last executing test programs: 3m11.620744984s ago: executing program 1 (id=1509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1}, 0x14) 3m11.40889524s ago: executing program 1 (id=1512): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x95, 0x0, &(0x7f0000000440)="b461802305624431ed33730100010446b20aed0200000000000000d5fe008c6390009c5bbd000000003683b7ee0fae7a6a53200386ce515ef6a4effbb7574d5eeb79bf8c4718e6b25de1d33cca488f87e31fd1385561b8b4cbf8611a1295101ceb4c45fa69669e8fc61481728b796af2000000000000000000000000742226d7c6859ac0c133fc532eef548dada041703ffdeb7553", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3m11.266711679s ago: executing program 1 (id=1514): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) 3m11.037887133s ago: executing program 1 (id=1517): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 3m10.288389405s ago: executing program 1 (id=1520): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x1529, &(0x7f0000003f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) 3m8.509720999s ago: executing program 1 (id=1540): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3m8.124999257s ago: executing program 32 (id=1540): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m1.46938489s ago: executing program 3 (id=1967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 2m0.005857486s ago: executing program 3 (id=1971): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@fallback=r0, r1, 0x2e, 0xc, r1, @void, @value=r1}, 0x20) 1m59.571485126s ago: executing program 3 (id=1973): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0, @ANYBLOB="accb3497"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 1m59.432405738s ago: executing program 3 (id=1974): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 1m59.226432913s ago: executing program 3 (id=1977): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4800000014001d0d09074beafd0d8c560284606088ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e6ee11ac3439693b948e142ff0000000309ff5b", 0x48}], 0x1) 1m57.573830033s ago: executing program 3 (id=1993): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="07ef00", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0x1, @private2, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0xfb}], 0x1, 0x50, 0x0) 1m57.001338495s ago: executing program 33 (id=1993): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="07ef00", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0x1, @private2, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0xfb}], 0x1, 0x50, 0x0) 26.984046963s ago: executing program 6 (id=2715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4) 26.800337553s ago: executing program 6 (id=2718): setreuid(0xee01, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000001540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', 0x0) 26.524601434s ago: executing program 6 (id=2720): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000001c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@acl}, {@resuid}, {@errors_remount}]}, 0x1, 0x5ab, &(0x7f0000000240)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)='W', 0x1}], 0x1, 0x40009c00, 0x0, 0x3) 25.849080182s ago: executing program 6 (id=2728): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x30, 0x7f, 0x2}, 0x7) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 25.190416181s ago: executing program 6 (id=2737): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='gadgetfs\x00', 0x10, 0x0) 21.318612533s ago: executing program 6 (id=2752): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 4.778850187s ago: executing program 0 (id=2860): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000092, 0x0, 0xffff}]}) 4.4615871s ago: executing program 0 (id=2862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0006000000080026000816"], 0x40}}, 0x0) 3.649001032s ago: executing program 2 (id=2868): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r1, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20000000) 3.089725212s ago: executing program 0 (id=2870): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe, 0x7}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0xdf, r2}}, @RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x3c}}, 0x0) 3.041295557s ago: executing program 0 (id=2871): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 2.916820049s ago: executing program 0 (id=2873): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@delchain={0x34, 0x2e, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0x3}, {0xfff2, 0xffff}, {0xe, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x20040080) 2.885384418s ago: executing program 4 (id=2874): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1.901113802s ago: executing program 4 (id=2876): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2afd, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0404"], 0xd) 1.723592988s ago: executing program 5 (id=2877): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x9, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e1f, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 1.699746066s ago: executing program 2 (id=2878): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f000000c240)={0x0, 0x0, &(0x7f000000c200)={&(0x7f0000003880)={0x14, 0xd, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1.51977942s ago: executing program 0 (id=2879): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 1.469421634s ago: executing program 4 (id=2880): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x679}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2}, 0x100) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) 1.443879729s ago: executing program 5 (id=2881): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 824.620931ms ago: executing program 34 (id=2879): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 813.804361ms ago: executing program 5 (id=2883): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x48, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 810.921661ms ago: executing program 2 (id=2884): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000300)=0x5) 744.041981ms ago: executing program 4 (id=2885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 619.416127ms ago: executing program 2 (id=2886): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c020000000006000000000000000000000000000000000000ff02000000000000000000000000000100010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000000400000000000000010000000000000a00100001"], 0xc4}}, 0x4c050) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 573.402949ms ago: executing program 5 (id=2887): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xf22) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 514.582493ms ago: executing program 4 (id=2888): io_uring_setup(0x2c93, &(0x7f0000000100)={0x0, 0xf0ce, 0x3481, 0x1, 0x8014}) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) 355.171214ms ago: executing program 2 (id=2889): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)={0x20, 0x15, 0x1, 0x70bd27, 0x25dfdbff, "", [@typed={0x2, 0x138, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x20}], 0x1}, 0x4000) 293.324883ms ago: executing program 4 (id=2890): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f00000012c0)="27a4", 0x2}], 0x1}, 0xc0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) 149.284527ms ago: executing program 5 (id=2891): set_mempolicy(0x5, 0x0, 0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000019080)=0x30) 51.822948ms ago: executing program 2 (id=2892): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0xc4}}, 0x20004800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x800100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) 0s ago: executing program 5 (id=2893): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd 4096 [ 340.934204][T10966] erofs (device loop4): read error -117 @ 0 of nid 89 [ 340.939183][ T37] audit: type=1800 audit(1778004782.900:106): pid=10966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1941" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 341.571109][T11007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1949'. [ 341.691641][T10309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.852841][T11017] loop4: detected capacity change from 0 to 512 [ 342.073194][T10309] veth0_vlan: entered promiscuous mode [ 342.178339][T10309] veth1_vlan: entered promiscuous mode [ 342.360895][T11017] EXT4-fs (loop4): 1 orphan inode deleted [ 342.364276][T11017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.464183][T10309] veth0_macvtap: entered promiscuous mode [ 342.499278][T10309] veth1_macvtap: entered promiscuous mode [ 342.595787][T10309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.665356][T10309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.723916][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.724507][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.724734][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.724769][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.951709][T11023] loop5: detected capacity change from 0 to 32768 [ 343.245246][T11022] loop0: detected capacity change from 0 to 131072 [ 343.356260][T11023] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 343.537303][T11022] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 343.583323][T11022] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 343.610401][ T5608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.624826][T11022] F2FS-fs (loop0): recover xattr in inode (7), error(0) [ 343.625217][T11022] F2FS-fs (loop0): set inode (7) has corrupted xattr [ 343.711457][T11023] XFS (loop5): Ending clean mount [ 344.046760][ T9700] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 344.610596][ T1536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.610617][ T1536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.134533][T11046] loop4: detected capacity change from 0 to 256 [ 345.592332][T11048] loop5: detected capacity change from 0 to 1024 [ 345.861928][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.861948][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.865198][T11050] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 345.865509][T11050] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.048035][T11050] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.534284][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1973'. [ 346.534313][T11060] bond0: option miimon: invalid value (18446744071951403948) [ 346.534331][T11060] bond0: option miimon: allowed values 0 - 2147483647 [ 346.949211][T11071] netlink: 1748 bytes leftover after parsing attributes in process `syz.2.1978'. [ 347.112772][T11075] loop4: detected capacity change from 0 to 512 [ 347.218876][T11075] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 347.232022][T11080] loop5: detected capacity change from 0 to 256 [ 347.442755][T11075] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1980: bg 0: block 142: padding at end of block bitmap is not set [ 347.442791][T11075] loop4: lost filesystem error report for type 5 error -117 [ 347.450668][ C1] EXT4-fs (loop4): initial error at time 1778004789: ext4_validate_block_bitmap:441 [ 347.450695][ C1] EXT4-fs (loop4): last error at time 1778004789: ext4_validate_block_bitmap:441 [ 347.463886][T11080] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 347.555999][T11075] EXT4-fs (loop4): Remounting filesystem read-only [ 347.556984][T11075] EXT4-fs (loop4): 1 truncate cleaned up [ 347.559301][T11075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.771677][ T5608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.048516][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1986'. [ 348.048541][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1986'. [ 348.351896][T11105] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1991'. [ 349.505462][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.568863][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.572858][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.588239][T11120] loop5: detected capacity change from 0 to 4096 [ 349.596211][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.597945][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.804586][T11120] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 349.886576][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.180049][T11120] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 350.255508][T11115] vxlan0: entered promiscuous mode [ 350.255524][T11115] vxlan0: entered allmulticast mode [ 350.389994][ T182] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.390040][ T182] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.390184][ T182] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.390217][ T182] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.524331][T11138] loop0: detected capacity change from 0 to 512 [ 350.595282][T11138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.595372][T11138] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.084136][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.183193][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.204198][T11130] loop4: detected capacity change from 0 to 32768 [ 351.563097][T11130] JBD2: Ignoring recovery information on journal [ 351.635493][T11154] loop0: detected capacity change from 0 to 4096 [ 351.857477][ T5617] Bluetooth: hci3: command tx timeout [ 351.922972][T11166] program syz.2.2014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.110242][T11130] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 352.160195][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.652568][ T5608] ocfs2: Unmounting device (7,4) on (node local) [ 352.908704][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.556809][T11197] loop5: detected capacity change from 0 to 128 [ 353.645327][T11197] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.659757][T11197] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 353.853930][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803b64e400: rx timeout, send abort [ 353.901829][ T9700] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.940294][ T5617] Bluetooth: hci3: command tx timeout [ 354.347112][T11219] loop0: detected capacity change from 0 to 128 [ 354.364916][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803b64e400: abort rx timeout. Force session deactivation [ 354.393508][T11219] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 354.442070][T11219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.495094][T11219] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 93: 0xcc != 0x00 [ 354.495123][T11219] UDF-fs: error (device loop0): udf_count_free_bitmap: udf_count_free failed [ 354.495143][T11219] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 93: 0xcc != 0x00 [ 354.495163][T11219] UDF-fs: error (device loop0): udf_count_free_bitmap: udf_count_free failed [ 354.617397][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 354.698580][T11227] vivid-007: disconnect [ 354.785776][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.785808][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.785841][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 354.785863][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.801565][ T9] usb 6-1: config 0 descriptor?? [ 354.868076][T11227] vivid-007: reconnect [ 355.340436][ T9] hid_parser_main: 446 callbacks suppressed [ 355.340465][ T9] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 355.340495][ T9] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 355.340520][ T9] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 355.340546][ T9] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 355.340571][ T9] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 355.376561][ T9] playstation 0003:054C:0DF2.0016: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 355.406558][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 355.562376][ T9] playstation 0003:054C:0DF2.0016: Invalid reportID received, expected 9 got 0 [ 355.562410][ T9] playstation 0003:054C:0DF2.0016: Failed to retrieve DualSense pairing info: -22 [ 355.562470][ T9] playstation 0003:054C:0DF2.0016: Failed to get MAC address from DualSense [ 355.562490][ T9] playstation 0003:054C:0DF2.0016: Failed to create dualsense. [ 355.595039][ T9] playstation 0003:054C:0DF2.0016: probe with driver playstation failed with error -22 [ 355.792474][ T32] usb 6-1: USB disconnect, device number 2 [ 355.909398][T11250] fido_id[11250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 356.016586][ T5617] Bluetooth: hci3: command tx timeout [ 356.192131][T11272] loop2: detected capacity change from 0 to 64 [ 356.211516][T11276] loop0: detected capacity change from 0 to 64 [ 356.238426][T11272] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 356.374297][T11273] hpfs: Bad magic ... probably not HPFS [ 356.433807][ T12] bridge_slave_1: left promiscuous mode [ 356.540661][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.690532][ T12] bridge_slave_0: left allmulticast mode [ 356.690563][ T12] bridge_slave_0: left promiscuous mode [ 356.726417][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.747007][T11287] vivid-000: disconnect [ 356.821830][T11285] vivid-000: reconnect [ 356.887098][ T823] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 357.024506][T11297] loop2: detected capacity change from 0 to 256 [ 357.052068][ T823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.052100][ T823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.052139][ T823] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 357.052161][ T823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.106045][ T823] usb 6-1: config 0 descriptor?? [ 357.133490][T11297] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 357.587665][ T823] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 357.727143][ T823] playstation 0003:054C:0DF2.0017: Invalid byte count transferred, expected 20 got 0 [ 357.727171][ T823] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense pairing info: -22 [ 357.727221][ T823] playstation 0003:054C:0DF2.0017: Failed to get MAC address from DualSense [ 357.727242][ T823] playstation 0003:054C:0DF2.0017: Failed to create dualsense. [ 357.782278][ T823] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -22 [ 357.949166][ T823] usb 6-1: USB disconnect, device number 3 [ 357.992928][T11305] loop2: detected capacity change from 0 to 1024 [ 358.101151][ T5617] Bluetooth: hci3: command tx timeout [ 358.767987][T11325] vivid-000: disconnect [ 358.774043][T11321] vivid-000: reconnect [ 358.830467][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.922435][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.016210][ T12] bond0 (unregistering): (slave bond1): Releasing backup interface [ 359.056396][ T12] bond0 (unregistering): Released all slaves [ 359.064981][ T12] bond1 (unregistering): Released all slaves [ 359.183602][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 359.251606][T11294] erspan0: entered promiscuous mode [ 359.397361][T11315] tap0: tun_chr_ioctl cmd 1074025677 [ 359.398685][T11315] tap0: linktype set to 768 [ 359.468507][T11336] loop2: detected capacity change from 0 to 256 [ 359.680183][T11338] bond0: entered promiscuous mode [ 359.680205][T11338] bond_slave_0: entered promiscuous mode [ 359.680421][T11338] bond_slave_1: entered promiscuous mode [ 359.835997][T11338] batadv0: entered promiscuous mode [ 359.886402][T11338] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 359.945866][T11338] bond0: left promiscuous mode [ 359.945885][T11338] bond_slave_0: left promiscuous mode [ 359.946263][T11338] bond_slave_1: left promiscuous mode [ 359.986053][T11338] batadv0: left promiscuous mode [ 360.802768][T11121] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.803042][T11121] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.803312][T11121] bridge_slave_0: entered allmulticast mode [ 360.835817][T11121] bridge_slave_0: entered promiscuous mode [ 361.088861][T11352] loop2: detected capacity change from 0 to 40427 [ 361.089984][T11352] F2FS-fs: heap/no_heap options were deprecated [ 361.090120][T11352] f2fs: Unknown parameter 'whint_mode' [ 361.548211][T11121] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.548491][T11121] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.548772][T11121] bridge_slave_1: entered allmulticast mode [ 361.577380][T11121] bridge_slave_1: entered promiscuous mode [ 361.999665][T11121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.011119][T11394] syz.0.2093 uses obsolete (PF_INET,SOCK_PACKET) [ 362.636910][ T12] hsr_slave_0: left promiscuous mode [ 362.683044][ T12] hsr_slave_1: left promiscuous mode [ 362.684164][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.684187][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.723726][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.723750][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.108347][T11429] loop0: detected capacity change from 0 to 64 [ 363.156722][ T12] veth1_macvtap: left promiscuous mode [ 363.184445][ T12] veth0_macvtap: left promiscuous mode [ 363.184735][ T12] veth1_vlan: left promiscuous mode [ 363.184812][ T12] veth0_vlan: left promiscuous mode [ 363.236839][ T37] audit: type=1800 audit(1778004811.211:107): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2105" name="bus" dev="loop0" ino=23 res=0 errno=0 [ 363.332304][ T5609] hfs: node 4:3 still has 2 user(s)! [ 363.461601][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2107'. [ 363.904839][T11444] loop0: detected capacity change from 0 to 256 [ 364.305514][T11446] loop0: detected capacity change from 0 to 32768 [ 364.323598][T11446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2113 (11446) [ 364.360730][T11446] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 364.360763][T11446] BTRFS info (device loop0): using crc32c checksum algorithm [ 364.583166][T11446] BTRFS info (device loop0): setting nodatasum [ 364.583191][T11446] BTRFS info (device loop0): enabling ssd optimizations [ 364.583207][T11446] BTRFS info (device loop0): disabling tree log [ 364.583222][T11446] BTRFS info (device loop0): turning on async discard [ 364.583237][T11446] BTRFS info (device loop0): enabling free space tree [ 364.583251][T11446] BTRFS info (device loop0): enabling auto defrag [ 365.066011][ T5609] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 365.068616][ T12] team0 (unregistering): Port device team_slave_1 removed [ 365.268002][ T12] team0 (unregistering): Port device team_slave_0 removed [ 366.002243][T11121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.037158][T11423] netlink: 'syz.5.2103': attribute type 1 has an invalid length. [ 366.152132][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 366.240150][T11471] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2117'. [ 366.258788][T11471] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2117'. [ 366.435580][T11121] team0: Port device team_slave_0 added [ 366.448616][T11121] team0: Port device team_slave_1 added [ 366.485428][T11477] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 366.554856][T11475] loop4: detected capacity change from 0 to 4096 [ 366.590763][T11477] @0Ù: renamed from bond_slave_1 (while UP) [ 366.918179][T11121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.918195][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.918220][T11121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.990588][T11121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.990604][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.990629][T11121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.570364][T11494] netlink: 564 bytes leftover after parsing attributes in process `syz.0.2128'. [ 367.570389][T11494] netlink: 564 bytes leftover after parsing attributes in process `syz.0.2128'. [ 367.600643][T11121] hsr_slave_0: entered promiscuous mode [ 367.646142][T11121] hsr_slave_1: entered promiscuous mode [ 367.659312][T11121] debugfs: 'hsr0' already exists in 'hsr' [ 367.659335][T11121] Cannot create hsr debugfs directory [ 367.759612][T11506] program syz.2.2130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.530336][T11529] loop0: detected capacity change from 0 to 1024 [ 368.549726][T11529] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 368.632025][T11529] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 368.632413][T11529] EXT4-fs (loop0): orphan cleanup on readonly fs [ 368.686347][T11529] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.2137: Freeing blocks not in datazone - block = 0, count = 4096 [ 368.686378][T11529] loop0: lost filesystem error report for type 5 error -117 [ 368.696145][ C0] EXT4-fs (loop0): initial error at time 1778004816: ext4_free_blocks:6718 [ 368.696166][ C0] EXT4-fs (loop0): last error at time 1778004816: ext4_free_blocks:6718 [ 368.950781][T11529] EXT4-fs (loop0): Remounting filesystem read-only [ 368.950895][T11529] EXT4-fs (loop0): 1 orphan inode deleted [ 368.953621][T11529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 368.990681][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 369.048102][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 369.201043][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.262653][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.262680][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 369.262698][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.262744][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 369.262769][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 369.379809][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.379827][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.379838][ T10] usb 6-1: Product: syz [ 369.379845][ T10] usb 6-1: Manufacturer: syz [ 369.420330][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 369.420348][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 369.488275][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 369.488296][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 369.547292][T11554] loop0: detected capacity change from 0 to 1024 [ 369.562256][T11554] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 369.660541][T11558] loop4: detected capacity change from 0 to 128 [ 369.679076][T11558] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.680828][T11558] ext4 filesystem being mounted at /445/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 369.853352][T11554] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 5: comm syz.0.2145: lblock 5 mapped to illegal pblock 5 (length 1) [ 369.853392][T11554] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 369.864460][ C1] EXT4-fs (loop0): initial error at time 1778004817: ext4_map_blocks:833: inode 3: block 5 [ 369.864499][ C1] EXT4-fs (loop0): last error at time 1778004817: ext4_map_blocks:833: inode 3: block 5 [ 369.980736][T11554] Quota error (device loop0): write_blk: dquota write failed [ 369.980767][T11554] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 369.980909][T11554] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 369.980978][T11554] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2145: Failed to acquire dquot type 0 [ 369.980999][T11554] loop0: lost filesystem error report for type 5 error -117 [ 369.991015][T11554] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 5: comm syz.0.2145: lblock 5 mapped to illegal pblock 5 (length 1) [ 369.991052][T11554] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 369.997407][T11554] Quota error (device loop0): do_insert_tree: Can't read tree quota block 5 [ 369.997467][T11554] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 369.997503][T11554] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2145: Failed to acquire dquot type 0 [ 369.997524][T11554] loop0: lost filesystem error report for type 5 error -117 [ 369.997915][T11554] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.2145: Freeing blocks not in datazone - block = 0, count = 4096 [ 369.997942][T11554] loop0: lost filesystem error report for type 5 error -117 [ 369.999536][T11554] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 5: comm syz.0.2145: lblock 5 mapped to illegal pblock 5 (length 1) [ 369.999570][T11554] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 370.187195][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE [ 370.244491][ T10] usb 6-1: USB disconnect, device number 4 [ 370.354011][T11554] Quota error (device loop0): do_insert_tree: Can't read tree quota block 5 [ 370.354133][T11554] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 370.354174][T11554] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2145: Failed to acquire dquot type 0 [ 370.354195][T11554] loop0: lost filesystem error report for type 5 error -117 [ 370.398378][T11554] EXT4-fs (loop0): 1 orphan inode deleted [ 370.516046][T11554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.534940][ T5608] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.645405][T11568] loop2: detected capacity change from 0 to 4096 [ 370.674051][T11568] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 370.692700][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.824249][T11121] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 370.840869][T11568] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 370.841952][T11568] ntfs3(loop2): Inode r=b is not in use! [ 370.842035][T11568] ntfs3(loop2): Failed to load $Extend (-116). [ 370.842052][T11568] ntfs3(loop2): Failed to initialize $Extend. [ 370.915286][T11121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.975159][T11121] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 371.216910][T11121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.229156][T11121] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 371.287292][T11121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.294908][T11121] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 371.483563][T11121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.123030][T11121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.251970][T11121] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.257556][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 372.281312][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.299500][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.415787][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 372.417853][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.417903][ T9] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.417930][ T9] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 372.417956][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 372.417990][ T9] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 372.418012][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.427869][ T4109] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.428014][ T4109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.457560][ T9] usb 5-1: config 0 descriptor?? [ 372.951813][ T9] zeroplus 0003:0C12:0030.0018: ignoring exceeding usage max [ 372.953108][ T9] zeroplus 0003:0C12:0030.0018: reserved main item tag 0xd [ 372.953142][ T9] zeroplus 0003:0C12:0030.0018: unknown main item tag 0x5 [ 372.954821][ T9] zeroplus 0003:0C12:0030.0018: reserved main item tag 0xd [ 372.954901][ T9] zeroplus 0003:0C12:0030.0018: unknown main item tag 0x5 [ 372.960112][ T9] zeroplus 0003:0C12:0030.0018: global environment stack underflow [ 372.960131][ T9] zeroplus 0003:0C12:0030.0018: item 0 2 1 11 parsing failed [ 372.964868][ T9] zeroplus 0003:0C12:0030.0018: parse failed [ 372.964939][ T9] zeroplus 0003:0C12:0030.0018: probe with driver zeroplus failed with error -22 [ 373.004739][T11611] loop2: detected capacity change from 0 to 16 [ 373.146239][T11611] erofs (device loop2): mounted with root inode @ nid 36. [ 373.189593][T11611] erofs (device loop2): invalid de[0].nameoff 14 @ nid 36 [ 373.285199][ T9] usb 5-1: USB disconnect, device number 14 [ 373.562573][T11121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.355874][ T37] audit: type=1326 audit(1778004822.311:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11645 comm="syz.5.2171" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f7facdd9 code=0x7ffc0000 [ 374.355924][ T37] audit: type=1326 audit(1778004822.321:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11645 comm="syz.5.2171" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f7facdd9 code=0x7ffc0000 [ 374.362890][ T37] audit: type=1326 audit(1778004822.331:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11645 comm="syz.5.2171" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f7facdd9 code=0x7ffc0000 [ 374.396637][T11646] program syz.2.2170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.701194][T11121] veth0_vlan: entered promiscuous mode [ 374.757642][T11121] veth1_vlan: entered promiscuous mode [ 374.814923][T11660] loop5: detected capacity change from 0 to 512 [ 374.968750][T11660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.968875][T11660] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.208911][ T9700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.221791][T11675] loop0: detected capacity change from 0 to 64 [ 375.500670][T11121] veth0_macvtap: entered promiscuous mode [ 375.556130][T11121] veth1_macvtap: entered promiscuous mode [ 375.604655][T11679] program syz.2.2184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.606664][T11121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.639705][T11121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.690348][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.690604][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.690642][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.690674][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.973303][T11685] loop0: detected capacity change from 0 to 128 [ 376.088314][T11685] FAT-fs (loop0): bogus number of FAT sectors [ 376.088336][T11685] FAT-fs (loop0): Can't find a valid FAT filesystem [ 377.030452][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.030473][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.300012][T11706] loop5: detected capacity change from 0 to 256 [ 377.301042][T11706] exfat: Deprecated parameter 'utf8' [ 377.301094][T11706] exfat: Deprecated parameter 'namecase' [ 377.301193][T11706] exfat: Deprecated parameter 'namecase' [ 377.301215][T11706] exfat: Deprecated parameter 'utf8' [ 377.301545][T11705] loop2: detected capacity change from 0 to 512 [ 377.399429][T11706] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 377.399750][T11706] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 377.517887][T11705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.518013][T11705] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.674091][T11706] exfat: Deprecated parameter 'utf8' [ 377.674109][T11706] exfat: Deprecated parameter 'utf8' [ 377.674200][T11706] exfat: Deprecated parameter 'utf8' [ 377.944014][T10309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.081414][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.081433][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.498837][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.498942][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.653978][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 378.779416][T11741] loop6: detected capacity change from 0 to 1024 [ 378.805726][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 378.833265][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 378.833293][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.932674][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 378.932688][ T10] pvrusb2: ********** [ 378.932692][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 378.932698][ T10] pvrusb2: Important functionality might not be entirely working. [ 378.932702][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 378.932708][ T10] pvrusb2: ********** [ 379.399346][ T2363] pvrusb2: Invalid write control endpoint [ 380.053536][ T2363] pvrusb2: Invalid write control endpoint [ 380.053552][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 380.053562][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 380.053569][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 380.053578][ T2363] pvrusb2: Device being rendered inoperable [ 380.121523][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 380.150940][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 380.223079][ T2363] pvrusb2: Attached sub-driver cx25840 [ 380.223093][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 380.223102][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 380.260803][T11749] loop0: detected capacity change from 0 to 131072 [ 380.360608][T11749] F2FS-fs (loop0): Test dummy encryption mode enabled [ 380.370153][T11749] F2FS-fs (loop0): invalid crc value [ 380.384024][ T5595] usb 6-1: USB disconnect, device number 5 [ 380.487352][T11749] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 380.501920][T11749] F2FS-fs (loop0): Start checkpoint disabled! [ 380.547510][T11749] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 380.549351][T11749] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 380.814083][T11765] loop6: detected capacity change from 0 to 256 [ 380.895499][T11765] FAT-fs (loop6): Directory bread(block 64) failed [ 380.895531][T11765] FAT-fs (loop6): Directory bread(block 65) failed [ 380.911815][T11765] FAT-fs (loop6): Directory bread(block 66) failed [ 380.911845][T11765] FAT-fs (loop6): Directory bread(block 67) failed [ 380.912001][T11765] FAT-fs (loop6): Directory bread(block 68) failed [ 380.912026][T11765] FAT-fs (loop6): Directory bread(block 69) failed [ 380.912224][T11765] FAT-fs (loop6): Directory bread(block 70) failed [ 380.912248][T11765] FAT-fs (loop6): Directory bread(block 71) failed [ 380.912339][T11765] FAT-fs (loop6): Directory bread(block 72) failed [ 380.912360][T11765] FAT-fs (loop6): Directory bread(block 73) failed [ 381.252847][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2215'. [ 383.616533][ T823] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 383.691772][T11824] loop6: detected capacity change from 0 to 128 [ 383.697452][T11824] vfat: Unknown parameter '‡0ÉÚSö­ÿÊ÷¾œÒxÊ>ÇߌÅß‘h$ûŽ+ÇfÎt/YÞÁ'Œÿeë‘üç ïè¶Û ÿ:7-¯¦÷ñŒ•‡†»ÐšFvN†aWÖµ‰×±y uk\’/í4‰}Œ‚dj3²üÙA•¯¥Z # ¬¹;Tx®úþžSEµ“@ŸšïÉ&iö1#†nùóuǦ2cíÍþÂQ' [ 383.776850][ T823] usb 6-1: Using ep0 maxpacket: 32 [ 383.806245][ T823] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 383.806271][ T823] usb 6-1: config 0 has no interface number 0 [ 383.810984][ T823] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 383.811009][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.811029][ T823] usb 6-1: Product: syz [ 383.811042][ T823] usb 6-1: Manufacturer: syz [ 383.811065][ T823] usb 6-1: SerialNumber: syz [ 383.926318][ T823] usb 6-1: config 0 descriptor?? [ 383.956401][ T823] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 384.270519][ T823] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 384.605151][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 384.641117][ T823] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 384.701290][ T823] usb 6-1: USB disconnect, device number 6 [ 384.763859][ T823] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 384.815171][ T823] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 384.832518][ T823] quatech2 6-1:0.51: device disconnected [ 384.926788][T11845] loop0: detected capacity change from 0 to 256 [ 384.927879][T11845] exfat: Deprecated parameter 'utf8' [ 384.982033][T11847] loop2: detected capacity change from 0 to 512 [ 384.983020][T11847] EXT4-fs: Ignoring removed nobh option [ 384.988017][T11845] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 385.000556][T11847] EXT4-fs (loop2): orphan cleanup on readonly fs [ 385.000576][T11847] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 385.123512][T11847] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2237: attempt to clear invalid blocks 2 len 1 [ 385.123549][T11847] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 385.129574][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 385.129593][ C1] EXT4-fs (loop2): initial error at time 1778004833: ext4_clear_blocks:876: inode 13 [ 385.129612][ C1] EXT4-fs (loop2): last error at time 1778004833: ext4_clear_blocks:876: inode 13 [ 385.132136][T11847] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 385.132286][T11847] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2237: invalid indirect mapped block 1819239214 (level 0) [ 385.132313][T11847] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 385.155822][ T32] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 385.316172][T11847] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2237: invalid indirect mapped block 1819239214 (level 1) [ 385.316210][T11847] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 385.330999][ T32] usb 7-1: Using ep0 maxpacket: 16 [ 385.340225][ T32] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 385.340251][ T32] usb 7-1: config 0 has no interface number 0 [ 385.340295][ T32] usb 7-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.340320][ T32] usb 7-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.340356][ T32] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 385.340378][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.387727][ T32] usb 7-1: config 0 descriptor?? [ 385.674129][T11860] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.762296][T11847] EXT4-fs (loop2): 1 truncate cleaned up [ 385.878793][T11847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 385.909621][T11847] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.2237: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 386.032727][ T5745] usb 7-1: USB disconnect, device number 2 [ 386.321382][T11880] netem: incorrect gi model size [ 386.321399][T11880] netem: change failed [ 386.323966][T10309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.908504][ T5745] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 387.087729][ T5745] usb 1-1: Using ep0 maxpacket: 32 [ 387.091711][ T5745] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.091741][ T5745] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 387.091767][ T5745] usb 1-1: config 0 interface 0 has no altsetting 0 [ 387.091797][ T5745] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 387.091818][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.182258][ T5745] usb 1-1: config 0 descriptor?? [ 387.188177][T11911] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 387.529588][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2258'. [ 387.529621][T11920] netlink: 'syz.6.2258': attribute type 30 has an invalid length. [ 387.529633][T11920] netlink: 'syz.6.2258': attribute type 1 has an invalid length. [ 387.639874][ T5745] uclogic 0003:5543:0042.001A: unknown main item tag 0x0 [ 387.639909][ T5745] uclogic 0003:5543:0042.001A: unknown main item tag 0x0 [ 387.639935][ T5745] uclogic 0003:5543:0042.001A: unknown main item tag 0x0 [ 387.639960][ T5745] uclogic 0003:5543:0042.001A: unknown main item tag 0x0 [ 387.639993][ T5745] uclogic 0003:5543:0042.001A: unknown main item tag 0x0 [ 387.640018][ T5745] uclogic 0003:5543:0042.001A: unknown main item tag 0x0 [ 387.640045][ T5745] uclogic 0003:5543:0042.001A: unknown main item tag 0x0 [ 387.640070][ T5745] uclogic 0003:5543:0042.001A: unknown main item tag 0x0 [ 387.640095][ T5745] uclogic 0003:5543:0042.001A: collection stack underflow [ 387.640117][ T5745] uclogic 0003:5543:0042.001A: item 0 0 0 12 parsing failed [ 387.643699][ T5745] uclogic 0003:5543:0042.001A: parse failed [ 387.643804][ T5745] uclogic 0003:5543:0042.001A: probe with driver uclogic failed with error -22 [ 387.811269][ T32] usb 1-1: USB disconnect, device number 11 [ 387.871595][T11929] loop5: detected capacity change from 0 to 512 [ 387.993681][T11929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.035310][T11929] EXT4-fs warning (device loop5): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 388.240133][ T9700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.425067][T11947] loop4: detected capacity change from 0 to 256 [ 388.433526][T11944] loop6: detected capacity change from 0 to 64 [ 388.619805][T11947] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xb963610a, utbl_chksum : 0xe619d30d) [ 388.647546][T11954] netem: change failed [ 389.134669][T11958] loop2: detected capacity change from 0 to 1024 [ 389.216025][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 389.379464][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 389.396820][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 389.396845][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.405000][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2276'. [ 389.405018][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2276'. [ 389.484291][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 389.484380][ T10] pvrusb2: ********** [ 389.484389][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 389.484401][ T10] pvrusb2: Important functionality might not be entirely working. [ 389.484409][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 389.484420][ T10] pvrusb2: ********** [ 389.697336][ T2363] pvrusb2: Invalid write control endpoint [ 389.709919][ T57] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.712153][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.712192][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.712224][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.806263][ T5617] Bluetooth: hci2: unexpected event for opcode 0x204e [ 389.941975][ T10] usb 7-1: USB disconnect, device number 3 [ 390.010568][ T2363] pvrusb2: Invalid write control endpoint [ 390.010583][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 390.010592][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 390.010599][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 390.010608][ T2363] pvrusb2: Device being rendered inoperable [ 390.015223][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 390.015273][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 390.162029][ T2363] pvrusb2: Attached sub-driver cx25840 [ 390.162045][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 390.162055][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 390.442565][T11991] program syz.0.2283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.516042][ T5595] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 391.701516][ T5595] usb 1-1: Using ep0 maxpacket: 32 [ 391.707980][ T5595] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 391.708006][ T5595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.723882][ T5595] usb 1-1: config 0 descriptor?? [ 391.953946][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2303'. [ 391.956344][ T5595] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 391.976683][ T5595] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 391.979677][ T5595] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 391.979726][ T5595] usb 1-1: media controller created [ 392.208516][ T5595] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.331194][T12045] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2307'. [ 392.331334][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2307'. [ 392.434434][T12050] program syz.4.2310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.509232][ T5595] az6027: usb out operation failed. (-71) [ 392.522934][ T5595] az6027: usb out operation failed. (-71) [ 392.522951][ T5595] stb0899_attach: Driver disabled by Kconfig [ 392.522960][ T5595] az6027: no front-end attached [ 392.522960][ T5595] [ 392.524885][ T5595] az6027: usb out operation failed. (-71) [ 392.524900][ T5595] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 392.540400][ T5595] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 392.644800][ T5595] dvb-usb: schedule remote query interval to 400 msecs. [ 392.644821][ T5595] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 392.761646][ T5595] usb 1-1: USB disconnect, device number 12 [ 392.849502][T12057] loop2: detected capacity change from 0 to 2048 [ 392.916046][T12062] loop6: detected capacity change from 0 to 128 [ 392.928489][T12057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.022328][ T5595] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 393.210755][T10309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.487476][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2317'. [ 393.530972][T12073] veth1_macvtap: left promiscuous mode [ 394.070966][T12083] loop2: detected capacity change from 0 to 64 [ 394.105837][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 394.116139][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2324'. [ 394.177302][T12083] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 394.255788][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 394.263804][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.263834][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.263856][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 394.263897][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 394.263919][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.333804][ T10] usb 5-1: config 0 descriptor?? [ 394.618159][T12097] loop6: detected capacity change from 0 to 64 [ 394.771072][T12097] UBIFS error (pid: 12097): cannot open "c:::", error -22 [ 394.817000][ T10] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 394.866051][ T10] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 394.866082][ T10] microsoft 0003:045E:07DA.001B: no inputs found [ 394.866094][ T10] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 395.105685][ T5596] usb 5-1: USB disconnect, device number 15 [ 395.240569][T12111] fido_id[12111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 395.548041][ T824] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 395.708086][ T824] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 395.708112][ T824] usb 3-1: config 0 has no interface number 0 [ 395.708141][ T824] usb 3-1: too many endpoints for config 0 interface 66 altsetting 71: 66, using maximum allowed: 30 [ 395.708178][ T824] usb 3-1: config 0 interface 66 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 395.708205][ T824] usb 3-1: config 0 interface 66 has no altsetting 0 [ 395.708236][ T824] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 395.708257][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.854385][T12136] trusted_key: encrypted_key: keyword 'epdate' not recognized [ 395.867882][ T824] usb 3-1: config 0 descriptor?? [ 395.894692][ T824] cp210x 3-1:0.66: cp210x converter detected [ 395.922774][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2348'. [ 395.922830][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2348'. [ 396.105453][T12143] loop6: detected capacity change from 0 to 512 [ 396.115017][T12143] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 396.149109][T12143] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 396.149580][T12143] EXT4-fs (loop6): orphan cleanup on readonly fs [ 396.173679][T12143] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.2350: Allocating blocks 41-42 which overlap fs metadata [ 396.173709][T12143] loop6: lost filesystem error report for type 5 error -117 [ 396.208317][ C1] EXT4-fs (loop6): initial error at time 1778004844: ext4_mb_mark_diskspace_used:4222 [ 396.208342][ C1] EXT4-fs (loop6): last error at time 1778004844: ext4_mb_mark_diskspace_used:4222 [ 396.286333][ T824] cp210x 3-1:0.66: failed to get vendor val 0x000e size 3: -71 [ 396.316199][ T824] usb 3-1: cp210x converter now attached to ttyUSB0 [ 396.340173][ T824] usb 3-1: USB disconnect, device number 6 [ 396.419973][ T824] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 396.440689][ T824] cp210x 3-1:0.66: device disconnected [ 396.491140][T12143] EXT4-fs (loop6): Remounting filesystem read-only [ 396.491411][T12143] __quota_error: 16 callbacks suppressed [ 396.491424][T12143] Quota error (device loop6): write_blk: dquota write failed [ 396.491508][T12143] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 396.491656][T12143] EXT4-fs (loop6): 1 truncate cleaned up [ 396.595834][T12143] EXT4-fs (loop6): pa ffff8880331f95c8: logic 1, phys. 41, len 23 [ 396.598078][T12143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 396.742208][T11121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.009272][T12158] loop2: detected capacity change from 0 to 256 [ 397.034503][T12158] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 397.399913][T12146] loop5: detected capacity change from 0 to 32768 [ 397.404919][T12165] loop6: detected capacity change from 0 to 1024 [ 397.433389][T12165] EXT4-fs: Ignoring removed mblk_io_submit option [ 397.486376][ T5745] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 397.495264][T12165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 397.495395][T12165] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.524506][T12146] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 397.591620][T12146] XFS (loop5): Ending clean mount [ 397.677094][T12181] loop2: detected capacity change from 0 to 64 [ 397.728638][ T5745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.728669][ T5745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.728707][ T5745] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 397.728729][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.784219][ T5745] usb 1-1: config 0 descriptor?? [ 398.262299][T11121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 398.274184][ T5745] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 398.313628][T12185] loop2: detected capacity change from 0 to 512 [ 398.364133][ T5745] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001C/input/input18 [ 398.398271][T12185] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2363: iget: bad i_size value: 38620345925642 [ 398.398303][T12185] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 398.405688][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 398.405706][ C1] EXT4-fs (loop2): initial error at time 1778004846: ext4_orphan_get:1397: inode 15 [ 398.405731][ C1] EXT4-fs (loop2): last error at time 1778004846: ext4_orphan_get:1397: inode 15 [ 398.405866][T12185] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2363: couldn't read orphan inode 15 (err -117) [ 398.405893][T12185] loop2: lost filesystem error report for type 5 error -117 [ 398.422416][T12185] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.471984][ T37] audit: type=1800 audit(1778004846.421:127): pid=12185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2363" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 398.779465][ T9700] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 398.830507][T10309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 399.145247][ T5745] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 399.203678][ T5745] usb 1-1: USB disconnect, device number 13 [ 399.352574][T12183] loop4: detected capacity change from 0 to 32768 [ 399.534276][T12183] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 399.753142][T12196] fido_id[12196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 399.788634][T12183] XFS (loop4): Ending clean mount [ 400.158320][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2372'. [ 400.480953][ T5608] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 400.867429][T12229] loop0: detected capacity change from 0 to 1024 [ 400.903408][T12231] program syz.2.2378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.055856][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 401.093467][T12229] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 401.093500][T12229] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 401.121125][T12229] EXT4-fs (loop0): invalid journal inode [ 401.121220][T12229] EXT4-fs (loop0): can't get journal size [ 401.122616][T12229] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #2: comm syz.0.2377: blocks 3-3 from inode overlap system zone [ 401.122657][T12229] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 401.124204][T12229] EXT4-fs (loop0): failed to initialize system zone (-117) [ 401.128761][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 401.128778][ C0] EXT4-fs (loop0): initial error at time 1778004849: ext4_protect_reserved_inode:182: inode 2 [ 401.128799][ C0] EXT4-fs (loop0): last error at time 1778004849: ext4_protect_reserved_inode:182: inode 2 [ 401.163318][T12229] EXT4-fs (loop0): mount failed [ 401.358368][T12233] loop2: detected capacity change from 0 to 4096 [ 401.432588][T12238] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.644695][T12244] overlayfs: upper fs does not support file handles, falling back to index=off. [ 401.644712][T12244] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 401.815999][T12246] loop4: detected capacity change from 0 to 2048 [ 401.916663][T12246] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 401.921281][T12246] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.280369][T12284] loop0: detected capacity change from 0 to 512 [ 403.308316][T12284] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 403.315044][T12284] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 403.315406][T12284] EXT4-fs (loop0): orphan cleanup on readonly fs [ 403.440827][T12284] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.2397: Allocating blocks 41-42 which overlap fs metadata [ 403.440862][T12284] loop0: lost filesystem error report for type 5 error -117 [ 403.445675][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 403.445695][ C1] EXT4-fs (loop0): initial error at time 1778004851: ext4_mb_mark_diskspace_used:4222 [ 403.445714][ C1] EXT4-fs (loop0): last error at time 1778004851: ext4_mb_mark_diskspace_used:4222 [ 403.449532][T12284] EXT4-fs (loop0): Remounting filesystem read-only [ 403.449655][T12284] Quota error (device loop0): write_blk: dquota write failed [ 403.449881][T12284] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 403.450031][T12284] EXT4-fs (loop0): 1 truncate cleaned up [ 403.495941][T12284] EXT4-fs (loop0): pa ffff8880331f94a0: logic 1, phys. 41, len 23 [ 403.513446][T12284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.856762][T12295] block nbd5: NBD_DISCONNECT [ 403.922780][T12295] XFS (nbd5): SB validate failed with error -5. [ 404.142301][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.547451][ T5733] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 404.695726][ T5733] usb 6-1: Using ep0 maxpacket: 32 [ 404.698446][ T5733] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 404.698468][ T5733] usb 6-1: config 0 has no interface number 0 [ 404.700825][ T5733] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 404.700853][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.700872][ T5733] usb 6-1: Product: syz [ 404.700885][ T5733] usb 6-1: Manufacturer: syz [ 404.700898][ T5733] usb 6-1: SerialNumber: syz [ 404.772578][ T5733] usb 6-1: config 0 descriptor?? [ 404.801898][ T5733] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 404.822573][T12324] loop4: detected capacity change from 0 to 1024 [ 404.993627][T12330] loop6: detected capacity change from 0 to 1024 [ 405.174017][ T5733] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 405.450462][ T5733] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 405.457043][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 405.558900][ T5733] usb 6-1: USB disconnect, device number 7 [ 405.653968][ T5733] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 405.703567][ T824] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 405.712346][ T5733] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 405.713249][ T5733] quatech2 6-1:0.51: device disconnected [ 405.960372][ T824] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 406.052390][T12342] loop0: detected capacity change from 0 to 32768 [ 406.096008][ T5596] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 406.125227][T12343] fido_id[12343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.001D/report_descriptor': No such device [ 406.217311][ T823] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 406.239572][T12342] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 406.256107][T12342] XFS (loop0): Ending clean mount [ 406.273597][T12342] XFS (loop0): Quotacheck needed: Please wait. [ 406.276910][ T5596] usb 3-1: Using ep0 maxpacket: 16 [ 406.298796][ T5596] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 406.298824][ T5596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 406.311073][ T5596] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 406.311099][ T5596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.311118][ T5596] usb 3-1: Product: syz [ 406.311131][ T5596] usb 3-1: Manufacturer: syz [ 406.311153][ T5596] usb 3-1: SerialNumber: syz [ 406.392111][ T5596] usb 3-1: config 0 descriptor?? [ 406.437933][ T5596] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 406.437967][ T5596] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 406.489684][ T823] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 406.489717][ T823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.489737][ T823] usb 7-1: Product: syz [ 406.489752][ T823] usb 7-1: Manufacturer: syz [ 406.489821][ T823] usb 7-1: SerialNumber: syz [ 407.031968][ T5596] em28xx 3-1:0.0: unknown em28xx chip ID (86) [ 407.060805][T12357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2425'. [ 407.130943][T12342] XFS (loop0): Quotacheck: Done. [ 407.255295][ T5596] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 407.277526][ T5596] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 407.277544][ T5596] em28xx 3-1:0.0: No AC97 audio processor [ 407.308182][ T5609] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 407.376392][ T5615] Bluetooth: hci0: command tx timeout [ 407.394092][ T5596] usb 3-1: USB disconnect, device number 7 [ 407.412605][ T5596] em28xx 3-1:0.0: Disconnecting em28xx [ 407.443402][ T823] rtl8150 7-1:1.0: couldn't reset the device [ 407.443775][ T823] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 407.508754][ T823] usb 7-1: USB disconnect, device number 4 [ 407.638874][ T6310] udevd[6310]: setting mode of /dev/bus/usb/007/004 to 020664 failed: No such file or directory [ 407.638995][ T6310] udevd[6310]: setting owner of /dev/bus/usb/007/004 to uid=0, gid=0 failed: No such file or directory [ 407.706174][ T5596] em28xx 3-1:0.0: Freeing device [ 408.285806][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 408.448254][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 408.448285][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.453152][ T10] usb 6-1: config 0 descriptor?? [ 408.484800][ T10] cp210x 6-1:0.0: cp210x converter detected [ 408.600703][T12378] loop4: detected capacity change from 0 to 2048 [ 408.803388][T12378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.861129][ T10] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 409.108590][ T10] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 409.108617][ T10] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 409.124279][ T10] usb 6-1: cp210x converter now attached to ttyUSB0 [ 409.148567][ T10] usb 6-1: USB disconnect, device number 8 [ 409.195561][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 409.259411][ T5608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.273052][ T10] cp210x 6-1:0.0: device disconnected [ 409.506178][ T5596] kernel read not supported for file /dsp1 (pid: 5596 comm: kworker/1:4) [ 410.320833][T12412] loop4: detected capacity change from 0 to 32768 [ 410.360855][T12426] loop2: detected capacity change from 0 to 1024 [ 410.372186][ T5596] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 410.433314][ T37] audit: type=1800 audit(1778004858.401:128): pid=12412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2449" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 410.547493][ T5596] usb 6-1: Using ep0 maxpacket: 32 [ 410.550823][ T5596] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 410.550850][ T5596] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.700328][ T37] audit: type=1800 audit(1778004858.671:129): pid=12427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2449" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 410.810837][ T5596] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 410.832813][ T5596] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 410.833786][ T5596] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 410.833835][ T5596] usb 6-1: media controller created [ 410.883947][ T5596] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.231003][ T5596] az6027: usb out operation failed. (-71) [ 411.231021][ T5596] stb0899_attach: Driver disabled by Kconfig [ 411.231031][ T5596] az6027: no front-end attached [ 411.231031][ T5596] [ 411.273692][ T5596] az6027: usb out operation failed. (-71) [ 411.273709][ T5596] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 411.290473][ T5596] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 411.294068][ T5596] dvb-usb: schedule remote query interval to 400 msecs. [ 411.294085][ T5596] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 411.344901][ T5596] usb 6-1: USB disconnect, device number 9 [ 411.439708][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 411.560432][ T5596] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 411.649517][T12438] loop2: detected capacity change from 0 to 164 [ 411.759427][T12438] ISOFS: unable to read i-node block [ 411.759490][T12438] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 412.984398][T12469] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 413.349418][T12490] loop4: detected capacity change from 0 to 256 [ 413.407087][ T5615] Bluetooth: hci4: adv larger than maximum supported [ 413.407101][ T5615] Bluetooth: hci4: Malformed LE Event: 0x0d [ 414.231991][T12510] sch_fq: defrate 0 ignored. [ 414.398147][T12512] loop0: detected capacity change from 0 to 4096 [ 414.399156][T12512] EXT4-fs: inline encryption not supported [ 414.405784][T12512] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 414.554896][T12512] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8856c019, mo2=0003] [ 414.572213][T12512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.691716][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 414.845948][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 414.850482][ T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 414.850508][ T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 414.850529][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 414.850547][ T10] usb 5-1: config 1 has no interface number 0 [ 414.850582][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 414.850607][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 414.850643][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 414.850665][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.903538][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 415.450784][T12537] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2499'. [ 415.475583][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 415.800897][ T5596] usb 5-1: USB disconnect, device number 16 [ 415.838427][ T5596] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 415.946230][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.069044][T12552] netlink: 'syz.6.2507': attribute type 8 has an invalid length. [ 416.069064][T12552] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2507'. [ 416.245841][ T5595] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 416.246013][ T5596] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 416.416811][ T5595] usb 6-1: Using ep0 maxpacket: 32 [ 416.445762][ T5596] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 416.445787][ T5596] usb 3-1: config 0 has no interface number 0 [ 416.445847][ T5596] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 416.445871][ T5596] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 416.449359][ T5596] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 416.449386][ T5596] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 416.449406][ T5596] usb 3-1: Manufacturer: syz [ 416.449420][ T5596] usb 3-1: SerialNumber: syz [ 416.526967][ T5595] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 416.526991][ T5595] usb 6-1: config 0 has no interface number 0 [ 416.529604][ T5595] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 416.529628][ T5595] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.529646][ T5595] usb 6-1: Product: syz [ 416.529659][ T5595] usb 6-1: Manufacturer: syz [ 416.529673][ T5595] usb 6-1: SerialNumber: syz [ 416.611297][ T5596] usb 3-1: config 0 descriptor?? [ 416.773894][ T5595] usb 6-1: config 0 descriptor?? [ 416.818643][ T5595] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 417.112500][T12580] loop4: detected capacity change from 0 to 64 [ 417.147653][ T5595] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 417.244870][ T5595] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 417.245462][T12582] loop6: detected capacity change from 0 to 512 [ 417.263000][ T5596] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 417.279893][T12582] EXT4-fs: Ignoring removed nobh option [ 417.279905][T12582] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.319908][ T5596] usb 3-1: USB disconnect, device number 8 [ 417.340934][T12582] EXT4-fs (loop6): orphan cleanup on readonly fs [ 417.340954][T12582] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 417.366476][T12582] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2518: attempt to clear invalid blocks 2 len 1 [ 417.366509][T12582] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 417.374298][T12582] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 417.378714][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 417.378728][ C1] EXT4-fs (loop6): initial error at time 1778004865: ext4_clear_blocks:876: inode 13 [ 417.378745][ C1] EXT4-fs (loop6): last error at time 1778004865: ext4_clear_blocks:876: inode 13 [ 417.481264][T12582] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2518: invalid indirect mapped block 1819239214 (level 0) [ 417.481300][T12582] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 417.485677][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 417.530356][ T5595] usb 6-1: USB disconnect, device number 10 [ 417.603631][T12582] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2518: invalid indirect mapped block 1819239214 (level 1) [ 417.603665][T12582] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 417.623240][ T5595] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 417.679281][T12582] EXT4-fs (loop6): 1 truncate cleaned up [ 417.746047][T12582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 417.751493][ T5595] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 417.752977][ T5595] quatech2 6-1:0.51: device disconnected [ 417.904334][T11121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.075279][T12585] loop4: detected capacity change from 0 to 4096 [ 418.082995][T12585] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 418.191741][T12594] pimreg: entered allmulticast mode [ 418.202009][T12594] pimreg: left allmulticast mode [ 418.292259][T12585] ntfs3(loop4): ino=19, mi_enum_attr [ 418.292286][T12585] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 418.376631][T12599] loop0: detected capacity change from 0 to 256 [ 418.391854][T12600] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 418.391854][T12600] The task syz.5.2525 (12600) triggered the difference, watch for misbehavior. [ 418.447988][T12599] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 418.623363][T12605] tipc: Started in network mode [ 418.623393][T12605] tipc: Node identity ac14140f, cluster identity 4711 [ 418.649414][T12605] tipc: New replicast peer: 255.255.255.255 [ 418.712580][T12605] tipc: Enabled bearer , priority 10 [ 418.930961][T12609] CUSE: unknown device info "" [ 418.930975][T12609] CUSE: unknown device info "" [ 418.930984][T12609] CUSE: unknown device info "ÿw" [ 418.930992][T12609] CUSE: unknown device info "" [ 418.931000][T12609] CUSE: unknown device info "" [ 418.931007][T12609] CUSE: unknown device info "" [ 418.931015][T12609] CUSE: unknown device info "" [ 418.931022][T12609] CUSE: unknown device info "" [ 418.931030][T12609] CUSE: DEVNAME unspecified [ 419.437860][T12633] loop6: detected capacity change from 0 to 16 [ 419.447438][T12633] erofs (device loop6): rootino(nid 36) is not a directory(i_mode 66700) [ 419.546874][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2539'. [ 419.679028][T12633] ip6gre1: entered promiscuous mode [ 419.679060][T12633] ip6gre1: entered allmulticast mode [ 419.754694][ T823] tipc: Node number set to 2886997007 [ 420.113492][T12656] : renamed from bond_slave_0 (while UP) [ 421.075309][T12669] loop6: detected capacity change from 0 to 524288000 [ 421.320213][T12673] Invalid logical block size (255) [ 421.879822][T12687] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 421.925872][T12687] pim6reg1: linktype set to 0 [ 422.324636][T12672] loop4: detected capacity change from 0 to 40427 [ 422.428150][T12682] loop6: detected capacity change from 0 to 32768 [ 422.430549][T12682] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2560 (12682) [ 422.431493][T12672] F2FS-fs (loop4): invalid crc value [ 422.552538][T12682] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 422.552570][T12682] BTRFS info (device loop6): using crc32c checksum algorithm [ 422.622611][T12672] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 422.880743][ T824] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 422.960630][T12672] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 423.002319][T12709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.029337][ T824] usb 3-1: Using ep0 maxpacket: 16 [ 423.035088][ T824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.035140][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.035165][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.035200][ T824] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 423.035221][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.078858][ T824] usb 3-1: config 0 descriptor?? [ 423.391994][T12682] BTRFS info (device loop6): enabling ssd optimizations [ 423.392021][T12682] BTRFS info (device loop6): turning on flush-on-commit [ 423.392038][T12682] BTRFS info (device loop6): enabling free space tree [ 423.392053][T12682] BTRFS info (device loop6): enabling auto defrag [ 423.392081][T12682] BTRFS info (device loop6): use lzo compression, level 1 [ 423.392099][T12682] BTRFS info (device loop6): max_inline set to 4096 [ 423.398211][T12685] loop0: detected capacity change from 0 to 40427 [ 423.462420][ T5733] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 423.522205][T12685] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 423.522227][T12685] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 423.527802][T12685] F2FS-fs (loop0): invalid crc value [ 423.590630][ T824] hid-picolcd 0003:04D8:F002.001E: No report with id 0xf3 found [ 423.590652][ T824] hid-picolcd 0003:04D8:F002.001E: No report with id 0xf4 found [ 423.643370][ T5608] syz-executor: attempt to access beyond end of device [ 423.643370][ T5608] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 423.664306][ T5608] CPU: 1 UID: 0 PID: 5608 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 423.664339][ T5608] Tainted: [L]=SOFTLOCKUP [ 423.664346][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 423.664365][ T5608] Call Trace: [ 423.664371][ T5608] [ 423.664379][ T5608] dump_stack_lvl+0xe8/0x150 [ 423.664409][ T5608] f2fs_stop_checkpoint+0x383/0x540 [ 423.664435][ T5608] f2fs_write_end_io+0x1274/0x1740 [ 423.664479][ T5608] __submit_merged_bio+0x256/0x6a0 [ 423.664507][ T5608] __submit_merged_write_cond+0x3c9/0x4e0 [ 423.664536][ T5608] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 423.664577][ T5608] f2fs_write_data_pages+0x287e/0x34f0 [ 423.664634][ T5608] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 423.664713][ T5608] ? do_raw_spin_lock+0x12b/0x2f0 [ 423.664748][ T5608] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 423.664769][ T5608] ? lockdep_hardirqs_on+0x7a/0x110 [ 423.664789][ T5608] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 423.664809][ T5608] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 423.664835][ T5608] ? reacquire_held_locks+0x104/0x190 [ 423.664854][ T5608] ? rt_spin_lock+0x1e0/0x400 [ 423.664886][ T5608] ? rt_spin_unlock+0x14f/0x200 [ 423.664913][ T5608] ? rt_spin_unlock+0x160/0x200 [ 423.664936][ T5608] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 423.664960][ T5608] do_writepages+0x32e/0x550 [ 423.664981][ T5608] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 423.665007][ T5608] ? rt_spin_unlock+0x14f/0x200 [ 423.665039][ T5608] filemap_fdatawrite+0x1ec/0x2f0 [ 423.665063][ T5608] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 423.665082][ T5608] ? __lock_acquire+0x6b5/0x2d10 [ 423.665141][ T5608] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 423.665174][ T5608] ? rt_spin_unlock+0x160/0x200 [ 423.665201][ T5608] f2fs_sync_dirty_inodes+0x30e/0x830 [ 423.665239][ T5608] f2fs_write_checkpoint+0x9df/0x26a0 [ 423.665262][ T5608] ? __lock_acquire+0x6b5/0x2d10 [ 423.665314][ T5608] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 423.665390][ T5608] kill_f2fs_super+0x314/0x730 [ 423.665420][ T5608] ? __pfx_kill_f2fs_super+0x10/0x10 [ 423.665455][ T5608] ? lockdep_hardirqs_on+0x7a/0x110 [ 423.665487][ T5608] deactivate_locked_super+0xbc/0x130 [ 423.665512][ T5608] cleanup_mnt+0x437/0x4d0 [ 423.665534][ T5608] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.665558][ T5608] task_work_run+0x1d9/0x270 [ 423.665584][ T5608] ? __pfx_task_work_run+0x10/0x10 [ 423.665608][ T5608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.665627][ T5608] exit_to_user_mode_loop+0xed/0x480 [ 423.665652][ T5608] ? rcu_is_watching+0x15/0xb0 [ 423.665671][ T5608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.665697][ T5608] do_syscall_64+0x33e/0xf80 [ 423.665716][ T5608] ? trace_irq_disable+0x3b/0x140 [ 423.665740][ T5608] ? clear_bhb_loop+0x40/0x90 [ 423.665763][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.665779][ T5608] RIP: 0033:0x7f87a8cbe017 [ 423.665804][ T5608] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 423.665816][ T5608] RSP: 002b:00007ffed826f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 423.665832][ T5608] RAX: 0000000000000000 RBX: 00007f87a8d52120 RCX: 00007f87a8cbe017 [ 423.665842][ T5608] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed826f2d0 [ 423.665851][ T5608] RBP: 00007ffed826f2d0 R08: 00007ffed82702d0 R09: 00000000ffffffff [ 423.665861][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed8270360 [ 423.665870][ T5608] R13: 00007f87a8d52120 R14: 0000000000067486 R15: 00007ffed82703a0 [ 423.665893][ T5608] [ 423.709268][ T5733] usb 6-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 423.709295][ T5733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.749158][ T5608] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 423.789232][ T824] usb 3-1: USB disconnect, device number 9 [ 423.805547][ T5733] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 424.193966][ T5733] gspca_sn9c20x: Write register 1001 failed -71 [ 424.193998][ T5733] gspca_sn9c20x: Device initialization failed [ 424.194070][ T5733] gspca_sn9c20x 6-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 424.343880][ T5733] usb 6-1: USB disconnect, device number 11 [ 424.848803][T12685] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 424.917084][T12726] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2571'. [ 425.412248][T11121] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 425.677484][ T824] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 425.678502][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 425.887078][ T824] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 425.887104][ T824] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 425.887124][ T824] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 425.887188][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 425.887211][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 425.887236][ T824] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 425.887275][ T824] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 425.887297][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.892123][ T824] usb 3-1: config 0 descriptor?? [ 425.893226][T12731] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 426.009801][T12739] loop5: detected capacity change from 0 to 1024 [ 426.136079][ T824] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 426.751911][ C1] usblp0: nonzero read bulk status received: -71 [ 426.777332][ T5595] usb 3-1: USB disconnect, device number 10 [ 426.836746][ T5595] usblp0: removed [ 426.989593][T12750] loop6: detected capacity change from 0 to 4096 [ 428.710509][T12785] loop0: detected capacity change from 0 to 4096 [ 430.111154][T12817] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 430.111421][T12817] pim6reg1: linktype set to 823 [ 430.275876][T12820] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 430.276017][T12820] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 430.502064][T12831] program syz.5.2614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.609214][T12838] loop2: detected capacity change from 0 to 22 [ 430.610432][T12838] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 430.663936][T12838] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 431.299106][T12855] pim6reg1: tun_chr_ioctl cmd 1074025678 [ 431.299128][T12855] pim6reg1: group set to 0 [ 431.329006][T12856] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.612292][T12859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.049418][T12852] loop2: detected capacity change from 0 to 32768 [ 432.965798][ T5733] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 432.988494][T12907] netlink: 844 bytes leftover after parsing attributes in process `syz.6.2647'. [ 433.115018][T12911] loop5: detected capacity change from 0 to 512 [ 433.158346][ T5733] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 433.158374][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.158394][ T5733] usb 5-1: Product: syz [ 433.158407][ T5733] usb 5-1: Manufacturer: syz [ 433.158421][ T5733] usb 5-1: SerialNumber: syz [ 433.174029][ T5733] usb 5-1: config 0 descriptor?? [ 433.188836][ T5733] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 017 [ 433.296789][T12911] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 433.330121][T12914] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2651'. [ 433.520041][T12911] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 433.561079][T12911] EXT4-fs (loop5): 1 truncate cleaned up [ 433.576870][T12911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.602466][T12911] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.5.2649: path /230/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 433.629372][ T5733] (null): failure reading functionality [ 433.753996][ T5733] i2c i2c-1: connected i2c-tiny-usb device [ 433.852806][ T5596] usb 5-1: USB disconnect, device number 17 [ 433.946312][ T9700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.140026][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2655'. [ 434.252169][T12937] bridge0: port 3(batadv1) entered blocking state [ 434.252598][T12937] bridge0: port 3(batadv1) entered disabled state [ 434.252878][T12937] batadv1: entered allmulticast mode [ 434.261366][T12937] batadv1: entered promiscuous mode [ 434.565783][ T5733] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 434.681096][ T1075] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 434.681114][ T1075] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 434.739073][T12954] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2668'. [ 434.746431][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 434.759555][ T5733] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.759604][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.759630][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 434.759650][ T5733] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 434.759672][ T5733] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.765582][ T5733] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 434.766695][ T5733] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 434.766716][ T5733] usb 1-1: Manufacturer: syz [ 434.777303][ T5733] usb 1-1: config 0 descriptor?? [ 435.096050][ T5733] rc_core: IR keymap rc-hauppauge not found [ 435.096071][ T5733] Registered IR keymap rc-empty [ 435.096203][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.115914][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.140842][ T5733] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 435.150676][ T5733] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 435.184518][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.204211][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.216181][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.235971][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.257965][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.278794][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.296711][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.315780][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.336195][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.357499][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.558854][ T5733] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 435.558878][ T5733] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 435.614336][ T5733] usb 1-1: USB disconnect, device number 14 [ 435.758720][ T5717] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 435.909475][ T5717] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 435.909523][ T5717] usb 7-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 435.909546][ T5717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.962708][ T5717] usb 7-1: config 0 descriptor?? [ 435.963831][T12975] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 436.420784][ T5717] apple 0003:05AC:029C.001F: unknown main item tag 0x0 [ 436.420820][ T5717] apple 0003:05AC:029C.001F: unknown main item tag 0x0 [ 436.420851][ T5717] apple 0003:05AC:029C.001F: unknown main item tag 0x0 [ 436.420878][ T5717] apple 0003:05AC:029C.001F: unknown main item tag 0x0 [ 436.420905][ T5717] apple 0003:05AC:029C.001F: unknown main item tag 0x0 [ 436.420930][ T5717] apple 0003:05AC:029C.001F: unknown main item tag 0x0 [ 436.464240][ T5717] apple 0003:05AC:029C.001F: unknown main item tag 0x0 [ 436.464276][ T5717] apple 0003:05AC:029C.001F: unknown main item tag 0x0 [ 436.464302][ T5717] apple 0003:05AC:029C.001F: unknown main item tag 0x0 [ 436.464325][ T5717] apple 0003:05AC:029C.001F: unknown main item tag 0x0 [ 436.747851][ T5717] apple 0003:05AC:029C.001F: hidraw0: USB HID v4.08 Device [HID 05ac:029c] on usb-dummy_hcd.6-1/input0 [ 436.794219][T13008] loop5: detected capacity change from 0 to 128 [ 436.856887][ T5717] usb 7-1: USB disconnect, device number 5 [ 436.922153][T13012] program syz.4.2692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.256034][ T5733] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 437.328761][T13017] fido_id[13017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 437.413682][T13019] loop2: detected capacity change from 0 to 8192 [ 437.415286][ T5733] usb 1-1: Using ep0 maxpacket: 32 [ 437.435015][ T5733] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 437.435042][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.435061][ T5733] usb 1-1: Product: syz [ 437.435074][ T5733] usb 1-1: Manufacturer: syz [ 437.435081][ T5733] usb 1-1: SerialNumber: syz [ 437.494982][ T5733] usb 1-1: config 0 descriptor?? [ 437.534790][ T5733] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 437.625762][ T5717] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 437.751912][T13026] loop5: detected capacity change from 0 to 256 [ 437.798551][ T5717] usb 7-1: Using ep0 maxpacket: 8 [ 437.800546][ T5717] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.800572][ T5717] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.800596][ T5717] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.800672][ T5717] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.800713][ T5717] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 437.800737][ T5717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.065228][T13026] FAT-fs (loop5): Directory bread(block 64) failed [ 438.065259][T13026] FAT-fs (loop5): Directory bread(block 65) failed [ 438.065407][T13026] FAT-fs (loop5): Directory bread(block 66) failed [ 438.065430][T13026] FAT-fs (loop5): Directory bread(block 67) failed [ 438.090076][T13026] FAT-fs (loop5): Directory bread(block 68) failed [ 438.100490][T13026] FAT-fs (loop5): Directory bread(block 69) failed [ 438.101632][T13026] FAT-fs (loop5): Directory bread(block 70) failed [ 438.101658][T13026] FAT-fs (loop5): Directory bread(block 71) failed [ 438.102782][T13026] FAT-fs (loop5): Directory bread(block 72) failed [ 438.102811][T13026] FAT-fs (loop5): Directory bread(block 73) failed [ 438.155987][ T5717] usb 7-1: GET_CAPABILITIES returned 0 [ 438.156032][ T5717] usbtmc 7-1:16.0: can't read capabilities [ 438.184604][ T5733] gspca_ov534_9: reg_w failed -71 [ 438.388014][ T5717] usb 7-1: USB disconnect, device number 6 [ 438.466030][ T5733] gspca_ov534_9: Unknown sensor 0000 [ 438.466120][ T5733] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 438.480120][ T5733] usb 1-1: USB disconnect, device number 15 [ 438.854937][ T5745] IPVS: starting estimator thread 0... [ 438.946617][T13051] IPVS: using max 10 ests per chain, 24000 per kthread [ 438.999765][T13056] netlink: 'syz.0.2714': attribute type 16 has an invalid length. [ 439.063703][T13059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2713'. [ 439.250032][T13067] pimreg: tun_chr_ioctl cmd 2147767506 [ 439.288150][T13071] misc userio: Can't change port type on an already running userio instance [ 439.711719][T13078] loop6: detected capacity change from 0 to 1024 [ 439.830654][T13078] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 439.894985][T13078] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.901597][ T37] audit: type=1800 audit(1778004887.871:130): pid=13078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2720" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 439.903030][T13078] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2720: bg 0: block 112: padding at end of block bitmap is not set [ 439.958284][ T5595] kernel read not supported for file /video37 (pid: 5595 comm: kworker/1:3) [ 439.977121][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.977218][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.987521][T13078] EXT4-fs (loop6): Remounting filesystem read-only [ 440.179816][T11121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 440.397528][T13093] ip6tnl1: entered promiscuous mode [ 440.397553][T13093] ip6tnl1: entered allmulticast mode [ 440.472513][ T4109] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 440.474740][T13100] cgroup: fork rejected by pids controller in /syz6 [ 440.587250][T13105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2732'. [ 441.273023][T13124] loop0: detected capacity change from 0 to 4096 [ 441.431003][T13125] loop4: detected capacity change from 0 to 32768 [ 441.468883][T13129] input: syz0 as /devices/virtual/input/input25 [ 441.518565][T13125] (syz.4.2740,13125,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 441.520672][T13125] (syz.4.2740,13125,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 441.585335][T13125] JBD2: Ignoring recovery information on journal [ 442.026375][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 442.148478][T13137] loop2: detected capacity change from 0 to 16 [ 442.246823][T13137] erofs (device loop2): mounted with root inode @ nid 36. [ 442.334934][T13125] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 442.569008][T13125] syz.4.2740 (13125) used greatest stack depth: 17912 bytes left [ 443.382515][T13133] loop5: detected capacity change from 0 to 262144 [ 443.412797][T13133] F2FS-fs (loop5): invalid crc value [ 443.610552][T13133] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 443.718683][T13133] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 444.148679][ T5608] ocfs2: Unmounting device (7,4) on (node local) [ 444.178032][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 445.413679][T13165] loop0: detected capacity change from 0 to 256 [ 445.816997][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 445.891951][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 445.895176][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 445.999633][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 446.000878][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 446.420875][ T43] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.326618][T13182] loop0: detected capacity change from 0 to 131072 [ 447.479627][T13182] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 447.512521][T13182] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 447.536395][T13182] F2FS-fs (loop0): recover xattr in inode (7), error(0) [ 447.536459][T13182] F2FS-fs (loop0): set inode (7) has corrupted xattr [ 448.416777][ T5615] Bluetooth: hci3: command tx timeout [ 448.460779][ T43] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.127850][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 449.208067][ T43] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.307735][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.307761][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.307781][ T10] usb 5-1: config 1 has no interface number 0 [ 449.307821][ T10] usb 5-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 449.307856][ T10] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 449.307912][ T10] usb 5-1: config 1 interface 2 has no altsetting 1 [ 449.310669][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.310695][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.310715][ T10] usb 5-1: Product: syz [ 449.310729][ T10] usb 5-1: Manufacturer: syz [ 449.310743][ T10] usb 5-1: SerialNumber: syz [ 449.650809][ T5596] usb 5-1: USB disconnect, device number 18 [ 449.983112][ T43] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.202158][T13218] macvlan2: entered promiscuous mode [ 450.202179][T13218] bridge0: entered promiscuous mode [ 450.309758][T13223] loop4: detected capacity change from 0 to 1024 [ 450.495784][ T5615] Bluetooth: hci3: command tx timeout [ 450.532159][T13224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2775'. [ 451.327155][T13249] loop5: detected capacity change from 0 to 256 [ 452.096034][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 452.576960][ T5615] Bluetooth: hci3: command tx timeout [ 452.700688][T13271] loop0: detected capacity change from 0 to 2048 [ 452.723675][T13271] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.938014][ T43] bridge_slave_1: left allmulticast mode [ 453.938047][ T43] bridge_slave_1: left promiscuous mode [ 453.969324][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.041975][ T43] bridge_slave_0: left allmulticast mode [ 454.042006][ T43] bridge_slave_0: left promiscuous mode [ 454.042265][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.661520][ T5615] Bluetooth: hci3: command tx timeout [ 455.297563][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.366232][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.390993][ T43] bond0 (unregistering): Released all slaves [ 455.583203][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 455.626554][T13331] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 455.714229][T13332] pim6reg: entered allmulticast mode [ 456.100685][T13354] loop5: detected capacity change from 0 to 2048 [ 456.148849][T13354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.156727][T13354] EXT4-fs (loop5): shut down requested (2) [ 456.284573][ T9700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.865942][T13168] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.866211][T13168] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.866518][T13168] bridge_slave_0: entered allmulticast mode [ 456.869798][T13168] bridge_slave_0: entered promiscuous mode [ 456.875810][T13168] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.876076][T13168] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.876315][T13168] bridge_slave_1: entered allmulticast mode [ 456.887997][T13168] bridge_slave_1: entered promiscuous mode [ 457.127799][T13378] comedi comedi0: Minor 2 could not be opened [ 457.134345][T13379] loop0: detected capacity change from 0 to 2048 [ 457.184649][T13379] loop0: p1 < > p4 [ 457.184649][T13379] p4: [ 457.198041][T13369] loop5: detected capacity change from 0 to 32768 [ 457.199826][T13379] loop0: p4 size 722688 extends beyond EOD, truncated [ 457.540221][T13369] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 457.582633][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 457.582854][ T6310] udevd[6310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 457.918898][T13381] netlink: 'syz.2.2834': attribute type 3 has an invalid length. [ 458.170326][ T9700] ocfs2: Unmounting device (7,5) on (node local) [ 458.450305][T13168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.726241][T13410] loop2: detected capacity change from 0 to 40427 [ 458.727089][T13410] F2FS-fs: heap/no_heap options were deprecated [ 458.751013][T13168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.768908][T13410] F2FS-fs (loop2): build fault injection rate: 19 [ 458.768928][T13410] F2FS-fs (loop2): build fault injection type: 0x77e8c [ 458.774654][T13410] F2FS-fs (loop2): invalid crc value [ 458.798883][T13410] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21c/0xd60 [ 458.806797][T13410] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x18f/0xb00 [ 458.809312][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 458.905074][T13410] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 458.933337][T13410] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 458.940571][T13410] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of write_normal_summaries+0x120/0x3f0 [ 459.063249][T13410] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5e2/0x24f0 [ 459.063299][T13410] F2FS-fs (loop2): invalid blkaddr: 513, type: 10, run fsck to fix. [ 459.080394][T13410] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x681/0x24f0 [ 459.080441][T13410] F2FS-fs (loop2): invalid blkaddr: 1027, type: 10, run fsck to fix. [ 459.463120][T13430] loop2: detected capacity change from 0 to 512 [ 459.521108][T13430] EXT4-fs (loop2): 1 truncate cleaned up [ 459.541334][T13430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.803781][ T43] hsr_slave_0: left promiscuous mode [ 459.831865][ T37] audit: type=1800 audit(1778004907.801:131): pid=13438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2849" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 459.935074][ T43] hsr_slave_1: left promiscuous mode [ 459.938419][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.938443][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.981415][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.981441][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.070627][ T43] veth1_macvtap: left promiscuous mode [ 460.070723][ T43] veth0_macvtap: left promiscuous mode [ 460.120535][T10309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.120871][ T43] veth1_vlan: left promiscuous mode [ 460.121049][ T43] veth0_vlan: left promiscuous mode [ 460.272090][T13453] loop2: detected capacity change from 0 to 256 [ 460.367441][T13453] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 460.491028][T13460] loop0: detected capacity change from 0 to 256 [ 460.513429][T13460] exfat: Deprecated parameter 'namecase' [ 460.513537][T13460] exfat: Deprecated parameter 'utf8' [ 460.513560][T13460] exfat: Deprecated parameter 'namecase' [ 460.513601][T13460] exfat: Deprecated parameter 'utf8' [ 460.585762][ T5717] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 460.589333][T13460] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36332e94, utbl_chksum : 0xe619d30d) [ 460.780388][ T5717] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 460.780417][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.799175][ T5717] usb 6-1: config 0 descriptor?? [ 460.839739][ T5717] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 461.637546][ T5717] usb 6-1: USB disconnect, device number 12 [ 461.808975][ T824] kernel write not supported for file /489/coredump_filter (pid: 824 comm: kworker/0:2) [ 461.999985][T13480] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 462.020412][T13480] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 462.362704][ T43] team0 (unregistering): Port device team_slave_1 removed [ 462.417909][ T43] team0 (unregistering): Port device team_slave_0 removed [ 462.772819][T13168] team0: Port device team_slave_0 added [ 462.837631][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 462.858559][T13168] team0: Port device team_slave_1 added [ 463.215412][T13168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.215428][T13168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.215451][T13168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.233678][T13168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.233700][T13168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.233724][T13168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.641531][T13168] hsr_slave_0: entered promiscuous mode [ 463.658244][T13168] hsr_slave_1: entered promiscuous mode [ 463.660328][T13168] debugfs: 'hsr0' already exists in 'hsr' [ 463.660447][T13168] Cannot create hsr debugfs directory [ 463.881997][ T5615] block nbd0: Receive control failed (result -32) [ 463.891277][ T5617] block nbd0: Receive control failed (result -32) [ 464.080967][T13487] nbd0: detected capacity change from 0 to 128 [ 464.172030][ T6310] block nbd0: Dead connection, failed to find a fallback [ 464.172053][ T6310] block nbd0: shutting down sockets [ 464.266034][ T6310] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.266327][ T6310] Buffer I/O error on dev nbd0, logical block 0, async page read [ 464.266966][ T6310] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.266990][ T6310] Buffer I/O error on dev nbd0, logical block 0, async page read [ 464.267137][ T6310] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.267158][ T6310] Buffer I/O error on dev nbd0, logical block 0, async page read [ 464.267300][ T6310] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.267331][ T6310] Buffer I/O error on dev nbd0, logical block 0, async page read [ 464.267516][ T6310] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.267537][ T6310] Buffer I/O error on dev nbd0, logical block 0, async page read [ 464.267699][ T6310] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.267720][ T6310] Buffer I/O error on dev nbd0, logical block 0, async page read [ 464.267880][ T6310] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.267901][ T6310] Buffer I/O error on dev nbd0, logical block 0, async page read [ 464.268041][ T6310] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.268062][ T6310] Buffer I/O error on dev nbd0, logical block 0, async page read [ 464.268150][ T6310] ldm_validate_partition_table(): Disk read failed. [ 464.268215][ T6310] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.268236][ T6310] Buffer I/O error on dev nbd0, logical block 0, async page read [ 464.268385][ T6310] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.268406][ T6310] Buffer I/O error on dev nbd0, logical block 0, async page read [ 464.268835][ T6310] Dev nbd0: unable to read RDB block 0 [ 464.269518][ T6310] nbd0: unable to read partition table [ 464.493076][ T6310] ldm_validate_partition_table(): Disk read failed. [ 464.493607][ T6310] Dev nbd0: unable to read RDB block 0 [ 464.494218][ T6310] nbd0: unable to read partition table [ 466.004477][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 466.101481][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 466.133956][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.165270][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.177911][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 466.305625][ T5615] [ 466.305637][ T5615] ====================================================== [ 466.305645][ T5615] WARNING: possible circular locking dependency detected [ 466.305662][ T5615] syzkaller #0 Tainted: G L [ 466.305673][ T5615] ------------------------------------------------------ [ 466.305680][ T5615] kworker/u9:2/5615 is trying to acquire lock: [ 466.305691][ T5615] ffff88801badb2c0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0 [ 466.305746][ T5615] [ 466.305746][ T5615] but task is already holding lock: [ 466.305753][ T5615] ffff88801badb238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5d0 [ 466.305796][ T5615] [ 466.305796][ T5615] which lock already depends on the new lock. [ 466.305796][ T5615] [ 466.305803][ T5615] [ 466.305803][ T5615] the existing dependency chain (in reverse order) is: [ 466.305814][ T5615] [ 466.305814][ T5615] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 466.305838][ T5615] down_write+0x3a/0x50 [ 466.305859][ T5615] kernfs_add_one+0x41/0x5d0 [ 466.305877][ T5615] kernfs_create_dir_ns+0xde/0x130 [ 466.305899][ T5615] internal_create_group+0x425/0x1180 [ 466.305917][ T5615] cpuhp_invoke_callback+0x445/0x860 [ 466.305939][ T5615] cpuhp_issue_call+0x430/0x7a0 [ 466.305961][ T5615] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 466.305982][ T5615] __cpuhp_setup_state+0x3f/0x60 [ 466.306003][ T5615] do_one_initcall+0x250/0x870 [ 466.306025][ T5615] do_initcall_level+0x104/0x190 [ 466.306049][ T5615] do_initcalls+0x59/0xa0 [ 466.306071][ T5615] kernel_init_freeable+0x2a6/0x3e0 [ 466.306096][ T5615] kernel_init+0x1d/0x1d0 [ 466.306118][ T5615] ret_from_fork+0x514/0xb70 [ 466.306137][ T5615] ret_from_fork_asm+0x1a/0x30 [ 466.306160][ T5615] [ 466.306160][ T5615] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 466.306184][ T5615] [ 466.306184][ T5615] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 466.306210][ T5615] cpus_read_lock+0x42/0x160 [ 466.306227][ T5615] static_key_disable+0x12/0x20 [ 466.306246][ T5615] __inet_hash_connect+0x2623/0x2630 [ 466.306274][ T5615] tcp_v4_connect+0xd5f/0x19b0 [ 466.306299][ T5615] __inet_stream_connect+0x25a/0xdd0 [ 466.306318][ T5615] inet_stream_connect+0x66/0xa0 [ 466.306336][ T5615] __sys_connect+0x315/0x450 [ 466.306359][ T5615] __x64_sys_connect+0x7a/0x90 [ 466.306392][ T5615] do_syscall_64+0x15f/0xf80 [ 466.306410][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.306433][ T5615] [ 466.306433][ T5615] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 466.306460][ T5615] lock_sock_nested+0x41/0x130 [ 466.306485][ T5615] tcp_sendmsg+0x21/0x50 [ 466.306506][ T5615] sock_sendmsg_nosec+0xf9/0x150 [ 466.306527][ T5615] sock_sendmsg+0x1ca/0x2d0 [ 466.306547][ T5615] __sock_xmit+0x251/0x510 [ 466.306574][ T5615] nbd_disconnect+0x3b9/0x560 [ 466.306599][ T5615] nbd_ioctl+0xc80/0xe40 [ 466.306619][ T5615] blkdev_ioctl+0x5e6/0x750 [ 466.306636][ T5615] __se_sys_ioctl+0xff/0x170 [ 466.306666][ T5615] do_syscall_64+0x15f/0xf80 [ 466.306685][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.306703][ T5615] [ 466.306703][ T5615] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 466.306731][ T5615] mutex_lock_nested+0x5a/0x1d0 [ 466.306756][ T5615] nbd_queue_rq+0x37b/0x1100 [ 466.306777][ T5615] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 466.306805][ T5615] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 466.306823][ T5615] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 466.306841][ T5615] blk_mq_run_hw_queue+0x368/0x520 [ 466.306867][ T5615] blk_mq_dispatch_list+0xd1f/0xe20 [ 466.306883][ T5615] blk_mq_flush_plug_list+0x48d/0x570 [ 466.306911][ T5615] __blk_flush_plug+0x3ed/0x4d0 [ 466.306940][ T5615] __submit_bio+0x28d/0x580 [ 466.306957][ T5615] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 466.306982][ T5615] block_read_full_folio+0x7b7/0x830 [ 466.307010][ T5615] filemap_read_folio+0x137/0x3b0 [ 466.307036][ T5615] do_read_cache_folio+0x2bf/0x560 [ 466.307063][ T5615] read_part_sector+0xb8/0x2b0 [ 466.307090][ T5615] adfspart_check_ICS+0xb1/0x960 [ 466.307106][ T5615] bdev_disk_changed+0x817/0x1770 [ 466.307137][ T5615] blkdev_get_whole+0x2e5/0x480 [ 466.307152][ T5615] bdev_open+0x31e/0xcc0 [ 466.307167][ T5615] blkdev_open+0x485/0x620 [ 466.307186][ T5615] do_dentry_open+0x83d/0x13e0 [ 466.307202][ T5615] vfs_open+0x3b/0x350 [ 466.307219][ T5615] path_openat+0x2e43/0x38a0 [ 466.307242][ T5615] do_file_open+0x23e/0x4a0 [ 466.307268][ T5615] do_sys_openat2+0x113/0x200 [ 466.307286][ T5615] __x64_sys_openat+0x138/0x170 [ 466.307304][ T5615] do_syscall_64+0x15f/0xf80 [ 466.307323][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.307341][ T5615] [ 466.307341][ T5615] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 466.307366][ T5615] mutex_lock_nested+0x5a/0x1d0 [ 466.307396][ T5615] nbd_queue_rq+0xc6/0x1100 [ 466.307417][ T5615] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 466.307444][ T5615] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 466.307462][ T5615] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 466.307480][ T5615] blk_mq_run_hw_queue+0x368/0x520 [ 466.307506][ T5615] blk_mq_dispatch_list+0xd1f/0xe20 [ 466.307523][ T5615] blk_mq_flush_plug_list+0x48d/0x570 [ 466.307552][ T5615] __blk_flush_plug+0x3ed/0x4d0 [ 466.307580][ T5615] __submit_bio+0x28d/0x580 [ 466.307596][ T5615] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 466.307623][ T5615] block_read_full_folio+0x7b7/0x830 [ 466.307651][ T5615] filemap_read_folio+0x137/0x3b0 [ 466.307677][ T5615] do_read_cache_folio+0x2bf/0x560 [ 466.307704][ T5615] read_part_sector+0xb8/0x2b0 [ 466.307730][ T5615] adfspart_check_ICS+0xb1/0x960 [ 466.307746][ T5615] bdev_disk_changed+0x817/0x1770 [ 466.307773][ T5615] blkdev_get_whole+0x2e5/0x480 [ 466.307789][ T5615] bdev_open+0x31e/0xcc0 [ 466.307804][ T5615] blkdev_open+0x485/0x620 [ 466.307821][ T5615] do_dentry_open+0x83d/0x13e0 [ 466.307838][ T5615] vfs_open+0x3b/0x350 [ 466.307853][ T5615] path_openat+0x2e43/0x38a0 [ 466.307876][ T5615] do_file_open+0x23e/0x4a0 [ 466.307898][ T5615] do_sys_openat2+0x113/0x200 [ 466.307916][ T5615] __x64_sys_openat+0x138/0x170 [ 466.307934][ T5615] do_syscall_64+0x15f/0xf80 [ 466.307953][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.307970][ T5615] [ 466.307970][ T5615] -> #4 (set->srcu){.+.+}-{0:0}: [ 466.307996][ T5615] __synchronize_srcu+0xca/0x300 [ 466.308021][ T5615] elevator_switch+0x1e8/0x7a0 [ 466.308048][ T5615] elevator_change+0x2cc/0x450 [ 466.308072][ T5615] elevator_set_default+0x36c/0x430 [ 466.308097][ T5615] blk_register_queue+0x3e9/0x4e0 [ 466.308113][ T5615] __add_disk+0x677/0xd50 [ 466.308130][ T5615] add_disk_fwnode+0xfb/0x480 [ 466.308147][ T5615] nbd_dev_add+0x72c/0xb50 [ 466.308167][ T5615] nbd_init+0x168/0x1f0 [ 466.308192][ T5615] do_one_initcall+0x250/0x870 [ 466.308214][ T5615] do_initcall_level+0x104/0x190 [ 466.308238][ T5615] do_initcalls+0x59/0xa0 [ 466.308261][ T5615] kernel_init_freeable+0x2a6/0x3e0 [ 466.308285][ T5615] kernel_init+0x1d/0x1d0 [ 466.308307][ T5615] ret_from_fork+0x514/0xb70 [ 466.308329][ T5615] ret_from_fork_asm+0x1a/0x30 [ 466.308353][ T5615] [ 466.308353][ T5615] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 466.308386][ T5615] mutex_lock_nested+0x5a/0x1d0 [ 466.308408][ T5615] elevator_change+0x1b3/0x450 [ 466.308435][ T5615] elevator_set_none+0xb5/0x140 [ 466.308462][ T5615] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 466.308483][ T5615] nbd_start_device+0x17f/0xb20 [ 466.308502][ T5615] nbd_genl_connect+0x1651/0x1c80 [ 466.308521][ T5615] genl_family_rcv_msg_doit+0x22a/0x330 [ 466.308542][ T5615] genl_rcv_msg+0x61c/0x7a0 [ 466.308562][ T5615] netlink_rcv_skb+0x232/0x4b0 [ 466.308590][ T5615] genl_rcv+0x28/0x40 [ 466.308607][ T5615] netlink_unicast+0x780/0x920 [ 466.308629][ T5615] netlink_sendmsg+0x813/0xb40 [ 466.308645][ T5615] sock_sendmsg_nosec+0x112/0x150 [ 466.308666][ T5615] ____sys_sendmsg+0x55c/0x870 [ 466.308680][ T5615] ___sys_sendmsg+0x2a5/0x360 [ 466.308695][ T5615] __x64_sys_sendmsg+0x1c3/0x2a0 [ 466.308710][ T5615] do_syscall_64+0x15f/0xf80 [ 466.308727][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.308744][ T5615] [ 466.308744][ T5615] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 466.308774][ T5615] blk_alloc_queue+0x54e/0x690 [ 466.308800][ T5615] __blk_mq_alloc_disk+0x197/0x390 [ 466.308817][ T5615] nbd_dev_add+0x499/0xb50 [ 466.308837][ T5615] nbd_init+0x168/0x1f0 [ 466.308862][ T5615] do_one_initcall+0x250/0x870 [ 466.308883][ T5615] do_initcall_level+0x104/0x190 [ 466.308909][ T5615] do_initcalls+0x59/0xa0 [ 466.308932][ T5615] kernel_init_freeable+0x2a6/0x3e0 [ 466.308956][ T5615] kernel_init+0x1d/0x1d0 [ 466.308978][ T5615] ret_from_fork+0x514/0xb70 [ 466.308999][ T5615] ret_from_fork_asm+0x1a/0x30 [ 466.309020][ T5615] [ 466.309020][ T5615] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 466.309045][ T5615] fs_reclaim_acquire+0x71/0x100 [ 466.309067][ T5615] kmem_cache_alloc_noprof+0x44/0x680 [ 466.309089][ T5615] __kernfs_iattrs+0xdf/0x320 [ 466.309106][ T5615] kernfs_iop_setattr+0xea/0x3f0 [ 466.309123][ T5615] notify_change+0xc18/0xf60 [ 466.309146][ T5615] do_truncate+0x1c2/0x250 [ 466.309168][ T5615] path_openat+0x2fc4/0x38a0 [ 466.309188][ T5615] do_file_open+0x23e/0x4a0 [ 466.309207][ T5615] do_sys_openat2+0x113/0x200 [ 466.309222][ T5615] __x64_sys_openat+0x138/0x170 [ 466.309238][ T5615] do_syscall_64+0x15f/0xf80 [ 466.309255][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.309271][ T5615] [ 466.309271][ T5615] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 466.309294][ T5615] __lock_acquire+0x15a5/0x2d10 [ 466.309320][ T5615] lock_acquire+0x106/0x350 [ 466.309343][ T5615] down_write+0x3a/0x50 [ 466.309362][ T5615] kernfs_link_sibling+0x4ed/0x5c0 [ 466.309392][ T5615] kernfs_add_one+0x1ca/0x5d0 [ 466.309412][ T5615] kernfs_create_dir_ns+0xde/0x130 [ 466.309435][ T5615] sysfs_create_dir_ns+0x12f/0x2a0 [ 466.309451][ T5615] kobject_add_internal+0x631/0xd10 [ 466.309473][ T5615] kobject_add+0x163/0x240 [ 466.309493][ T5615] device_add+0x408/0xb90 [ 466.309514][ T5615] hci_conn_add_sysfs+0xd5/0x210 [ 466.309530][ T5615] hci_conn_complete_evt+0x84e/0x1290 [ 466.309549][ T5615] hci_event_packet+0x6ab/0xef0 [ 466.309566][ T5615] hci_rx_work+0x3ee/0x1040 [ 466.309585][ T5615] process_one_work+0x9a3/0x1710 [ 466.309606][ T5615] worker_thread+0xba8/0x11e0 [ 466.309627][ T5615] kthread+0x388/0x470 [ 466.309652][ T5615] ret_from_fork+0x514/0xb70 [ 466.309671][ T5615] ret_from_fork_asm+0x1a/0x30 [ 466.309694][ T5615] [ 466.309694][ T5615] other info that might help us debug this: [ 466.309694][ T5615] [ 466.309700][ T5615] Chain exists of: [ 466.309700][ T5615] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 466.309700][ T5615] [ 466.309733][ T5615] Possible unsafe locking scenario: [ 466.309733][ T5615] [ 466.309739][ T5615] CPU0 CPU1 [ 466.309744][ T5615] ---- ---- [ 466.309750][ T5615] lock(&root->kernfs_rwsem); [ 466.309763][ T5615] lock(cpuhp_state_mutex); [ 466.309778][ T5615] lock(&root->kernfs_rwsem); [ 466.309792][ T5615] lock(&root->kernfs_iattr_rwsem); [ 466.309803][ T5615] [ 466.309803][ T5615] *** DEADLOCK *** [ 466.309803][ T5615] [ 466.309808][ T5615] 4 locks held by kworker/u9:2/5615: [ 466.309819][ T5615] #0: ffff88802972c938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 466.309873][ T5615] #1: ffffc900050afc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 466.309921][ T5615] #2: ffff888059f3c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xcd/0x1290 [ 466.309967][ T5615] #3: ffff88801badb238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5d0 [ 466.310015][ T5615] [ 466.310015][ T5615] stack backtrace: [ 466.310029][ T5615] CPU: 1 UID: 0 PID: 5615 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 466.310056][ T5615] Tainted: [L]=SOFTLOCKUP [ 466.310063][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 466.310076][ T5615] Workqueue: hci2 hci_rx_work [ 466.310095][ T5615] Call Trace: [ 466.310103][ T5615] [ 466.310111][ T5615] dump_stack_lvl+0xe8/0x150 [ 466.310135][ T5615] print_circular_bug+0x2e1/0x300 [ 466.310159][ T5615] check_noncircular+0x12e/0x150 [ 466.310183][ T5615] __lock_acquire+0x15a5/0x2d10 [ 466.310214][ T5615] ? __lock_acquire+0x6b5/0x2d10 [ 466.310248][ T5615] ? kernfs_link_sibling+0x4ed/0x5c0 [ 466.310271][ T5615] lock_acquire+0x106/0x350 [ 466.310297][ T5615] ? kernfs_link_sibling+0x4ed/0x5c0 [ 466.310327][ T5615] down_write+0x3a/0x50 [ 466.310348][ T5615] ? kernfs_link_sibling+0x4ed/0x5c0 [ 466.310378][ T5615] kernfs_link_sibling+0x4ed/0x5c0 [ 466.310407][ T5615] kernfs_add_one+0x1ca/0x5d0 [ 466.310432][ T5615] kernfs_create_dir_ns+0xde/0x130 [ 466.310459][ T5615] sysfs_create_dir_ns+0x12f/0x2a0 [ 466.310479][ T5615] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 466.310509][ T5615] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 466.310530][ T5615] ? rt_spin_unlock+0x160/0x200 [ 466.310559][ T5615] kobject_add_internal+0x631/0xd10 [ 466.310586][ T5615] kobject_add+0x163/0x240 [ 466.310612][ T5615] ? __pfx_kobject_add+0x10/0x10 [ 466.310637][ T5615] ? get_device_parent+0x370/0x3a0 [ 466.310662][ T5615] device_add+0x408/0xb90 [ 466.310687][ T5615] hci_conn_add_sysfs+0xd5/0x210 [ 466.310707][ T5615] hci_conn_complete_evt+0x84e/0x1290 [ 466.310733][ T5615] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 466.310758][ T5615] hci_event_packet+0x6ab/0xef0 [ 466.310780][ T5615] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 466.310807][ T5615] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 466.310827][ T5615] ? __pfx_hci_event_packet+0x10/0x10 [ 466.310846][ T5615] ? rt_spin_unlock+0x14f/0x200 [ 466.310877][ T5615] ? hci_send_to_monitor+0xe2/0x590 [ 466.310907][ T5615] hci_rx_work+0x3ee/0x1040 [ 466.310931][ T5615] ? process_one_work+0x8b7/0x1710 [ 466.310952][ T5615] process_one_work+0x9a3/0x1710 [ 466.310982][ T5615] ? __pfx_process_one_work+0x10/0x10 [ 466.311004][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.311035][ T5615] worker_thread+0xba8/0x11e0 [ 466.311069][ T5615] kthread+0x388/0x470 [ 466.311096][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 466.311116][ T5615] ? __pfx_kthread+0x10/0x10 [ 466.311140][ T5615] ret_from_fork+0x514/0xb70 [ 466.311162][ T5615] ? __pfx_ret_from_fork+0x10/0x10 [ 466.311185][ T5615] ? __switch_to+0xc79/0x1410 [ 466.311204][ T5615] ? __pfx_kthread+0x10/0x10 [ 466.311232][ T5615] ret_from_fork_asm+0x1a/0x30 [ 466.311264][ T5615] [ 466.336266][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 466.607210][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.607303][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.775772][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 467.188893][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.188926][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.456057][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 467.547369][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.547463][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.866488][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 467.867596][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.867623][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.116772][T13168] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.149918][T13168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.161955][T13168] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.192042][T13168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.206138][T13168] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 468.249409][T13168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.282125][T13168] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 468.309895][T13168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.338659][ T5615] Bluetooth: hci2: command tx timeout [ 468.746726][ T43] bridge_slave_1: left promiscuous mode [ 468.746838][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.826076][ T43] bridge_slave_0: left allmulticast mode [ 468.826093][ T43] bridge_slave_0: left promiscuous mode [ 468.826208][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.596021][ T43] bond0 (unregistering): (slave 30): Releasing backup interface [ 469.676004][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.696906][ T43] bond0 (unregistering): Released all slaves [ 469.807100][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.807262][T13542] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.807417][T13542] bridge_slave_0: entered allmulticast mode [ 469.808650][T13542] bridge_slave_0: entered promiscuous mode [ 469.830446][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.830648][T13542] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.830817][T13542] bridge_slave_1: entered allmulticast mode [ 469.832667][T13542] bridge_slave_1: entered promiscuous mode [ 469.901960][T13542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.909715][T13542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.262642][T13542] team0: Port device team_slave_0 added [ 470.265584][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 470.268967][T13542] team0: Port device team_slave_1 added [ 470.327673][T13542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.327682][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.327696][T13542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.334439][T13542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.334451][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.334472][T13542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.416253][ T5615] Bluetooth: hci2: command tx timeout [ 470.706355][T13542] hsr_slave_0: entered promiscuous mode [ 470.707812][T13542] hsr_slave_1: entered promiscuous mode [ 470.709033][T13542] debugfs: 'hsr0' already exists in 'hsr' [ 470.709050][T13542] Cannot create hsr debugfs directory [ 470.917147][ T43] hsr_slave_0: left promiscuous mode [ 470.955711][ T43] hsr_slave_1: left promiscuous mode [ 470.956211][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.956223][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.045890][ T43] veth1_vlan: left allmulticast mode [ 471.046057][ T43] veth0_macvtap: left promiscuous mode [ 471.046152][ T43] veth1_vlan: left promiscuous mode [ 471.046206][ T43] veth0_vlan: left promiscuous mode [ 471.866066][ T43] team0 (unregistering): Port device team_slave_1 removed [ 471.906120][ T43] team0 (unregistering): Port device team_slave_0 removed [ 472.347385][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 472.434665][T13168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.475574][T13168] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.499484][ T4109] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.499615][ T4109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.506541][ T5615] Bluetooth: hci2: command tx timeout [ 472.541106][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.542916][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.544145][T13542] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 472.609625][T13542] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.616188][T13542] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 472.657918][T13542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.691623][T13542] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 472.728205][T13542] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.757660][T13542] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 472.789508][T13542] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.908185][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 473.065883][T13542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.108444][T13542] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.164353][ T4109] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.164448][ T4109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.192498][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.192581][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.371433][ T43] IPVS: stop unused estimator thread 0... [ 473.546475][T13168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.643211][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12 [ 473.909043][T13168] veth0_vlan: entered promiscuous mode [ 473.923545][T13168] veth1_vlan: entered promiscuous mode [ 473.962034][T13542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.989078][T13168] veth0_macvtap: entered promiscuous mode [ 473.995045][T13168] veth1_macvtap: entered promiscuous mode [ 474.032677][T13168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.050562][T13168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.073977][ T1536] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.074366][ T1536] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.085688][ T1536] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.103875][ T1536] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.241085][T13168] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 474.285255][ T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.285273][ T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.301206][T13168] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 474.342785][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.342802][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.399654][T13542] veth0_vlan: entered promiscuous mode [ 474.411544][T13542] veth1_vlan: entered promiscuous mode [ 474.494961][T13542] veth0_macvtap: entered promiscuous mode [ 474.503378][T13542] veth1_macvtap: entered promiscuous mode [ 474.542004][T13542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.552747][T13542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.564564][ T773] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.565242][ T773] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.565276][ T773] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.565303][ T773] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.586372][ T5615] Bluetooth: hci2: command tx timeout [ 474.701269][T13542] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 474.725287][ T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.725305][ T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.729336][T13542] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 474.769959][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.769977][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50