT/irgdjSHm2ppL+q3ng42VNz/94vCzVlvlonwpYr9vvdHs50NUI2Iin46rvTvD25tqJad7ZCfNyKQBe6UIHJy3/wcAAP//vGfxGQ==") open$dir(&(0x7f0000000080)='./file2\x00', 0x0, 0xb) 1.47577778s ago: executing program 2 (id=1656): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) 1.460755331s ago: executing program 4 (id=1657): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x1a) 1.346842461s ago: executing program 0 (id=1659): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) 1.257754899s ago: executing program 1 (id=1660): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x2800, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x0) 1.25510829s ago: executing program 2 (id=1661): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000380)={0x1f, @any, 0x7}, 0xa) 1.198160804s ago: executing program 4 (id=1662): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 1.183848436s ago: executing program 3 (id=1663): r0 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 1.086093364s ago: executing program 0 (id=1664): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 992.574012ms ago: executing program 2 (id=1665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@remote}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xc}, {{@in=@remote, 0x4d2, 0x33}, 0x2, @in6=@private0, 0x0, 0x5, 0x0, 0x1}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 958.160285ms ago: executing program 3 (id=1666): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) personality(0x8) 910.05063ms ago: executing program 1 (id=1667): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a000a402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 732.492306ms ago: executing program 3 (id=1668): r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 689.87255ms ago: executing program 2 (id=1669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x5}}, 0x1c}}, 0x0) 565.92253ms ago: executing program 1 (id=1670): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) 527.669484ms ago: executing program 4 (id=1671): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1200009, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave=Nelative:']) 424.185313ms ago: executing program 2 (id=1672): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xffff, @loopback, 0x4}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000280)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x18}}], 0x1, 0x40440c0) 363.781248ms ago: executing program 1 (id=1673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x38}}, 0x0) 305.988013ms ago: executing program 4 (id=1674): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) 209.718732ms ago: executing program 1 (id=1675): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7fffffffffffffff) 54.565815ms ago: executing program 2 (id=1676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}}, 0x0) 45.402656ms ago: executing program 4 (id=1677): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 0s ago: executing program 1 (id=1678): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x0, 0x7, 0xe4, 0x8}) kernel console output (not intermixed with test programs): CHANGE): team0: link becomes ready [ 72.646696][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.684106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.696221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.705518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.716658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.725497][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.732731][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.741399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.776291][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.788073][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.797535][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.807502][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.814738][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.823708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.834824][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.843616][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.852867][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.861858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.873928][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.907386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.927275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.950032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.962242][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.002269][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.012327][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.036695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.060492][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.069677][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 73.089489][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.096670][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.135659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.146833][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.154712][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 73.154732][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 73.160854][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 73.162174][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.183612][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.197502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.211915][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.224180][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.231405][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.239999][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 73.246853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.256260][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.264953][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.295901][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.321912][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.338305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.347960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.364804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.378088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.391971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.404807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.415138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.436702][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.447699][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.490293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.498194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.522101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.541437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.556386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.568533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.576875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.586982][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.610611][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.633500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.642810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.658795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.684786][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.717039][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.732025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.752978][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.786985][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.824906][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.844669][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.851908][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.927043][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.938167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.950244][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.960192][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.971195][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.980920][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.988050][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.997245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.006460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.025977][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.083816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.093560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.102696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.112470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.127227][ T4272] device veth0_vlan entered promiscuous mode [ 74.147288][ T4273] device veth0_vlan entered promiscuous mode [ 74.157037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.167017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.175721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.184600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.196661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.205488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.214224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.224368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.233102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.241312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.250641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.259858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.270039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.282695][ T4272] device veth1_vlan entered promiscuous mode [ 74.304177][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.312924][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.321478][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.330400][ T4273] device veth1_vlan entered promiscuous mode [ 74.367785][ T4268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.390744][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.420307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.428903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.438386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.447378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.456795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.466814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.475543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.484416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.493805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.503088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.517972][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.547638][ T4267] device veth0_vlan entered promiscuous mode [ 74.563181][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.578072][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.587391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.598577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.614072][ T4267] device veth1_vlan entered promiscuous mode [ 74.630289][ T4273] device veth0_macvtap entered promiscuous mode [ 74.645858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.656847][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.665750][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.674770][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.684328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.693484][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.710111][ T4272] device veth0_macvtap entered promiscuous mode [ 74.726399][ T4273] device veth1_macvtap entered promiscuous mode [ 74.768103][ T4272] device veth1_macvtap entered promiscuous mode [ 74.797547][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.806762][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.816245][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.824543][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.833736][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.842997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.852115][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.861671][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.870545][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.903649][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.920347][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.937592][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.960372][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.968313][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.980435][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.990164][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.998771][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.008430][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.018431][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.034714][ T4266] device veth0_vlan entered promiscuous mode [ 75.051893][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.069165][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.077906][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.116934][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.136897][ T4267] device veth0_macvtap entered promiscuous mode [ 75.152427][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.159932][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 75.167195][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.175749][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.184508][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.192873][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.208222][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.222348][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.232991][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 75.240553][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 75.240566][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 75.254623][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.267490][ T4267] device veth1_macvtap entered promiscuous mode [ 75.278787][ T4266] device veth1_vlan entered promiscuous mode [ 75.293430][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.302688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.311229][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 75.318368][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.326919][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.335821][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.348343][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.362098][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.371171][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.380296][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.415635][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.426353][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.440994][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.454085][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.466255][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.489598][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.497243][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.505306][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.516185][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.531287][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.543116][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.554897][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.566074][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.577841][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.615382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.625139][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.643245][ T4267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.652911][ T4267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.662484][ T4267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.671492][ T4267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.688223][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.709043][ T4266] device veth0_macvtap entered promiscuous mode [ 75.742431][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.758310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.792137][ T4266] device veth1_macvtap entered promiscuous mode [ 75.826207][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.840571][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.911087][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.921275][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.942006][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.956235][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.977225][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.994542][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.005907][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.023300][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.035453][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.056299][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.065052][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.078832][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.108600][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.138461][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.155988][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.167374][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.184992][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.197466][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.217824][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.235936][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.255175][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.277362][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.286458][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.296992][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.306078][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.328009][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.337658][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.395144][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.402886][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.425285][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.457459][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.483294][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.491637][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.530970][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.546506][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.554390][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.563815][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.580966][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.596074][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.660722][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.683101][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.686539][ T4268] device veth0_vlan entered promiscuous mode [ 76.705940][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.729930][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.746169][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.756766][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.764605][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.792778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.815969][ T4268] device veth1_vlan entered promiscuous mode [ 76.857215][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.870317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.898813][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.936100][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.977885][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.024013][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.048472][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.083800][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.111681][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.152057][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.185347][ T4268] device veth0_macvtap entered promiscuous mode [ 77.195236][ T26] audit: type=1326 audit(1771570108.718:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4361 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x7ffc0000 [ 77.231559][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 77.233192][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.281758][ T4268] device veth1_macvtap entered promiscuous mode [ 77.289390][ T26] audit: type=1326 audit(1771570108.778:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4361 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0cfc79c629 code=0x7ffc0000 [ 77.310400][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 77.312930][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 77.317338][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 77.361944][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.373779][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.383796][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.396015][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 77.403082][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.414038][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.424785][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.434797][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.445446][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.457673][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.471084][ T26] audit: type=1326 audit(1771570108.778:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4361 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x7ffc0000 [ 77.493895][ T26] audit: type=1326 audit(1771570108.778:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4361 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x7ffc0000 [ 77.499322][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.620503][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.660134][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.702090][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.756844][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.779474][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.815303][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.842449][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.861941][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.888244][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.910411][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.922636][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.946188][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.986091][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.005970][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.051625][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.084748][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.106775][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.389625][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.397546][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.449887][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.506925][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.551525][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.573155][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.017928][ T4407] loop3: detected capacity change from 0 to 4096 [ 79.049321][ T4274] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.078578][ T4407] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 79.249950][ T4274] usb 2-1: Using ep0 maxpacket: 16 [ 79.258503][ T4274] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.315212][ T4274] usb 2-1: config 1 interface 0 has no altsetting 0 [ 79.331912][ T4274] usb 2-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice= 0.40 [ 79.358605][ T4274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.368357][ T4274] usb 2-1: Product: syz [ 79.409500][ T4274] usb 2-1: Manufacturer: syz [ 79.414180][ T4274] usb 2-1: SerialNumber: syz [ 79.791301][ T4433] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 79.893368][ T4274] appletouch 2-1:1.0: Failed to request geyser raw mode [ 79.919265][ T4274] appletouch: probe of 2-1:1.0 failed with error -5 [ 79.987110][ T4274] usb 2-1: USB disconnect, device number 2 [ 80.174061][ T4446] comedi comedi0: Minor 47 could not be opened [ 80.193752][ T4448] netlink: 300 bytes leftover after parsing attributes in process `syz.2.46'. [ 80.402924][ T4454] rdma_rxe: rxe creation allowed on top of a real device only [ 80.503615][ T4456] loop0: detected capacity change from 0 to 1024 [ 80.757991][ T4466] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 80.826766][ T4466] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.997834][ T4472] loop4: detected capacity change from 0 to 8 [ 81.039795][ T4476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 81.113365][ T4476] tc_dump_action: action bad kind [ 81.289550][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 81.749303][ T126] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.791305][ T14] cfg80211: failed to load regulatory.db [ 81.952333][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.990951][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.046221][ T126] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 82.069251][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.087583][ T126] usb 3-1: SerialNumber: syz [ 82.284214][ T4514] overlayfs: unrecognized mount option "\\{7" or missing value [ 82.345842][ T126] usb 3-1: 0:2 : does not exist [ 82.476895][ T126] usb 3-1: USB disconnect, device number 2 [ 82.705752][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 82.812975][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.222670][ T4540] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 83.350127][ T4543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.94'. [ 83.394733][ T4540] CIFS mount error: No usable UNC path provided in device string! [ 83.394733][ T4540] [ 83.439449][ T4540] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 83.716864][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 83.726467][ T4555] netlink: 'syz.0.100': attribute type 21 has an invalid length. [ 83.759500][ T4555] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.805114][ T4555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.812779][ T4555] IPv6: NLM_F_CREATE should be set when creating new route [ 83.820173][ T4555] IPv6: NLM_F_CREATE should be set when creating new route [ 83.827444][ T4555] IPv6: NLM_F_CREATE should be set when creating new route [ 83.955133][ T26] audit: type=1326 audit(1771570115.478:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4564 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad319c629 code=0x7ffc0000 [ 84.063257][ T26] audit: type=1326 audit(1771570115.518:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4564 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ffad319c629 code=0x7ffc0000 [ 84.159264][ T26] audit: type=1326 audit(1771570115.518:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4564 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad319c629 code=0x7ffc0000 [ 84.246531][ T26] audit: type=1326 audit(1771570115.518:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4564 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad319c629 code=0x7ffc0000 [ 84.399271][ T4274] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.599259][ T4274] usb 4-1: Using ep0 maxpacket: 8 [ 84.621068][ T4274] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 84.658200][ T4274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.697203][ T4274] usb 4-1: config 0 has no interface number 0 [ 84.710084][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 84.729251][ T4274] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 84.759218][ T4274] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.812215][ T4274] usb 4-1: config 0 interface 52 has no altsetting 0 [ 84.857022][ T4274] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 84.881590][ T4274] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 84.895200][ T4274] usb 4-1: Manufacturer: syz [ 84.923440][ T4274] usb 4-1: config 0 descriptor?? [ 84.942305][ T4274] hub 4-1:0.52: bad descriptor, ignoring hub [ 84.948676][ T4274] hub: probe of 4-1:0.52 failed with error -5 [ 85.153649][ T4274] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input6 [ 85.428857][ T4615] loop0: detected capacity change from 0 to 256 [ 85.465955][ T4615] ======================================================= [ 85.465955][ T4615] WARNING: The mand mount option has been deprecated and [ 85.465955][ T4615] and is ignored by this kernel. Remove the mand [ 85.465955][ T4615] option from the mount to silence this warning. [ 85.465955][ T4615] ======================================================= [ 85.501071][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.528160][ T4618] process 'syz.4.130' launched './file0' with NULL argv: empty string added [ 85.625505][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.636547][ T22] usb 4-1: USB disconnect, device number 2 [ 85.702047][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.719574][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.804469][ T4626] capability: warning: `syz.2.134' uses deprecated v2 capabilities in a way that may be insecure [ 86.611594][ T26] audit: type=1326 audit(1771570118.138:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x7ffc0000 [ 86.679294][ T26] audit: type=1326 audit(1771570118.168:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x7ffc0000 [ 86.784054][ T26] audit: type=1326 audit(1771570118.168:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cfc75cece code=0x7ffc0000 [ 86.907857][ T26] audit: type=1326 audit(1771570118.168:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0cfc79d957 code=0x7ffc0000 [ 86.930196][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.008410][ T26] audit: type=1326 audit(1771570118.168:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0cfc79c629 code=0x7ffc0000 [ 87.030497][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.089252][ T26] audit: type=1326 audit(1771570118.168:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0cfc79d957 code=0x7ffc0000 [ 87.228339][ T4668] loop0: detected capacity change from 0 to 4096 [ 87.503012][ T4682] loop2: detected capacity change from 0 to 128 [ 87.595561][ T4682] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.620785][ T4684] loop1: detected capacity change from 0 to 2048 [ 87.640445][ T4682] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.793195][ T4691] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.976149][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 88.106542][ T4691] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 88.149336][ T4691] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 88.180554][ T4701] tmpfs: Bad value for 'mpol' [ 88.215378][ T4691] Remounting filesystem read-only [ 88.243316][ T4266] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 88.627194][ T4715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.177'. [ 88.650572][ T4715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.177'. [ 88.860578][ T4723] Illegal XDP return value 1759933467 on prog (id 8) dev N/A, expect packet loss! [ 89.304727][ T4741] netlink: 212 bytes leftover after parsing attributes in process `syz.4.190'. [ 89.782799][ T4760] ieee802154 phy0 wpan0: encryption failed: -90 [ 89.809260][ T4759] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.199'. [ 90.039777][ T4310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.255589][ T4310] usb 4-1: Using ep0 maxpacket: 8 [ 90.265132][ T4310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 90.298909][ T4310] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 90.324700][ T4310] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 90.349899][ T4773] loop2: detected capacity change from 0 to 8192 [ 90.388230][ T4310] usb 4-1: Product: syz [ 90.394615][ T4310] usb 4-1: Manufacturer: syz [ 90.413643][ T4773] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.437239][ T4310] usb 4-1: SerialNumber: syz [ 90.456123][ T4786] loop0: detected capacity change from 0 to 1024 [ 90.482377][ T4773] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 90.493560][ T4773] REISERFS (device loop2): using ordered data mode [ 90.501119][ T4773] reiserfs: using flush barriers [ 90.510375][ T4773] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.550442][ T4773] REISERFS (device loop2): checking transaction log (loop2) [ 90.682072][ T4310] usb 4-1: Invalid connection information received from device [ 90.765867][ T4792] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 90.896907][ T4773] REISERFS (device loop2): Using tea hash to sort names [ 90.921129][ T4310] usb 4-1: USB disconnect, device number 3 [ 90.929038][ T4773] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 91.002637][ T4773] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 91.103627][ T4798] netlink: 'syz.1.218': attribute type 1 has an invalid length. [ 91.132189][ T4798] netlink: 224 bytes leftover after parsing attributes in process `syz.1.218'. [ 91.294182][ T4802] loop4: detected capacity change from 0 to 64 [ 91.439205][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 91.439221][ T26] audit: type=1800 audit(1771570122.958:19): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.220" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 91.465536][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.622242][ T4845] loop1: detected capacity change from 0 to 512 [ 92.716112][ T4845] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.729297][ T4851] loop4: detected capacity change from 0 to 512 [ 92.736810][ T4851] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.759798][ T4845] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.762803][ T4853] loop3: detected capacity change from 0 to 256 [ 92.808677][ T4851] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 92.827979][ T4851] FAT-fs (loop4): Filesystem has been set read-only [ 92.860137][ T4853] exfat: Deprecated parameter 'namecase' [ 92.887241][ T4853] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 92.965055][ T4853] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 93.130696][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 93.296348][ T4859] loop0: detected capacity change from 0 to 512 [ 93.404307][ T4864] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 93.851350][ T4877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.255'. [ 94.147589][ T4890] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 94.418376][ T4899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.265'. [ 94.437390][ T4899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.265'. [ 94.703427][ T4907] loop1: detected capacity change from 0 to 256 [ 95.563487][ T4935] program syz.3.284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.684471][ T4939] loop4: detected capacity change from 0 to 1024 [ 96.122226][ T4953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.293'. [ 96.557361][ T4967] loop2: detected capacity change from 0 to 512 [ 96.621783][ T4967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.780219][ T4967] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.815860][ T4967] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.903197][ T4947] loop1: detected capacity change from 0 to 32768 [ 96.975486][ T4947] XFS (loop1): Mounting V5 Filesystem [ 97.029180][ T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.051796][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 97.069333][ T4255] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 97.185093][ T4947] XFS (loop1): Ending clean mount [ 97.250968][ T126] usb 1-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 97.261772][ T4255] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.304933][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.313922][ T4255] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.340210][ T4255] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 97.350654][ T126] usb 1-1: config 0 descriptor?? [ 97.363234][ T126] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 97.369652][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.398721][ T4255] hub 4-1:4.0: USB hub found [ 97.404892][ T4266] XFS (loop1): Unmounting Filesystem [ 97.509407][ T4996] loop4: detected capacity change from 0 to 4096 [ 97.545725][ T4996] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 97.605817][ T4255] hub 4-1:4.0: 2 ports detected [ 97.611493][ T4255] usb 4-1: selecting invalid altsetting 1 [ 97.617349][ T4255] hub 4-1:4.0: Using single TT (err -22) [ 97.776524][ T126] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 97.799273][ T126] pac7311: probe of 1-1:0.0 failed with error -71 [ 97.820200][ T4255] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 97.826873][ T4255] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 97.859353][ T126] usb 1-1: USB disconnect, device number 2 [ 97.929929][ T4255] usb 4-1: USB disconnect, device number 4 [ 98.017484][ T5001] netlink: 'syz.4.312': attribute type 29 has an invalid length. [ 98.049760][ T5001] netlink: 'syz.4.312': attribute type 29 has an invalid length. [ 98.432473][ T5009] loop1: detected capacity change from 0 to 2048 [ 98.525402][ T5009] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.629258][ T5009] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 188 not allocated in directory (ino 1376) [ 98.676456][ T5009] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 188 with unaligned lenght of impUse field [ 98.703047][ T4998] loop2: detected capacity change from 0 to 32768 [ 99.448415][ T5035] syz.3.327 (5035): drop_caches: 0 [ 100.356026][ T5021] loop4: detected capacity change from 0 to 40427 [ 100.419814][ T5021] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 100.428070][ T5021] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 100.450942][ T5062] loop2: detected capacity change from 0 to 2048 [ 100.480706][ T5064] loop0: detected capacity change from 0 to 8 [ 100.552521][ T5021] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.585769][ T5064] SQUASHFS error: Unable to read directory block [1d0:0] [ 100.736499][ T5062] loop2: unable to read partition table [ 100.764820][ T5062] loop2: partition table beyond EOD, truncated [ 100.785732][ T5062] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 100.806175][ T5021] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 100.816002][ T5021] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.038302][ T3637] loop2: unable to read partition table [ 101.054731][ T3637] loop2: partition table beyond EOD, truncated [ 101.689666][ T5086] loop0: detected capacity change from 0 to 4096 [ 101.750393][ T5086] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 101.906336][ T5086] ntfs3: loop0: failed to convert "c46c" to cp1251 [ 102.148255][ T5107] xt_connbytes: Forcing CT accounting to be enabled [ 102.499395][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.555718][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.035596][ T5136] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.374'. [ 103.489301][ T5153] loop0: detected capacity change from 0 to 128 [ 103.535530][ T5153] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 103.573451][ T5153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.963977][ T5168] loop4: detected capacity change from 0 to 256 [ 104.045170][ T5163] loop1: detected capacity change from 0 to 4096 [ 104.164717][ T5172] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.249646][ T5163] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 104.319268][ T5163] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 104.390495][ T5163] Remounting filesystem read-only [ 104.420276][ T5163] NILFS (loop1): error -5 truncating bmap (ino=12) [ 104.588433][ T4266] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 104.855009][ T5190] tc_dump_action: action bad kind [ 104.925994][ T5192] netlink: 'syz.4.401': attribute type 10 has an invalid length. [ 104.944046][ T5192] netlink: 2 bytes leftover after parsing attributes in process `syz.4.401'. [ 104.992259][ T5192] device bond0 entered promiscuous mode [ 104.998236][ T5192] device bond_slave_0 entered promiscuous mode [ 105.063089][ T5195] loop1: detected capacity change from 0 to 764 [ 105.076657][ T5192] device bond_slave_1 entered promiscuous mode [ 105.083299][ T4274] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.105292][ T5192] bridge0: port 3(bond0) entered blocking state [ 105.113487][ T5192] bridge0: port 3(bond0) entered disabled state [ 105.142691][ T5192] bridge0: port 3(bond0) entered blocking state [ 105.149552][ T5192] bridge0: port 3(bond0) entered forwarding state [ 105.163643][ T5195] rock: directory entry would overflow storage [ 105.178365][ T5198] loop0: detected capacity change from 0 to 2048 [ 105.181578][ T5195] rock: sig=0x4654, size=5, remaining=4 [ 105.265378][ T5201] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.277981][ T4274] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 105.317367][ T4274] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 105.359214][ T4274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.401754][ T4274] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 105.458019][ T5203] netlink: 196 bytes leftover after parsing attributes in process `syz.2.406'. [ 105.668937][ T5209] capability: warning: `syz.0.409' uses 32-bit capabilities (legacy support in use) [ 106.338869][ T5238] loop0: detected capacity change from 0 to 256 [ 106.424812][ T5238] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 106.437927][ T4274] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 106.450643][ T5239] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 54544 - 0 [ 106.454962][ T5241] loop2: detected capacity change from 0 to 512 [ 106.486318][ T5239] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 54544 - 0 [ 106.535753][ T5241] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.564137][ T5239] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 54544 - 0 [ 106.614853][ T5239] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 54544 - 0 [ 106.621721][ T5241] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.424: Directory block failed checksum [ 106.639662][ T4274] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 106.656967][ T4274] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 106.672912][ T5239] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 34029 - 0 [ 106.695250][ T4274] usb 4-1: USB disconnect, device number 5 [ 106.716154][ T5239] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 34029 - 0 [ 106.760773][ T5239] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 34029 - 0 [ 106.775478][ T5239] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 34029 - 0 [ 106.788305][ T5239] device geneve2 entered promiscuous mode [ 106.795588][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 107.020208][ T5252] loop0: detected capacity change from 0 to 256 [ 107.138780][ T5252] FAT-fs (loop0): Directory bread(block 64) failed [ 107.168656][ T5252] FAT-fs (loop0): Directory bread(block 65) failed [ 107.174706][ T5259] netlink: 'syz.2.430': attribute type 2 has an invalid length. [ 107.188061][ T5252] FAT-fs (loop0): Directory bread(block 66) failed [ 107.239313][ T5252] FAT-fs (loop0): Directory bread(block 67) failed [ 107.259736][ T5252] FAT-fs (loop0): Directory bread(block 68) failed [ 107.269781][ T5252] FAT-fs (loop0): Directory bread(block 69) failed [ 107.276449][ T5252] FAT-fs (loop0): Directory bread(block 70) failed [ 107.294798][ T5252] FAT-fs (loop0): Directory bread(block 71) failed [ 107.310018][ T5252] FAT-fs (loop0): Directory bread(block 72) failed [ 107.337110][ T5252] FAT-fs (loop0): Directory bread(block 73) failed [ 107.526682][ T5271] loop1: detected capacity change from 0 to 512 [ 107.554098][ T5271] FAT-fs (loop1): Unrecognized mount option "shortnutf8=1" or missing value [ 107.836904][ T5278] loop2: detected capacity change from 0 to 8 [ 107.850348][ T5278] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 107.869340][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.898428][ T4999] udevd[4999]: incorrect cramfs checksum on /dev/loop2 [ 107.928464][ T5278] cramfs: Error -3 while decompressing! [ 108.009232][ T5278] cramfs: ffffffff96d891e8(26)->ffff888051939000(4096) [ 108.016926][ T5278] cramfs: Error -3 while decompressing! [ 108.032488][ T4999] udevd[4999]: incorrect cramfs checksum on /dev/loop2 [ 108.059378][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 108.066651][ T22] usb 2-1: config 0 has an invalid interface number: 88 but max is 3 [ 108.070381][ T5278] cramfs: ffffffff96d89202(26)->ffff888051919000(4096) [ 108.079513][ T22] usb 2-1: config 0 has an invalid interface number: 250 but max is 3 [ 108.108295][ T5278] cramfs: Error -3 while decompressing! [ 108.113434][ T22] usb 2-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 108.127013][ T5278] cramfs: ffffffff96d8921c(16)->ffff888050545000(4096) [ 108.135482][ T22] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 108.148512][ T22] usb 2-1: config 0 has no interface number 0 [ 108.155060][ T5278] cramfs: Error -3 while decompressing! [ 108.172236][ T5278] cramfs: ffffffff96d891e8(26)->ffff888051939000(4096) [ 108.200138][ T22] usb 2-1: config 0 has no interface number 1 [ 108.221293][ T22] usb 2-1: config 0 interface 88 has no altsetting 0 [ 108.262030][ T22] usb 2-1: config 0 interface 250 has no altsetting 0 [ 108.309441][ T22] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 108.336565][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.364431][ T22] usb 2-1: config 0 descriptor?? [ 108.593557][ T22] usb 2-1: string descriptor 0 read error: -71 [ 108.615435][ T22] usb 2-1: USB disconnect, device number 3 [ 109.054918][ T5317] loop0: detected capacity change from 0 to 64 [ 109.088904][ T5320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.459'. [ 109.131637][ T5317] syz.0.457: attempt to access beyond end of device [ 109.131637][ T5317] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 109.188162][ T5317] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 109.338353][ T5317] syz.0.457: attempt to access beyond end of device [ 109.338353][ T5317] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 109.364273][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 109.375026][ T5317] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 109.711991][ T5339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.467'. [ 109.775105][ T5339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.467'. [ 110.515617][ T5372] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.484'. [ 110.705133][ T5380] netlink: 'syz.2.487': attribute type 1 has an invalid length. [ 110.729899][ T5380] netlink: 'syz.2.487': attribute type 3 has an invalid length. [ 110.746703][ T5380] netlink: 224 bytes leftover after parsing attributes in process `syz.2.487'. [ 110.915342][ T5386] loop2: detected capacity change from 0 to 1764 [ 111.109277][ T4274] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 111.301119][ T4274] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 111.308998][ T4274] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 111.356377][ T4274] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.379228][ T4274] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 111.423374][ T4274] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.468053][ T4274] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 111.500605][ T4274] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 111.521235][ T4274] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.541774][ T4274] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 111.611678][ T4274] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.635709][ T4274] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 111.652549][ T4274] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 111.682702][ T4274] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.762251][ T4274] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 111.791121][ T5414] (unnamed net_device) (uninitialized): down delay (8) is not a multiple of miimon (7), value rounded to 7 ms [ 111.811569][ T4274] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.839254][ T5416] netlink: 'syz.3.505': attribute type 3 has an invalid length. [ 111.856056][ T4274] usb 5-1: string descriptor 0 read error: -22 [ 111.878652][ T4274] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 111.889739][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.931412][ T4274] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 111.935964][ T5420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.506'. [ 112.063651][ T5423] loop2: detected capacity change from 0 to 256 [ 112.220854][ T4274] usb 5-1: USB disconnect, device number 2 [ 112.449260][ T4255] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.659217][ T4255] usb 2-1: Using ep0 maxpacket: 16 [ 112.667220][ T4255] usb 2-1: config 0 has an invalid interface number: 174 but max is 0 [ 112.686351][ T4255] usb 2-1: config 0 has no interface number 0 [ 112.708698][ T4255] usb 2-1: New USB device found, idVendor=106c, idProduct=b770, bcdDevice=7b.dd [ 112.718425][ T5445] netlink: 'syz.0.518': attribute type 21 has an invalid length. [ 112.736373][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.745703][ T5445] netlink: 128 bytes leftover after parsing attributes in process `syz.0.518'. [ 112.757888][ T4255] usb 2-1: Product: syz [ 112.782488][ T4255] usb 2-1: Manufacturer: syz [ 112.787160][ T4255] usb 2-1: SerialNumber: syz [ 112.792480][ T5445] netlink: 'syz.0.518': attribute type 4 has an invalid length. [ 112.826018][ T4255] usb 2-1: config 0 descriptor?? [ 112.862233][ T4255] qmi_wwan: probe of 2-1:0.174 failed with error -22 [ 112.869276][ T5445] netlink: 'syz.0.518': attribute type 5 has an invalid length. [ 112.899441][ T5445] netlink: 3 bytes leftover after parsing attributes in process `syz.0.518'. [ 112.955446][ T5452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.523'. [ 113.130867][ T4255] usb 2-1: USB disconnect, device number 4 [ 113.262754][ T26] audit: type=1326 audit(1771570144.788:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967679c629 code=0x7ffc0000 [ 113.344283][ T26] audit: type=1326 audit(1771570144.808:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f967675cece code=0x7ffc0000 [ 113.406068][ T26] audit: type=1326 audit(1771570144.808:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f967679d957 code=0x7ffc0000 [ 113.428222][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.513114][ T26] audit: type=1326 audit(1771570144.808:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f967679c629 code=0x7ffc0000 [ 113.589263][ T26] audit: type=1326 audit(1771570144.828:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f967679d957 code=0x7ffc0000 [ 113.611407][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.664992][ T26] audit: type=1326 audit(1771570144.828:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f967675cece code=0x7ffc0000 [ 113.767113][ T26] audit: type=1326 audit(1771570144.828:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967679c629 code=0x7ffc0000 [ 113.848837][ T26] audit: type=1326 audit(1771570144.828:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967679c629 code=0x7ffc0000 [ 113.931172][ T5471] infiniband syû: set active [ 113.936076][ T5471] infiniband syû: added bond_slave_0 [ 114.025651][ T5471] RDS/IB: syû: added [ 114.031468][ T5471] smc: adding ib device syû with port count 1 [ 114.038206][ T5471] smc: ib device syû port 1 has pnetid [ 114.170144][ T4255] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.303882][ T5491] comedi: No check for data length of config insn id 30 is implemented [ 114.339495][ T5491] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 114.369638][ T5491] comedi: Assuming n=15 is correct [ 114.379473][ T4255] usb 2-1: Using ep0 maxpacket: 16 [ 114.386820][ T4255] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 114.425981][ T5493] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 114.435731][ T4255] usb 2-1: config 0 has no interface number 0 [ 114.464128][ T5495] loop3: detected capacity change from 0 to 128 [ 114.471672][ T4255] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.543528][ T5495] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.543951][ T4255] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 114.572491][ T5495] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.679546][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 114.698804][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 114.704853][ T4255] usb 2-1: Product: syz [ 114.735376][ T4255] usb 2-1: SerialNumber: syz [ 114.775288][ T4255] usb 2-1: config 0 descriptor?? [ 114.825767][ T4255] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input7 [ 114.977991][ T5507] loop4: detected capacity change from 0 to 16 [ 115.014245][ T5507] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 115.106521][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.106637][ T4310] usb 2-1: USB disconnect, device number 5 [ 115.113803][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 115.123103][ T5507] overlayfs: upper fs is r/o, try multi-lower layers mount [ 115.180663][ T4310] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 116.689234][ T4274] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.719813][ T126] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.891284][ T4274] usb 3-1: config 1 has an invalid interface number: 188 but max is 0 [ 116.909359][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 116.916680][ T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 116.920209][ T4274] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.938532][ T126] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 116.958456][ T126] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 116.964546][ T4274] usb 3-1: config 1 has no interface number 0 [ 117.002192][ T4274] usb 3-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.013746][ T126] usb 1-1: Product: syz [ 117.024844][ T4274] usb 3-1: config 1 interface 188 has no altsetting 0 [ 117.044127][ T126] usb 1-1: Manufacturer: syz [ 117.048835][ T126] usb 1-1: SerialNumber: syz [ 117.067159][ T4274] usb 3-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 117.088074][ T4274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.106766][ T4274] usb 3-1: Product: syz [ 117.127075][ T4274] usb 3-1: Manufacturer: syz [ 117.132142][ T4274] usb 3-1: SerialNumber: syz [ 117.155361][ T4274] usb 3-1: cannot find UAC_HEADER [ 117.195436][ T4274] snd-usb-audio: probe of 3-1:1.188 failed with error -22 [ 117.256358][ T4999] udevd[4999]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.309476][ T126] usb 1-1: Invalid connection information received from device [ 117.339267][ T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.412857][ T4310] usb 3-1: USB disconnect, device number 3 [ 117.527836][ T126] usb 1-1: USB disconnect, device number 3 [ 117.541783][ T22] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 117.565652][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.595769][ T22] usb 2-1: config 0 descriptor?? [ 117.617964][ T22] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 118.036404][ T22] gspca_sunplus: reg_w_riv err -71 [ 118.041810][ T22] sunplus: probe of 2-1:0.0 failed with error -71 [ 118.077997][ T22] usb 2-1: USB disconnect, device number 6 [ 118.315241][ T5606] netlink: 5 bytes leftover after parsing attributes in process `syz.2.597'. [ 118.799297][ T26] audit: type=1326 audit(1771570150.318:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb9f9c629 code=0x7ffc0000 [ 118.882555][ T26] audit: type=1326 audit(1771570150.328:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb9f9c629 code=0x7ffc0000 [ 118.984296][ T5628] Cannot find set identified by id 0 to match [ 119.015692][ T26] audit: type=1326 audit(1771570150.328:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f5eb9f9c629 code=0x7ffc0000 [ 119.045897][ T5630] tmpfs: Bad value for 'nr_inodes' [ 119.089785][ T26] audit: type=1326 audit(1771570150.328:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb9f9c629 code=0x7ffc0000 [ 119.209231][ T26] audit: type=1326 audit(1771570150.328:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb9f9c629 code=0x7ffc0000 [ 119.307113][ T26] audit: type=1400 audit(1771570150.588:33): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5633 comm="syz.0.611" [ 119.538093][ T5641] loop1: detected capacity change from 0 to 4096 [ 119.573538][ T5648] loop2: detected capacity change from 0 to 256 [ 119.663433][ T5652] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 120.234070][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.442059][ T22] usb 4-1: config 4 has an invalid interface number: 28 but max is 0 [ 120.469176][ T22] usb 4-1: config 4 has no interface number 0 [ 120.498239][ T22] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 120.511844][ T5676] loop2: detected capacity change from 0 to 4096 [ 120.538807][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.547970][ T5676] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.567103][ T22] usb 4-1: Product: syz [ 120.588835][ T22] usb 4-1: Manufacturer: syz [ 120.602072][ T5676] EXT4-fs (loop2): Test dummy encryption mode enabled [ 120.628694][ T22] usb 4-1: SerialNumber: syz [ 120.654126][ T22] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.28/input/input8 [ 120.675607][ T5676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.853698][ T3622] bcm5974 4-1:4.28: could not read from device [ 120.914911][ T3622] bcm5974 4-1:4.28: could not read from device [ 120.935304][ T22] bcm5974 4-1:4.28: could not read from device [ 120.971302][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 120.981726][ T22] input: failed to attach handler mousedev to device input8, error: -5 [ 121.011640][ T3622] bcm5974 4-1:4.28: could not read from device [ 121.028777][ T22] usb 4-1: USB disconnect, device number 6 [ 121.044638][ T3622] bcm5974 4-1:4.28: could not read from device [ 121.297949][ T5703] loop4: detected capacity change from 0 to 256 [ 121.997669][ T5723] device wlan0 entered promiscuous mode [ 122.589612][ T5745] xt_hashlimit: max too large, truncated to 1048576 [ 122.639484][ T5745] No such timeout policy "syz1" [ 122.864560][ T5759] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 122.873121][ T5759] netlink: 55 bytes leftover after parsing attributes in process `syz.0.671'. [ 122.979199][ T4274] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.189228][ T4274] usb 3-1: Using ep0 maxpacket: 32 [ 123.208118][ T4274] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 123.248652][ T4274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.267216][ T4274] usb 3-1: Product: syz [ 123.285713][ T4274] usb 3-1: Manufacturer: syz [ 123.305962][ T4274] usb 3-1: SerialNumber: syz [ 123.314399][ T4274] usb 3-1: config 0 descriptor?? [ 123.332340][ T4274] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 123.479270][ T4315] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.674766][ T4315] usb 2-1: Using ep0 maxpacket: 16 [ 123.688467][ T4315] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 123.708783][ T4315] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 123.738361][ T4315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.749101][ T4274] gspca_topro: reg_w err -71 [ 123.757216][ T4315] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.787256][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.799345][ T4274] gspca_topro: Sensor soi763a [ 123.802023][ T4315] usb 2-1: Product: syz [ 123.808256][ T4315] usb 2-1: Manufacturer: syz [ 123.836543][ T4315] usb 2-1: SerialNumber: syz [ 123.848487][ T4274] usb 3-1: USB disconnect, device number 4 [ 123.890128][ T5787] netlink: 'syz.0.685': attribute type 8 has an invalid length. [ 123.899444][ T126] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 124.106563][ T126] usb 4-1: config index 0 descriptor too short (expected 897, got 27) [ 124.130180][ T126] usb 4-1: config 2 has an invalid interface number: 1 but max is -1 [ 124.138754][ T126] usb 4-1: config 2 has an invalid interface number: 1 but max is -1 [ 124.169493][ T126] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 124.212068][ T126] usb 4-1: config 2 has no interface number 0 [ 124.235862][ T126] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 124.267244][ T4315] usb 2-1: 0:2 : does not exist [ 124.287333][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.312264][ T4315] usb 2-1: USB disconnect, device number 7 [ 124.319539][ T126] usb 4-1: Product: syz [ 124.323753][ T126] usb 4-1: Manufacturer: syz [ 124.328378][ T126] usb 4-1: SerialNumber: syz [ 124.621623][ T4999] udevd[4999]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.642149][ T126] cdc_ncm 4-1:2.1: CDC Union missing and no IAD found [ 124.649904][ T5804] loop4: detected capacity change from 0 to 22 [ 124.657015][ T5804] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 124.677366][ T126] cdc_ncm 4-1:2.1: bind() failure [ 124.692319][ T126] usb 4-1: no audio or video endpoints found [ 124.713103][ T5804] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 124.731888][ T126] usb 4-1: USB disconnect, device number 7 [ 125.208993][ T5823] xt_hashlimit: max too large, truncated to 1048576 [ 125.325360][ T5829] loop3: detected capacity change from 0 to 256 [ 125.367518][ T5829] FAT-fs (loop3): Directory bread(block 64) failed [ 125.385272][ T5829] FAT-fs (loop3): Directory bread(block 65) failed [ 125.405621][ T5829] FAT-fs (loop3): Directory bread(block 66) failed [ 125.424780][ T5829] FAT-fs (loop3): Directory bread(block 67) failed [ 125.438834][ T5829] FAT-fs (loop3): Directory bread(block 68) failed [ 125.458544][ T5829] FAT-fs (loop3): Directory bread(block 69) failed [ 125.505137][ T5829] FAT-fs (loop3): Directory bread(block 70) failed [ 125.516123][ T5825] loop2: detected capacity change from 0 to 4096 [ 125.528917][ T5829] FAT-fs (loop3): Directory bread(block 71) failed [ 125.562277][ T5829] FAT-fs (loop3): Directory bread(block 72) failed [ 125.569706][ T5829] FAT-fs (loop3): Directory bread(block 73) failed [ 125.601463][ T5825] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 127.013160][ T5864] loop2: detected capacity change from 0 to 256 [ 127.128874][ T5864] FAT-fs (loop2): Directory bread(block 64) failed [ 127.158646][ T5840] loop0: detected capacity change from 0 to 32768 [ 127.186703][ T5864] FAT-fs (loop2): Directory bread(block 65) failed [ 127.222146][ T5864] FAT-fs (loop2): Directory bread(block 66) failed [ 127.247069][ T5864] FAT-fs (loop2): Directory bread(block 67) failed [ 127.269264][ T5864] FAT-fs (loop2): Directory bread(block 68) failed [ 127.282389][ T5840] XFS (loop0): Mounting V5 Filesystem [ 127.292915][ T5864] FAT-fs (loop2): Directory bread(block 69) failed [ 127.301741][ T5864] FAT-fs (loop2): Directory bread(block 70) failed [ 127.322693][ T5864] FAT-fs (loop2): Directory bread(block 71) failed [ 127.340360][ T5864] FAT-fs (loop2): Directory bread(block 72) failed [ 127.357279][ T5864] FAT-fs (loop2): Directory bread(block 73) failed [ 127.396353][ T5866] loop1: detected capacity change from 0 to 4096 [ 127.404251][ T5840] XFS (loop0): Ending clean mount [ 127.475269][ T5840] XFS (loop0): Quotacheck needed: Please wait. [ 127.486264][ T5866] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 127.595397][ T5840] XFS (loop0): Quotacheck: Done. [ 127.666484][ T5847] loop4: detected capacity change from 0 to 40427 [ 127.711657][ T5847] F2FS-fs (loop4): invalid crc value [ 127.756536][ T5847] F2FS-fs (loop4): Found nat_bits in checkpoint [ 127.942990][ T5847] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 127.963431][ T5847] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 127.965974][ T4273] XFS (loop0): Unmounting Filesystem [ 129.198149][ T5916] loop1: detected capacity change from 0 to 1024 [ 129.284901][ T5916] EXT4-fs: inline encryption not supported [ 129.401257][ T5916] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.740: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.478977][ T5916] EXT4-fs (loop1): Remounting filesystem read-only [ 129.486184][ T5916] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 129.494760][ T5916] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.740: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.542035][ T5916] EXT4-fs (loop1): Remounting filesystem read-only [ 129.557973][ T5916] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 129.581231][ T5916] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.740: Failed to acquire dquot type 0 [ 129.631887][ T5916] EXT4-fs (loop1): Remounting filesystem read-only [ 129.638863][ T5916] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 129.676765][ T5928] loop3: detected capacity change from 0 to 2048 [ 129.686143][ T5916] EXT4-fs (loop1): Remounting filesystem read-only [ 129.720760][ T5916] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.740: mark_inode_dirty error [ 129.746797][ T5928] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 129.762825][ T5934] comedi comedi4: bad chanlist[1]=0x00000009 chan=9 range length=2 [ 129.767654][ T5916] EXT4-fs (loop1): Remounting filesystem read-only [ 129.808832][ T5916] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 129.838552][ T5935] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.878868][ T5916] EXT4-fs (loop1): 1 orphan inode deleted [ 129.896139][ T11] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.919242][ T5916] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.942851][ T11] EXT4-fs (loop1): Remounting filesystem read-only [ 129.984371][ T11] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 130.015794][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 0 [ 130.057161][ T11] EXT4-fs (loop1): Remounting filesystem read-only [ 130.146294][ T5916] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm syz.1.740: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.169679][ T5941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.179030][ T5916] EXT4-fs (loop1): Remounting filesystem read-only [ 130.185833][ T5916] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 130.393536][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 130.412624][ T4266] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 130.497349][ T4266] EXT4-fs (loop1): Remounting filesystem read-only [ 130.502800][ T5938] loop4: detected capacity change from 0 to 32768 [ 130.522703][ T5948] netlink: 'syz.0.756': attribute type 6 has an invalid length. [ 130.534513][ T4266] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 130.576349][ T4266] EXT4-fs (loop1): Remounting filesystem read-only [ 130.597047][ T4266] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 130.665990][ T5938] JBD2: Ignoring recovery information on journal [ 130.675224][ T4266] EXT4-fs (loop1): Remounting filesystem read-only [ 130.888522][ T5938] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 130.957590][ T5957] loop3: detected capacity change from 0 to 64 [ 131.028674][ T5957] syz.3.759: attempt to access beyond end of device [ 131.028674][ T5957] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 131.055686][ T4310] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.113969][ T5957] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 131.236582][ T4268] ocfs2: Unmounting device (7,4) on (node local) [ 131.269133][ T4310] usb 3-1: Using ep0 maxpacket: 32 [ 131.277587][ T4310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.321800][ T4310] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 131.327407][ T5957] syz.3.759: attempt to access beyond end of device [ 131.327407][ T5957] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 131.340379][ T4310] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 131.401677][ T4310] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 131.406048][ T5957] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 131.419267][ T4310] usb 3-1: config 128 has no interface number 0 [ 131.425896][ T4310] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 131.489155][ T4310] usb 3-1: config 128 interface 127 has no altsetting 0 [ 131.521754][ T4310] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 131.549386][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.557448][ T4310] usb 3-1: Product: syz [ 131.579232][ T4310] usb 3-1: Manufacturer: syz [ 131.583900][ T4310] usb 3-1: SerialNumber: syz [ 131.612048][ T5951] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.919326][ T4310] usb 3-1: USB disconnect, device number 5 [ 132.150134][ T4999] udevd[4999]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.589222][ T4281] Bluetooth: hci0: command 0x0401 tx timeout [ 132.992354][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.999194][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.025425][ T6002] loop2: detected capacity change from 0 to 8192 [ 133.084153][ T6017] loop4: detected capacity change from 0 to 64 [ 133.736039][ T6035] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 133.890486][ T6030] xt_CT: No such helper "pptp" [ 133.914736][ T6039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.960216][ T6044] loop2: detected capacity change from 0 to 4096 [ 133.979004][ T6044] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 134.445562][ T6057] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.805'. [ 134.496732][ T6057] netlink: zone id is out of range [ 134.548581][ T6057] netlink: del zone limit has 4 unknown bytes [ 134.594697][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'. [ 135.010423][ T6073] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.813'. [ 135.079815][ T6077] netlink: 76 bytes leftover after parsing attributes in process `syz.1.815'. [ 135.249712][ T6081] netlink: 'syz.2.817': attribute type 10 has an invalid length. [ 135.302083][ T6081] netlink: 55 bytes leftover after parsing attributes in process `syz.2.817'. [ 136.211154][ T6111] netlink: 32 bytes leftover after parsing attributes in process `syz.2.832'. [ 136.239699][ T6111] netlink: 9 bytes leftover after parsing attributes in process `syz.2.832'. [ 136.248550][ T6111] netlink: 9 bytes leftover after parsing attributes in process `syz.2.832'. [ 136.310500][ T6111] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 136.423332][ T6119] Lens A: ================= START STATUS ================= [ 136.449232][ T6119] Lens A: Focus, Absolute: 0 [ 136.463684][ T6119] Lens A: ================== END STATUS ================== [ 136.692826][ T6129] loop1: detected capacity change from 0 to 256 [ 136.811522][ T6129] FAT-fs (loop1): Directory bread(block 64) failed [ 136.831257][ T6129] FAT-fs (loop1): Directory bread(block 65) failed [ 136.832515][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'. [ 136.838029][ T6129] FAT-fs (loop1): Directory bread(block 66) failed [ 136.949181][ T6129] FAT-fs (loop1): Directory bread(block 67) failed [ 136.973388][ T6129] FAT-fs (loop1): Directory bread(block 68) failed [ 137.012458][ T6129] FAT-fs (loop1): Directory bread(block 69) failed [ 137.043981][ T6129] FAT-fs (loop1): Directory bread(block 70) failed [ 137.055474][ T26] audit: type=1326 audit(1771570168.578:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad319c629 code=0x7ffc0000 [ 137.062384][ T6129] FAT-fs (loop1): Directory bread(block 71) failed [ 137.129223][ T26] audit: type=1326 audit(1771570168.578:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ffad319c629 code=0x7ffc0000 [ 137.157334][ T6135] overlayfs: conflicting options: userxattr,metacopy=on [ 137.172651][ T6129] FAT-fs (loop1): Directory bread(block 72) failed [ 137.211436][ T26] audit: type=1326 audit(1771570168.638:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad319c629 code=0x7ffc0000 [ 137.219313][ T6129] FAT-fs (loop1): Directory bread(block 73) failed [ 137.310320][ T26] audit: type=1326 audit(1771570168.638:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad319c629 code=0x7ffc0000 [ 137.355193][ T6141] loop0: detected capacity change from 0 to 4096 [ 137.411355][ T6141] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 137.459786][ T6145] tmpfs: Bad value for 'mpol' [ 137.564718][ T6141] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 137.661083][ T6149] netlink: 'syz.3.851': attribute type 10 has an invalid length. [ 138.049310][ T4315] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.253240][ T4315] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 138.290748][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.298913][ T4315] usb 5-1: Product: syz [ 138.337706][ T4315] usb 5-1: Manufacturer: syz [ 138.354315][ T4315] usb 5-1: SerialNumber: syz [ 138.377394][ T4315] usb 5-1: config 0 descriptor?? [ 138.603748][ T4315] int51x1: probe of 5-1:0.0 failed with error -22 [ 138.684079][ T6177] loop0: detected capacity change from 0 to 128 [ 138.812938][ T4310] usb 5-1: USB disconnect, device number 3 [ 139.101666][ T6188] loop1: detected capacity change from 0 to 256 [ 139.486899][ T6197] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 139.743558][ T6207] tc_dump_action: action bad kind [ 140.866227][ T6284] loop1: detected capacity change from 0 to 64 [ 141.939333][ T126] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.075767][ T6329] loop1: detected capacity change from 0 to 128 [ 142.082641][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 142.139232][ T126] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 142.156520][ T6329] EXT4-fs (loop1): Test dummy encryption mode enabled [ 142.164885][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.203133][ T6329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.214071][ T126] usb 1-1: Product: syz [ 142.234681][ T6329] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.258840][ T126] usb 1-1: Manufacturer: syz [ 142.292003][ T126] usb 1-1: SerialNumber: syz [ 142.338571][ T126] usb 1-1: config 0 descriptor?? [ 142.388194][ T126] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 142.499724][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 142.695402][ T6351] netlink: 'syz.1.915': attribute type 2 has an invalid length. [ 142.747948][ T6351] device .d entered promiscuous mode [ 142.792430][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'. [ 142.810694][ T126] gspca_sunplus: reg_r err -71 [ 142.815600][ T126] sunplus: probe of 1-1:0.0 failed with error -71 [ 142.851678][ T6354] netlink: 31 bytes leftover after parsing attributes in process `syz.4.917'. [ 142.861917][ T126] usb 1-1: USB disconnect, device number 4 [ 142.892353][ T26] audit: type=1400 audit(1771570174.418:38): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=6355 comm="syz.2.918" [ 142.899216][ T6354] netlink: 'syz.4.917': attribute type 3 has an invalid length. [ 142.999050][ T6354] netlink: 'syz.4.917': attribute type 2 has an invalid length. [ 143.039437][ T6354] netlink: 31 bytes leftover after parsing attributes in process `syz.4.917'. [ 144.133220][ T6364] loop1: detected capacity change from 0 to 32768 [ 144.200311][ T6364] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.922 (6364) [ 144.299672][ T6364] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.328667][ T6364] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 144.396026][ T6364] BTRFS info (device loop1): using free space tree [ 144.455069][ T6388] netlink: 'syz.3.933': attribute type 10 has an invalid length. [ 144.479382][ T6388] netlink: 55 bytes leftover after parsing attributes in process `syz.3.933'. [ 144.642367][ T6364] BTRFS info (device loop1): enabling ssd optimizations [ 144.901875][ T6406] kAFS: unable to lookup cell ' [ 144.901875][ T6406] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 144.901875][ T6406] ' [ 144.903349][ T4266] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.901252][ T6443] netlink: 'syz.3.948': attribute type 6 has an invalid length. [ 145.908971][ T6443] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.948'. [ 146.172734][ T6456] netlink: 52 bytes leftover after parsing attributes in process `syz.3.953'. [ 146.454093][ T6467] loop3: detected capacity change from 0 to 256 [ 146.489205][ T126] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.522359][ T6467] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 146.679655][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 146.687002][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 146.739338][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.762946][ T126] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 146.789705][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.829278][ T126] usb 2-1: Product: syz [ 146.833667][ T126] usb 2-1: Manufacturer: syz [ 146.838286][ T126] usb 2-1: SerialNumber: syz [ 146.904132][ T126] usb 2-1: config 0 descriptor?? [ 146.935592][ T126] usb 2-1: no audio or video endpoints found [ 146.955053][ T6480] JFS: discard option not supported on device [ 146.996806][ T6480] Mount JFS Failure: -22 [ 147.003865][ T6480] jfs_mount failed w/return code = -22 [ 147.201480][ T22] usb 2-1: USB disconnect, device number 8 [ 147.576787][ T6501] loop3: detected capacity change from 0 to 64 [ 147.927000][ T6512] netlink: 272 bytes leftover after parsing attributes in process `syz.4.981'. [ 149.074782][ T6559] ip6t_srh: unknown srh match flags 4000 [ 149.475346][ T6577] netlink: 'syz.4.1011': attribute type 10 has an invalid length. [ 149.494852][ T6577] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1011'. [ 149.588665][ T6579] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 149.782564][ T6586] Error parsing options; rc = [-22] [ 149.856489][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 150.213859][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1023'. [ 150.256354][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1023'. [ 150.284616][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 150.617212][ T6614] loop3: detected capacity change from 0 to 512 [ 150.696371][ T6614] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 151.696076][ T6651] loop4: detected capacity change from 0 to 64 [ 151.816208][ T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 151.819793][ T6649] loop1: detected capacity change from 0 to 8192 [ 151.857449][ T6649] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.954448][ T6659] loop0: detected capacity change from 0 to 8 [ 151.999372][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 152.028883][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.064751][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 152.113143][ T22] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 152.119888][ T6659] SQUASHFS error: lzo decompression failed, data probably corrupt [ 152.160472][ T6659] SQUASHFS error: Failed to read block 0x0: -5 [ 152.167540][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.200301][ T6659] SQUASHFS error: lzo decompression failed, data probably corrupt [ 152.205733][ T22] usb 4-1: Product: syz [ 152.228981][ T22] usb 4-1: Manufacturer: syz [ 152.229909][ T6659] SQUASHFS error: Failed to read block 0x0: -5 [ 152.258113][ T22] usb 4-1: SerialNumber: syz [ 152.272953][ T26] audit: type=1800 audit(1771570183.798:39): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1049" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 152.301878][ T22] usb 4-1: config 0 descriptor?? [ 152.592852][ T26] audit: type=1326 audit(1771570184.118:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x50000 [ 152.673619][ T26] audit: type=1326 audit(1771570184.118:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x50000 [ 152.719653][ T26] audit: type=1326 audit(1771570184.118:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x50000 [ 152.753852][ T22] usb 4-1: USB disconnect, device number 8 [ 152.806368][ T26] audit: type=1326 audit(1771570184.118:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x50000 [ 152.870185][ T26] audit: type=1326 audit(1771570184.118:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x50000 [ 152.912518][ T26] audit: type=1326 audit(1771570184.118:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x50000 [ 152.975130][ T26] audit: type=1326 audit(1771570184.118:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x50000 [ 153.014474][ T26] audit: type=1326 audit(1771570184.118:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x50000 [ 153.037380][ T26] audit: type=1326 audit(1771570184.118:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfc79c629 code=0x50000 [ 153.122924][ T6688] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1063'. [ 153.232293][ T6690] loop1: detected capacity change from 0 to 1024 [ 153.239167][ T4315] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.437291][ T4315] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 153.462128][ T4315] usb 3-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 153.485523][ T4315] usb 3-1: Product: syz [ 153.490198][ T4315] usb 3-1: Manufacturer: syz [ 153.494850][ T4315] usb 3-1: SerialNumber: syz [ 153.532056][ T4315] usb 3-1: config 0 descriptor?? [ 153.560457][ T4315] ch341 3-1:0.0: ch341-uart converter detected [ 153.955182][ T4315] usb 3-1: failed to send control message: -71 [ 153.969379][ T4315] ch341-uart: probe of ttyUSB0 failed with error -71 [ 154.017454][ T4315] usb 3-1: USB disconnect, device number 6 [ 154.052208][ T4315] ch341 3-1:0.0: device disconnected [ 154.855973][ T6736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1088'. [ 154.880077][ T6736] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1088'. [ 154.960540][ T4255] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.191173][ T4255] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.231019][ T4255] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.258051][ T4255] usb 2-1: config 1 has no interface number 0 [ 155.264600][ T4255] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.301939][ T4255] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.339204][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.344958][ T6748] loop3: detected capacity change from 0 to 8192 [ 155.347254][ T4255] usb 2-1: Product: syz [ 155.347273][ T4255] usb 2-1: Manufacturer: syz [ 155.347287][ T4255] usb 2-1: SerialNumber: syz [ 155.400741][ T4255] usb 2-1: selecting invalid altsetting 1 [ 155.431085][ T6748] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 155.457362][ T6748] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 155.479463][ T6748] REISERFS (device loop3): using ordered data mode [ 155.488086][ T6748] reiserfs: using flush barriers [ 155.608876][ T6748] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 155.673107][ T6748] REISERFS (device loop3): checking transaction log (loop3) [ 155.741877][ T6748] REISERFS (device loop3): Using r5 hash to sort names [ 155.759727][ T6748] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 155.816040][ T4255] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 155.826112][ T4255] cdc_ncm 2-1:1.1: bind() failure [ 155.869453][ T4255] usb 2-1: USB disconnect, device number 9 [ 156.290497][ T6776] loop0: detected capacity change from 0 to 128 [ 157.096909][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 157.283417][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1122'. [ 157.358193][ T6811] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1122'. [ 157.387322][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1122'. [ 157.439406][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1122'. [ 158.086566][ T6796] loop2: detected capacity change from 0 to 40427 [ 158.132907][ T6838] loop4: detected capacity change from 0 to 22 [ 158.165767][ T6796] F2FS-fs (loop2): invalid crc value [ 158.172618][ T6838] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 158.193689][ T6838] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 158.242625][ T6796] F2FS-fs (loop2): Found nat_bits in checkpoint [ 158.304972][ T6843] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 158.382101][ T6796] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 158.602778][ T6796] syz.2.1115: attempt to access beyond end of device [ 158.602778][ T6796] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.742456][ T6856] device wlan0 entered promiscuous mode [ 158.948702][ T4267] syz-executor: attempt to access beyond end of device [ 158.948702][ T4267] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 159.248873][ T6870] loop4: detected capacity change from 0 to 8 [ 159.339354][ T6870] SQUASHFS error: lzo decompression failed, data probably corrupt [ 159.355827][ T6870] SQUASHFS error: Failed to read block 0x0: -5 [ 159.400650][ T6870] SQUASHFS error: lzo decompression failed, data probably corrupt [ 159.456257][ T6870] SQUASHFS error: Failed to read block 0x0: -5 [ 159.472795][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 159.472812][ T26] audit: type=1800 audit(1771570190.998:115): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1149" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 159.542610][ T6876] overlayfs: conflicting options: nfs_export=on,index=off [ 160.026902][ T6861] loop0: detected capacity change from 0 to 32768 [ 160.043011][ T6892] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 160.059698][ T6861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1143 (6861) [ 160.120005][ T6861] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.173968][ T6861] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 160.189391][ T6894] cgroup: Invalid name [ 160.198918][ T6896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.247725][ T6861] BTRFS info (device loop0): using free space tree [ 160.299277][ T6418] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 160.489226][ T6418] usb 2-1: Using ep0 maxpacket: 8 [ 160.498398][ T6418] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 160.532691][ T6418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.543249][ T6418] usb 2-1: Product: syz [ 160.547490][ T6418] usb 2-1: Manufacturer: syz [ 160.552621][ T6418] usb 2-1: SerialNumber: syz [ 160.560928][ T6418] usb 2-1: config 0 descriptor?? [ 160.583092][ T6861] BTRFS info (device loop0): enabling ssd optimizations [ 160.852989][ T4273] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.949560][ T6418] usb 2-1: USB disconnect, device number 10 [ 161.411388][ T5430] udevd[5430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.485369][ T6956] IPVS: length: 218 != 24 [ 162.107199][ T6976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.129608][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1186'. [ 162.153089][ T6976] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 162.471843][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 162.591579][ T4315] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 162.764699][ T6998] ax25_connect(): syz.2.1199 uses autobind, please contact jreuter@yaina.de [ 162.799378][ T4315] usb 2-1: Using ep0 maxpacket: 16 [ 162.815569][ T4315] usb 2-1: config 0 has an invalid interface number: 115 but max is 0 [ 162.842160][ T7002] block device autoloading is deprecated and will be removed. [ 162.854900][ T4315] usb 2-1: config 0 has no interface number 0 [ 162.877110][ T4315] usb 2-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 162.928354][ T4315] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 162.959211][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.968083][ T4315] usb 2-1: Product: syz [ 162.998933][ T4315] usb 2-1: Manufacturer: syz [ 163.004697][ T4315] usb 2-1: SerialNumber: syz [ 163.048931][ T4315] usb 2-1: config 0 descriptor?? [ 163.073929][ T7008] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 163.210890][ T26] audit: type=1326 audit(1771570194.738:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967679c629 code=0x7ffc0000 [ 163.279229][ T26] audit: type=1326 audit(1771570194.778:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967679c629 code=0x7ffc0000 [ 163.389598][ T26] audit: type=1326 audit(1771570194.778:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f967679c629 code=0x7ffc0000 [ 163.453261][ T26] audit: type=1326 audit(1771570194.778:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967679c629 code=0x7ffc0000 [ 163.516583][ T26] audit: type=1326 audit(1771570194.778:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967679c629 code=0x7ffc0000 [ 163.655865][ T4315] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.663710][ T7025] tmpfs: Bad value for 'mpol' [ 163.757328][ T6418] usb 2-1: USB disconnect, device number 11 [ 163.841270][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 163.855360][ T4315] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 163.875660][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 163.896061][ T4315] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 163.919874][ T4315] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 163.961825][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.000076][ T4315] usb 4-1: config 0 descriptor?? [ 164.070349][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.215416][ T4315] hdpvr 4-1:0.0: firmware version 0xd dated [ 164.433009][ T4315] hdpvr 4-1:0.0: device init failed [ 164.442619][ T4315] hdpvr: probe of 4-1:0.0 failed with error -12 [ 164.471889][ T4315] usb 4-1: USB disconnect, device number 9 [ 164.845497][ T7032] loop2: detected capacity change from 0 to 32768 [ 164.896703][ T7059] loop0: detected capacity change from 0 to 128 [ 164.934973][ T7059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.946149][ T7032] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 165.007044][ T7059] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 165.030776][ T7059] ext4 filesystem being mounted at /266/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.120918][ T7032] (syz.2.1214,7032,0):ocfs2_symlink:2065 ERROR: status = -2 [ 165.261809][ T26] audit: type=1326 audit(1771570196.788:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb9f9c629 code=0x7ffc0000 [ 165.289285][ T6419] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 165.306893][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 165.311075][ T7073] syz.3.1231 uses obsolete (PF_INET,SOCK_PACKET) [ 165.360991][ T4267] (syz-executor,4267,1):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 165.404632][ T26] audit: type=1326 audit(1771570196.788:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f5eb9f9c629 code=0x7ffc0000 [ 165.447945][ T4267] ocfs2: Unmounting device (7,2) on (node local) [ 165.509873][ T26] audit: type=1326 audit(1771570196.788:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb9f9c629 code=0x7ffc0000 [ 165.569307][ T6419] usb 5-1: Using ep0 maxpacket: 8 [ 165.578794][ T6419] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 165.598329][ T6419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.606646][ T26] audit: type=1326 audit(1771570196.788:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb9f9c629 code=0x7ffc0000 [ 165.648375][ T6419] usb 5-1: Product: syz [ 165.658500][ T6419] usb 5-1: Manufacturer: syz [ 165.669221][ T6419] usb 5-1: SerialNumber: syz [ 165.689899][ T6419] usb 5-1: config 0 descriptor?? [ 165.872531][ T7082] netlink: 'syz.2.1234': attribute type 2 has an invalid length. [ 165.995057][ T6419] usb 5-1: USB disconnect, device number 4 [ 166.372963][ T4999] udevd[4999]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.962478][ T7155] loop2: detected capacity change from 0 to 128 [ 168.209557][ T7163] program syz.1.1277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.232369][ T7163] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 168.885258][ T7184] netlink: 'syz.1.1287': attribute type 1 has an invalid length. [ 168.937567][ T7184] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1287'. [ 169.537107][ T7203] raw_sendmsg: syz.2.1295 forgot to set AF_INET. Fix it! [ 171.450720][ T7272] loop2: detected capacity change from 0 to 4096 [ 171.538062][ T7272] ntfs: volume version 3.1. [ 171.607048][ T7284] netlink: 'syz.0.1331': attribute type 49 has an invalid length. [ 171.626381][ T7272] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 171.718484][ T7272] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 171.857224][ T7272] overlayfs: failed to resolve './bus': -2 [ 172.232423][ T7304] netlink: 'syz.3.1343': attribute type 30 has an invalid length. [ 172.719181][ T6949] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 172.932259][ T6949] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 172.965270][ T6949] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 172.997292][ T6949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.027175][ T6949] usb 5-1: Product: syz [ 173.036146][ T6949] usb 5-1: Manufacturer: syz [ 173.054843][ T6949] usb 5-1: SerialNumber: syz [ 173.091578][ T6949] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 173.161762][ T7334] loop2: detected capacity change from 0 to 4096 [ 173.238779][ T7334] ntfs: volume version 3.1. [ 173.538158][ T6949] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 173.606347][ T6949] usb 5-1: USB disconnect, device number 5 [ 173.983083][ T7362] device wlan0 entered promiscuous mode [ 174.188937][ T7371] loop1: detected capacity change from 0 to 8 [ 174.206824][ T7371] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 174.231979][ T7371] cramfs: Error -3 while decompressing! [ 174.244641][ T4999] udevd[4999]: incorrect cramfs checksum on /dev/loop1 [ 174.249273][ T7371] cramfs: ffffffff96d891e8(26)->ffff88804e936000(4096) [ 174.259001][ T7371] cramfs: Error -3 while decompressing! [ 174.294753][ T7371] cramfs: ffffffff96d89202(26)->ffff88804e806000(4096) [ 174.309271][ T7371] cramfs: Error -3 while decompressing! [ 174.322777][ T7371] cramfs: ffffffff96d8921c(16)->ffff88804c59c000(4096) [ 174.338888][ T7371] cramfs: Error -3 while decompressing! [ 174.349238][ T7371] cramfs: ffffffff96d891e8(26)->ffff88804e936000(4096) [ 175.568903][ T7423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1401'. [ 175.908857][ T7397] loop4: detected capacity change from 0 to 32768 [ 176.027760][ T7397] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 176.077443][ T7397] JBD2: Ignoring recovery information on journal [ 176.116996][ T7442] loop1: detected capacity change from 0 to 64 [ 176.221659][ T7397] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 176.494547][ T4268] ocfs2: Unmounting device (7,4) on (node local) [ 176.653403][ T7455] netlink: 'syz.4.1415': attribute type 1 has an invalid length. [ 177.212706][ T7474] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1426'. [ 177.277371][ T7475] loop3: detected capacity change from 0 to 1024 [ 177.926236][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1436'. [ 178.240111][ T7506] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.257248][ T7506] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.302553][ T7506] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.340354][ T7506] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.380440][ T7506] device geneve2 entered promiscuous mode [ 178.403388][ T7506] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.439218][ T7506] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.484349][ T7506] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.528500][ T7506] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.817837][ T7525] loop3: detected capacity change from 0 to 512 [ 179.006757][ T7525] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.224711][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 179.897066][ T7514] loop4: detected capacity change from 0 to 40427 [ 179.957842][ T7514] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 179.967746][ T7562] loop1: detected capacity change from 0 to 1024 [ 179.983989][ T7514] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 180.028497][ T7514] F2FS-fs (loop4): invalid crc value [ 180.046260][ T7562] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 180.126564][ T7514] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 180.250719][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 180.424462][ T7514] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 180.455480][ T7578] binder: 7577:7578 ioctl 400c620e 200000000280 returned -22 [ 180.477248][ T7514] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.755338][ T7546] loop3: detected capacity change from 0 to 32768 [ 180.832739][ T7546] (syz.3.1454,7546,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.905277][ T7546] (syz.3.1454,7546,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.977658][ T7546] JBD2: Ignoring recovery information on journal [ 181.097950][ T7597] IPv6: sit1: Disabled Multicast RS [ 181.212456][ T7546] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 181.697193][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 182.092855][ T7631] netlink: 'syz.2.1484': attribute type 2 has an invalid length. [ 182.128761][ T7634] xt_policy: neither incoming nor outgoing policy selected [ 182.907499][ T7656] loop4: detected capacity change from 0 to 4096 [ 182.947896][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 182.994851][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 183.023012][ T7656] ntfs: volume version 3.1. [ 183.032602][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 183.067782][ T7664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.378577][ T7673] loop2: detected capacity change from 0 to 1024 [ 183.450124][ T7676] netlink: 'syz.4.1507': attribute type 1 has an invalid length. [ 184.698225][ T7721] netlink: 'syz.0.1530': attribute type 2 has an invalid length. [ 184.749296][ T6949] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 184.929324][ T4315] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.949206][ T6949] usb 2-1: Using ep0 maxpacket: 8 [ 184.956292][ T6949] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 184.986034][ T6949] usb 2-1: config 179 has no interface number 0 [ 185.006283][ T6949] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 185.030943][ T6949] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 185.052708][ T6949] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 185.064612][ T6949] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 185.078490][ T6949] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 185.109583][ T6949] usb 2-1: config 179 interface 65 has no altsetting 0 [ 185.116730][ T6949] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 185.128535][ T6949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.136939][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 185.158655][ T4315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.209813][ T4315] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 185.232444][ T6949] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 185.250615][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.278440][ T4315] usb 5-1: Product: syz [ 185.286432][ T4315] usb 5-1: Manufacturer: syz [ 185.305830][ T4315] usb 5-1: SerialNumber: syz [ 185.315836][ T4315] usb 5-1: config 0 descriptor?? [ 185.338451][ T4315] cdc_ether 5-1:0.0: skipping garbage [ 185.378124][ T4315] cdc_ether 5-1:0.0: skipping garbage [ 185.407807][ T4315] usb 5-1: bad CDC descriptors [ 185.433607][ T4315] usb 5-1: unsupported MDLM descriptors [ 185.562963][ T22] usb 5-1: USB disconnect, device number 6 [ 185.671141][ T4315] usb 2-1: USB disconnect, device number 12 [ 185.677127][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 185.705768][ T4315] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 185.876701][ T7752] loop2: detected capacity change from 0 to 4096 [ 185.915218][ T7752] ntfs: volume version 3.1. [ 186.274157][ T7759] loop4: detected capacity change from 0 to 64 [ 186.396086][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 186.429271][ T7761] netlink: zone id is out of range [ 186.434564][ T7761] netlink: zone id is out of range [ 186.462460][ T7755] loop3: detected capacity change from 0 to 32768 [ 186.479319][ T7761] netlink: zone id is out of range [ 186.484680][ T7761] netlink: zone id is out of range [ 186.519265][ T7761] netlink: zone id is out of range [ 186.539222][ T7761] netlink: zone id is out of range [ 186.544432][ T7761] netlink: zone id is out of range [ 186.556522][ T7755] blkno = 8ed2c, nblocks = 1 [ 186.564526][ T7761] netlink: zone id is out of range [ 186.574067][ T7761] netlink: zone id is out of range [ 186.578592][ T7755] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 186.578592][ T7755] [ 186.626783][ T7755] ERROR: (device loop3): remounting filesystem as read-only [ 186.651619][ T7755] ialloc: diAlloc returned -17! [ 187.482957][ T7787] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.651509][ T7795] erofs: (device loop9): erofs_read_superblock: cannot find valid erofs superblock [ 187.655881][ T7792] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1564'. [ 187.678888][ T7792] netlink: 'syz.3.1564': attribute type 1 has an invalid length. [ 187.879491][ T126] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 188.069228][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 188.078560][ T126] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 188.105722][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.156378][ T126] usb 3-1: Product: syz [ 188.169151][ T126] usb 3-1: Manufacturer: syz [ 188.184050][ T126] usb 3-1: SerialNumber: syz [ 188.206205][ T126] usb 3-1: config 0 descriptor?? [ 188.236444][ T126] usb_ehset_test: probe of 3-1:0.0 failed with error -32 [ 188.434339][ T6949] usb 3-1: USB disconnect, device number 7 [ 189.005298][ T7813] loop4: detected capacity change from 0 to 32768 [ 190.099598][ T7873] device vlan0 entered promiscuous mode [ 191.011078][ T7906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1618'. [ 191.227779][ T7877] loop2: detected capacity change from 0 to 32768 [ 191.238902][ T7912] ip6t_srh: unknown srh invflags 4000 [ 191.284420][ T7877] jfs_lookup: dtSearch returned -5 [ 191.389432][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 191.395531][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 191.401229][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 191.402054][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 191.760837][ T7930] cgroup: subsys name conflicts with all [ 191.869751][ T6949] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 192.059276][ T6949] usb 4-1: Using ep0 maxpacket: 8 [ 192.068796][ T6949] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 192.103181][ T26] audit: type=1326 audit(1771570223.628:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.2.1639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f967679c629 code=0x0 [ 192.105626][ T6949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.173361][ T6949] usb 4-1: Product: syz [ 192.177850][ T6949] usb 4-1: Manufacturer: syz [ 192.187006][ T6949] usb 4-1: SerialNumber: syz [ 192.233472][ T6949] usb 4-1: config 0 descriptor?? [ 192.265050][ T6949] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 192.684318][ T6949] gspca_vc032x: reg_w err -71 [ 192.692561][ T6949] vc032x: probe of 4-1:0.0 failed with error -71 [ 192.725413][ T6949] usb 4-1: USB disconnect, device number 10 [ 192.781457][ T7964] netlink: 'syz.2.1649': attribute type 4 has an invalid length. [ 192.829311][ T7964] netlink: 'syz.2.1649': attribute type 10 has an invalid length. [ 192.859788][ T7964] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1649'. [ 192.937097][ T7964] net_ratelimit: 44 callbacks suppressed [ 192.937118][ T7964] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 193.757440][ T8001] netlink: 'syz.1.1667': attribute type 4 has an invalid length. [ 193.775381][ T8001] netlink: 'syz.1.1667': attribute type 10 has an invalid length. [ 193.784750][ T8001] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1667'. [ 193.857308][ T8001] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 193.879217][ T6421] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 194.075452][ T6421] usb 1-1: Using ep0 maxpacket: 16 [ 194.082952][ T6421] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 194.091910][ T6421] usb 1-1: config 0 has no interface number 0 [ 194.100006][ T6421] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 194.122964][ T6421] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 194.139166][ T6421] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 194.158828][ T8009] tmpfs: Bad value for 'mpol' [ 194.170629][ T6421] usb 1-1: Product: syz [ 194.174870][ T6421] usb 1-1: SerialNumber: syz [ 194.192766][ T6421] usb 1-1: config 0 descriptor?? [ 194.210048][ T6421] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 194.237615][ T6421] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input11 [ 194.269217][ T6419] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 194.432909][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.443195][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.479642][ T6419] usb 4-1: Using ep0 maxpacket: 16 [ 194.488423][ T6419] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 194.508366][ T6419] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 194.559153][ T6419] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 194.599370][ T6419] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 194.628173][ T6419] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 194.646608][ T6419] usb 4-1: config 1 interface 0 has no altsetting 0 [ 194.661301][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 194.662212][ T6949] usb 1-1: USB disconnect, device number 5 [ 194.668364][ C1] ------------[ cut here ]------------ [ 194.668377][ C1] URB ffff88802884d300 submitted while active [ 194.668813][ C1] WARNING: CPU: 1 PID: 8021 at drivers/usb/core/urb.c:379 usb_submit_urb+0xff9/0x1920 [ 194.695383][ C1] Modules linked in: [ 194.699312][ C1] CPU: 1 PID: 8021 Comm: syz.4.1677 Not tainted syzkaller #0 [ 194.706746][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.716862][ C1] RIP: 0010:usb_submit_urb+0xff9/0x1920 [ 194.722461][ C1] Code: 9d 2e 8b 89 ea e8 da 0a ff 03 e9 f7 fb ff ff e8 7d 0c 5c fb c6 05 ca fd e4 07 01 48 c7 c7 e0 9b 2e 8b 48 89 de e8 07 7b 27 fb <0f> 0b e9 7d f0 ff ff e8 5b 0c 5c fb eb 21 e8 54 0c 5c fb 44 8b 6c [ 194.742266][ C1] RSP: 0018:ffffc900001e0820 EFLAGS: 00010046 [ 194.748354][ C1] RAX: 0ea3d412c0151f00 RBX: ffff88802884d300 RCX: 0000000000040000 [ 194.756338][ C1] RDX: ffffc900022f2000 RSI: 0000000000001e39 RDI: 0000000000001e3a [ 194.764334][ C1] RBP: 000000000000000f R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 194.772403][ C1] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 194.780395][ C1] R13: 0000000000000a20 R14: ffff88802884d308 R15: ffff8880554b4848 [ 194.788376][ C1] FS: 00007ffad3ff76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 194.797575][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.804171][ C1] CR2: 0000200000000b00 CR3: 000000004984d000 CR4: 00000000003506e0 [ 194.812156][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.820136][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.828127][ C1] Call Trace: [ 194.831419][ C1] [ 194.834274][ C1] ? _raw_spin_lock+0x40/0x40 [ 194.838989][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 194.844202][ C1] cm109_urb_irq_callback+0x701/0xc70 [ 194.849662][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 194.855209][ C1] dummy_timer+0xbf6/0x3090 [ 194.859771][ C1] ? lock_chain_count+0x20/0x20 [ 194.864750][ C1] ? dummy_free_streams+0x530/0x530 [ 194.869979][ C1] __hrtimer_run_queues+0x560/0xd70 [ 194.875209][ C1] ? dummy_free_streams+0x530/0x530 [ 194.880601][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 194.885815][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 194.891900][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 194.897111][ C1] handle_softirqs+0x2a1/0x930 [ 194.901891][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 194.906754][ C1] ? do_softirq+0x210/0x210 [ 194.911286][ C1] __irq_exit_rcu+0x13b/0x230 [ 194.916072][ C1] ? irq_exit_rcu+0x20/0x20 [ 194.920591][ C1] irq_exit_rcu+0x5/0x20 [ 194.924835][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 194.930546][ C1] [ 194.933675][ C1] [ 194.936612][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 194.942601][ C1] RIP: 0010:__might_resched+0x17a/0x630 [ 194.948153][ C1] Code: 00 41 8b 06 c1 e0 08 44 01 e0 3b 44 24 2c 75 72 42 c6 44 2b 0c 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 84 24 a0 00 00 00 00 02 00 00 42 c6 44 2b 0c f8 74 45 4c 8d 62 [ 194.967862][ C1] RSP: 0018:ffffc9001b8a7700 EFLAGS: 00000246 [ 194.973943][ C1] RAX: 0000000000000000 RBX: 1ffff92003714ee8 RCX: 0ea3d412c0151f00 [ 194.982015][ C1] RDX: ffff888078628000 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0de0 [ 194.990079][ C1] RBP: ffffc9001b8a7818 R08: ffffc9001bdad04b R09: 1ffff920037b5a09 [ 194.998057][ C1] R10: dffffc0000000000 R11: fffff520037b5a0a R12: 0000000000000000 [ 195.006040][ C1] R13: dffffc0000000000 R14: ffff88807862843c R15: 1ffff1100f0c5087 [ 195.014043][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 195.019423][ C1] ? __might_sleep+0xd0/0xd0 [ 195.024020][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 195.029395][ C1] ? _local_bh_enable+0xa0/0xa0 [ 195.034260][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 195.039472][ C1] htable_selective_cleanup+0x299/0x320 [ 195.045033][ C1] htable_put+0x1e9/0x240 [ 195.049382][ C1] ? hashlimit_mt_check_v1+0x2d0/0x2d0 [ 195.054850][ C1] translate_table+0x1a09/0x2090 [ 195.059933][ C1] ? ip6t_register_table+0x7d0/0x7d0 [ 195.065236][ C1] ? __virt_addr_valid+0x188/0x540 [ 195.070372][ C1] ? __might_fault+0xa6/0x120 [ 195.075062][ C1] ? _copy_from_user+0x10b/0x170 [ 195.080119][ C1] do_ip6t_set_ctl+0x9f8/0xe10 [ 195.084902][ C1] ? nf_setsockopt+0x218/0x280 [ 195.089725][ C1] ? ip6t_unregister_table_exit+0x230/0x230 [ 195.095978][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 195.101103][ C1] ? trace_contention_end+0x5f/0x170 [ 195.106580][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 195.112259][ C1] ? mutex_unlock+0x10/0x10 [ 195.116786][ C1] ? __fget_files+0x28/0x4b0 [ 195.121397][ C1] nf_setsockopt+0x25f/0x280 [ 195.126093][ C1] rawv6_setsockopt+0x29e/0x660 [ 195.130957][ C1] ? __fget_files+0x43d/0x4b0 [ 195.135660][ C1] ? raw6_destroy+0x30/0x30 [ 195.140180][ C1] ? aa_sock_opt_perm+0x74/0x100 [ 195.145130][ C1] ? sock_common_setsockopt+0x32/0xb0 [ 195.150539][ C1] ? sock_common_recvmsg+0x190/0x190 [ 195.155934][ C1] __sys_setsockopt+0x2bf/0x3d0 [ 195.160801][ C1] __x64_sys_setsockopt+0xb1/0xc0 [ 195.165839][ C1] do_syscall_64+0x4c/0xa0 [ 195.170263][ C1] ? clear_bhb_loop+0x60/0xb0 [ 195.174947][ C1] ? clear_bhb_loop+0x60/0xb0 [ 195.179635][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.185621][ C1] RIP: 0033:0x7ffad319c629 [ 195.190055][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.209937][ C1] RSP: 002b:00007ffad3ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.218370][ C1] RAX: ffffffffffffffda RBX: 00007ffad3415fa0 RCX: 00007ffad319c629 [ 195.226350][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 195.234335][ C1] RBP: 00007ffad3232b39 R08: 0000000000000488 R09: 0000000000000000 [ 195.242322][ C1] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000000 [ 195.250555][ C1] R13: 00007ffad3416038 R14: 00007ffad3415fa0 R15: 00007ffd9c6aaa78 [ 195.258734][ C1] [ 195.261763][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.269134][ C1] CPU: 1 PID: 8021 Comm: syz.4.1677 Not tainted syzkaller #0 [ 195.276506][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.286572][ C1] Call Trace: [ 195.289945][ C1] [ 195.292790][ C1] dump_stack_lvl+0x188/0x24e [ 195.297482][ C1] ? memcpy+0x3c/0x60 [ 195.301475][ C1] ? show_regs_print_info+0x12/0x12 [ 195.306683][ C1] ? load_image+0x400/0x400 [ 195.311214][ C1] panic+0x2e5/0x730 [ 195.315127][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 195.319644][ C1] __warn+0x2f8/0x4f0 [ 195.323627][ C1] ? usb_submit_urb+0xff9/0x1920 [ 195.328568][ C1] ? usb_submit_urb+0xff9/0x1920 [ 195.333562][ C1] report_bug+0x2ba/0x4f0 [ 195.337909][ C1] ? usb_submit_urb+0xff9/0x1920 [ 195.342867][ C1] handle_bug+0x3a/0x70 [ 195.347034][ C1] exc_invalid_op+0x16/0x40 [ 195.351554][ C1] asm_exc_invalid_op+0x16/0x20 [ 195.356411][ C1] RIP: 0010:usb_submit_urb+0xff9/0x1920 [ 195.362134][ C1] Code: 9d 2e 8b 89 ea e8 da 0a ff 03 e9 f7 fb ff ff e8 7d 0c 5c fb c6 05 ca fd e4 07 01 48 c7 c7 e0 9b 2e 8b 48 89 de e8 07 7b 27 fb <0f> 0b e9 7d f0 ff ff e8 5b 0c 5c fb eb 21 e8 54 0c 5c fb 44 8b 6c [ 195.381749][ C1] RSP: 0018:ffffc900001e0820 EFLAGS: 00010046 [ 195.387823][ C1] RAX: 0ea3d412c0151f00 RBX: ffff88802884d300 RCX: 0000000000040000 [ 195.395800][ C1] RDX: ffffc900022f2000 RSI: 0000000000001e39 RDI: 0000000000001e3a [ 195.403780][ C1] RBP: 000000000000000f R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 195.411848][ C1] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 195.420024][ C1] R13: 0000000000000a20 R14: ffff88802884d308 R15: ffff8880554b4848 [ 195.428200][ C1] ? _raw_spin_lock+0x40/0x40 [ 195.432896][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 195.438197][ C1] cm109_urb_irq_callback+0x701/0xc70 [ 195.443761][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 195.449150][ C1] dummy_timer+0xbf6/0x3090 [ 195.453785][ C1] ? lock_chain_count+0x20/0x20 [ 195.458657][ C1] ? dummy_free_streams+0x530/0x530 [ 195.463966][ C1] __hrtimer_run_queues+0x560/0xd70 [ 195.469181][ C1] ? dummy_free_streams+0x530/0x530 [ 195.474394][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 195.479558][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 195.485641][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 195.490764][ C1] handle_softirqs+0x2a1/0x930 [ 195.495541][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 195.500486][ C1] ? do_softirq+0x210/0x210 [ 195.505003][ C1] __irq_exit_rcu+0x13b/0x230 [ 195.509686][ C1] ? irq_exit_rcu+0x20/0x20 [ 195.514208][ C1] irq_exit_rcu+0x5/0x20 [ 195.518451][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 195.524103][ C1] [ 195.527037][ C1] [ 195.529974][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 195.535973][ C1] RIP: 0010:__might_resched+0x17a/0x630 [ 195.541539][ C1] Code: 00 41 8b 06 c1 e0 08 44 01 e0 3b 44 24 2c 75 72 42 c6 44 2b 0c 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 84 24 a0 00 00 00 00 02 00 00 42 c6 44 2b 0c f8 74 45 4c 8d 62 [ 195.561156][ C1] RSP: 0018:ffffc9001b8a7700 EFLAGS: 00000246 [ 195.567318][ C1] RAX: 0000000000000000 RBX: 1ffff92003714ee8 RCX: 0ea3d412c0151f00 [ 195.575297][ C1] RDX: ffff888078628000 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0de0 [ 195.583357][ C1] RBP: ffffc9001b8a7818 R08: ffffc9001bdad04b R09: 1ffff920037b5a09 [ 195.591335][ C1] R10: dffffc0000000000 R11: fffff520037b5a0a R12: 0000000000000000 [ 195.599308][ C1] R13: dffffc0000000000 R14: ffff88807862843c R15: 1ffff1100f0c5087 [ 195.607477][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 195.612862][ C1] ? __might_sleep+0xd0/0xd0 [ 195.617460][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 195.622842][ C1] ? _local_bh_enable+0xa0/0xa0 [ 195.627698][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 195.632909][ C1] htable_selective_cleanup+0x299/0x320 [ 195.638794][ C1] htable_put+0x1e9/0x240 [ 195.643511][ C1] ? hashlimit_mt_check_v1+0x2d0/0x2d0 [ 195.648983][ C1] translate_table+0x1a09/0x2090 [ 195.653986][ C1] ? ip6t_register_table+0x7d0/0x7d0 [ 195.659312][ C1] ? __virt_addr_valid+0x188/0x540 [ 195.664571][ C1] ? __might_fault+0xa6/0x120 [ 195.669406][ C1] ? _copy_from_user+0x10b/0x170 [ 195.674387][ C1] do_ip6t_set_ctl+0x9f8/0xe10 [ 195.679183][ C1] ? nf_setsockopt+0x218/0x280 [ 195.683960][ C1] ? ip6t_unregister_table_exit+0x230/0x230 [ 195.689951][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 195.694985][ C1] ? trace_contention_end+0x5f/0x170 [ 195.700284][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 195.705934][ C1] ? mutex_unlock+0x10/0x10 [ 195.710453][ C1] ? __fget_files+0x28/0x4b0 [ 195.715089][ C1] nf_setsockopt+0x25f/0x280 [ 195.719694][ C1] rawv6_setsockopt+0x29e/0x660 [ 195.724557][ C1] ? __fget_files+0x43d/0x4b0 [ 195.729246][ C1] ? raw6_destroy+0x30/0x30 [ 195.733764][ C1] ? aa_sock_opt_perm+0x74/0x100 [ 195.738809][ C1] ? sock_common_setsockopt+0x32/0xb0 [ 195.744220][ C1] ? sock_common_recvmsg+0x190/0x190 [ 195.749562][ C1] __sys_setsockopt+0x2bf/0x3d0 [ 195.754513][ C1] __x64_sys_setsockopt+0xb1/0xc0 [ 195.759580][ C1] do_syscall_64+0x4c/0xa0 [ 195.764040][ C1] ? clear_bhb_loop+0x60/0xb0 [ 195.768738][ C1] ? clear_bhb_loop+0x60/0xb0 [ 195.773436][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.779363][ C1] RIP: 0033:0x7ffad319c629 [ 195.783797][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.803587][ C1] RSP: 002b:00007ffad3ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.812099][ C1] RAX: ffffffffffffffda RBX: 00007ffad3415fa0 RCX: 00007ffad319c629 [ 195.820076][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 195.828053][ C1] RBP: 00007ffad3232b39 R08: 0000000000000488 R09: 0000000000000000 [ 195.836141][ C1] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000000 [ 195.844134][ C1] R13: 00007ffad3416038 R14: 00007ffad3415fa0 R15: 00007ffd9c6aaa78 [ 195.852128][ C1] [ 195.855513][ C1] Kernel Offset: disabled [ 195.860104][ C1] Rebooting in 86400 seconds..