last executing test programs: 22.759245618s ago: executing program 0 (id=663): socket$inet(0x2, 0x3, 0x8d) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x2) ptrace(0x10, r0) wait4(r0, 0x0, 0x80000000, 0x0) 22.63666491s ago: executing program 0 (id=665): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) unshare(0x22020400) 22.434331917s ago: executing program 0 (id=669): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) 22.25110697s ago: executing program 0 (id=675): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x200000, &(0x7f0000000840)={[{@test_dummy_encryption_v1}, {@init_itable}, {@dioread_lock}]}, 0x3, 0x46a, &(0x7f0000001040)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x4) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 21.868486851s ago: executing program 0 (id=681): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)="2a20000000df", 0x6) 21.655364699s ago: executing program 0 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000240)='driver_override\x00', 0x1, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0xa, 0x17, 0x2, {0x1, '.'}}, 0xa) 6.665654261s ago: executing program 32 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000240)='driver_override\x00', 0x1, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0xa, 0x17, 0x2, {0x1, '.'}}, 0xa) 3.334415461s ago: executing program 2 (id=860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000400)=""/15, 0xf}, {&(0x7f0000000440)=""/180, 0xb4}], 0x3, &(0x7f0000000540)=""/182, 0xb6}, 0xa2) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x1c, 0x3, '\x00'/24}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x108}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00112233445566778899", 0xa, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) 3.252793525s ago: executing program 2 (id=861): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) write(r0, &(0x7f0000000000)="08001800000020a3", 0x8) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x55d, 0x4) recvfrom(r0, 0x0, 0x0, 0x142, 0x0, 0x0) 3.107249672s ago: executing program 2 (id=863): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x12000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x8a, &(0x7f0000000180)=r2, 0x4) 3.018482838s ago: executing program 2 (id=865): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_MCE_KILL(0x23, 0x8, 0x7fffffffeffe) 2.84375847s ago: executing program 2 (id=867): syz_usb_connect(0x3, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff", @ANYRESHEX], 0x0) shmdt(0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) 2.13499628s ago: executing program 1 (id=875): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}}}]}, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) 1.721583466s ago: executing program 3 (id=880): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x20}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8f, 0x214, 0x9, 0x100, 0x140000, 0x1, r2}) 1.662585576s ago: executing program 1 (id=881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 'syzkaller0\x00'}) 1.606934116s ago: executing program 4 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002800)={0xf0, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {0x6}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x81, 0x11, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x28, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xffffffffffffffcf, 0x2, "f3679a46869d2a47dbb903fbd60c550e6deebeee0000448fbc46b5fd"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0xf0}}, 0x40814) 1.287315025s ago: executing program 3 (id=883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1.159463508s ago: executing program 4 (id=884): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x101042, 0x15) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0) sendfile(r0, r0, 0x0, 0x6fecb1) 1.159232608s ago: executing program 3 (id=885): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x80) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) 1.156611429s ago: executing program 1 (id=886): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000440)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x6b) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x6, 0x101, 0x206, 0x3, 0x754d, 0x6, 0x9, 0xf, r2}, 0x20) 1.075899293s ago: executing program 4 (id=887): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$kcm(0x28, 0x1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208000400000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 1.071011144s ago: executing program 2 (id=888): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0x2, 0x1, 0x3, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xd71, 0x0, 0x1, 0x10, 0x4}) 977.482301ms ago: executing program 3 (id=889): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x39) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 891.383867ms ago: executing program 4 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x4002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x7fe81e5246626bb5) lseek(r0, 0x105, 0x1) getdents64(r0, 0xfffffffffffffffe, 0x4a) 710.40874ms ago: executing program 4 (id=891): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000039}) 655.42632ms ago: executing program 3 (id=892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x2, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x8, 0x0, 0x100, 0x9, 0xffffffff, 0x3, 0x0, 0x7fff, 0x8000, 0x3a, 0x7, 0x3, 0x8, 0x1, 0x6, 0x2, 0x5, 0xfffffff9, 0x9, 0x3c96, 0x5, 0x8, 0x404, 0x7fff, 0x3, 0x3, 0x6, 0x1ff, 0x6, 0x0, 0x2, 0x74ba, 0x40, 0x35e, 0x6, 0x8000c, 0x6, 0x6, 0x5, 0x3, 0x20003, 0x0, 0xc66, 0x7fff, 0xc9, 0xb, 0x1, 0x0, 0x80000000, 0x1, 0x4d, 0x29da, 0x2, 0xfc, 0x3, 0x3, 0x800, 0x4, 0x8, 0x2, 0xc, 0x5, 0x400, 0xc, 0x0, 0xfff, 0x1, 0x7, 0x7, 0x2, 0xbce6, 0x1, 0x16fd, 0x9, 0x79, 0xfffff801, 0x6, 0x4, 0x10001, 0x9, 0xffff, 0x94, 0x80, 0xc8, 0x5f72, 0x80000000, 0x5, 0x3, 0x4b1, 0xc, 0x1, 0xeac, 0xf85, 0x373, 0x0, 0x3, 0x7fff, 0x9, 0x5, 0x20009, 0x3, 0x6, 0x1ff, 0x1ff, 0xc, 0x0, 0x8, 0x80000000, 0x6, 0x8, 0x39, 0xa, 0x0, 0x401, 0x14e, 0x9, 0x40, 0x80, 0x3, 0xd4, 0x800, 0x23, 0x6, 0x9, 0x3a9, 0xfc7, 0x8000, 0x0, 0x80000001, 0x9, 0x6, 0x2, 0xffffb6d4, 0x8, 0x100, 0x7, 0x3e0000, 0x0, 0x401, 0x7, 0x100, 0x80000000, 0x4, 0x7, 0x3, 0xcf800, 0x2b9c, 0x21000, 0xfffffff8, 0x3, 0xffffd848, 0x4, 0x10, 0x0, 0x0, 0x4, 0x402, 0xaf1, 0x3, 0x6ea, 0x4004, 0x1, 0xc81, 0x9, 0x7, 0x5653, 0xffffffff, 0x6, 0x5, 0x7, 0x10000, 0x7, 0x95, 0x10001, 0x7, 0x5248, 0x6, 0xe08b, 0x5, 0x7ff, 0xce, 0x5, 0x2, 0x9, 0x1000, 0x4, 0x0, 0x3, 0x4, 0xc, 0x3fed, 0x5, 0x50ce, 0x3, 0x9, 0x6, 0x8, 0x5, 0xfffffff7, 0x2, 0x1ff, 0x200, 0x3, 0x8, 0x10, 0x6, 0xa4, 0x5, 0xffffffff, 0xd65e, 0x7, 0x80, 0x2, 0x200, 0x8, 0xb56, 0x10000005, 0x7, 0xe, 0x800d523, 0x80, 0x1, 0x7, 0x9, 0xfffffff5, 0x0, 0x2, 0x7fff, 0x9a, 0x2, 0x800, 0x0, 0x1, 0x5, 0xfffffffe, 0x5, 0xffffffc0, 0x5ea, 0x800, 0x6d6ae3f8, 0x80000000, 0xc, 0x1, 0x1000, 0x8, 0x3, 0x8020000, 0x5, 0x6, 0xfffffffe, 0x71, 0x8001, 0x0, 0x1, 0xd2f3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 547.58221ms ago: executing program 4 (id=893): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000000c0)={[{@barrier_val={'barrier', 0x3d, 0x9}}, {@orlov}, {@journal_ioprio}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@data_err_ignore}, {@acl}, {@test_dummy_encryption_v1}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./file0\x00') execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 525.451304ms ago: executing program 3 (id=894): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil) setuid(0xee01) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xc1) tkill(r0, 0x12) 217.191211ms ago: executing program 1 (id=895): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}], 0xffffffffffffff03}, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 76.271296ms ago: executing program 1 (id=896): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x20000001) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2400, 0xfffa}, 0x90) 0s ago: executing program 1 (id=897): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff], [0xffffffff, 0xfffffffe, 0xffffffff, 0xa, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffc, 0xb0a0, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x9c, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) kernel console output (not intermixed with test programs): dc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 86.555205][ T4231] usb 4-1: USB disconnect, device number 5 [ 86.577863][ T4231] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 86.591050][ T4198] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 86.603374][ T4231] cyberjack 4-1:1.0: device disconnected [ 86.660277][ T4193] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.830083][ T4198] usb 1-1: Using ep0 maxpacket: 8 [ 86.840196][ T2303] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 86.910216][ T4193] usb 2-1: Using ep0 maxpacket: 16 [ 86.950441][ T4198] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.960938][ T4198] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.971218][ T4198] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.981697][ T4198] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.994809][ T4198] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.004098][ T4198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.040530][ T4193] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.055230][ T4193] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.069713][ T4193] usb 2-1: config 0 interface 0 has no altsetting 0 [ 87.079539][ T4193] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 87.088639][ T4193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.104567][ T4193] usb 2-1: config 0 descriptor?? [ 87.120091][ T2303] usb 3-1: Using ep0 maxpacket: 32 [ 87.198526][ T4721] Illegal XDP return value 5, expect packet loss! [ 87.236350][ T4723] loop4: detected capacity change from 0 to 256 [ 87.253499][ T2303] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 87.281172][ T4198] usb 1-1: GET_CAPABILITIES returned 0 [ 87.286844][ T4198] usbtmc 1-1:16.0: can't read capabilities [ 87.440928][ T2303] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 87.460147][ T2303] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 87.472800][ T2303] usb 3-1: Product: syz [ 87.476984][ T2303] usb 3-1: Manufacturer: syz [ 87.482125][ T2303] usb 3-1: SerialNumber: syz [ 87.496509][ T2303] usb 3-1: config 0 descriptor?? [ 87.510306][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.520823][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.530006][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.539133][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.548282][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.557481][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.566716][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.570973][ T4715] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.583239][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.592496][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.601615][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.610741][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.619853][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.628997][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.638201][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.647487][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.656691][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 87.667725][ T2303] hub 3-1:0.0: bad descriptor, ignoring hub [ 87.683035][ T4193] hid-generic 0003:0B05:18C6.0006: unknown main item tag 0x0 [ 87.690714][ T4193] hid-generic 0003:0B05:18C6.0006: unknown main item tag 0x0 [ 87.690742][ T4193] hid-generic 0003:0B05:18C6.0006: unknown main item tag 0x0 [ 87.690765][ T4193] hid-generic 0003:0B05:18C6.0006: unknown main item tag 0x0 [ 87.690788][ T4193] hid-generic 0003:0B05:18C6.0006: unknown main item tag 0x0 [ 87.716599][ T2303] hub: probe of 3-1:0.0 failed with error -5 [ 87.733895][ T4193] hid-generic 0003:0B05:18C6.0006: hiddev1,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.1-1/input0 [ 87.759847][ T4269] usb 1-1: USB disconnect, device number 7 [ 87.910270][ T2303] usb 2-1: USB disconnect, device number 6 [ 88.220070][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.300445][ T4193] usb 3-1: USB disconnect, device number 5 [ 88.417789][ T4750] syz.0.200 (4750) used greatest stack depth: 20464 bytes left [ 88.540213][ T4231] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 88.620195][ T21] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.628977][ T21] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 88.641037][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.650572][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 88.664380][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 88.790136][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 88.796391][ T21] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.805738][ T21] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.817637][ T21] usb 5-1: Product: syz [ 88.821891][ T21] usb 5-1: Manufacturer: syz [ 88.861879][ T21] cdc_wdm 5-1:1.0: skipping garbage [ 88.867225][ T21] cdc_wdm 5-1:1.0: skipping garbage [ 88.876139][ T21] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 88.882133][ T21] cdc_wdm 5-1:1.0: Unknown control protocol [ 88.910188][ T4231] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.918243][ T4231] usb 4-1: config 0 has no interface number 0 [ 88.951969][ T4231] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.968546][ T4231] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.977809][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.993953][ T4231] usb 4-1: config 0 descriptor?? [ 89.036184][ T4231] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 89.260047][ T4198] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.270008][ C0] net_ratelimit: 65 callbacks suppressed [ 89.469761][ T4768] loop1: detected capacity change from 0 to 4096 [ 89.506801][ T4768] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 89.590163][ T21] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 89.620306][ T4198] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 89.637768][ T4198] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 89.648101][ T4198] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 89.665543][ T4198] usb 3-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 89.674844][ T4198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.710326][ T4758] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 89.723514][ T4758] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 89.884857][ T4773] netlink: 100 bytes leftover after parsing attributes in process `syz.1.210'. [ 89.973458][ T4777] syz.1.212 (4777) used greatest stack depth: 20240 bytes left [ 89.982168][ T21] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 90.003507][ T4198] usb 3-1: USB disconnect, device number 6 [ 90.006226][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.021840][ T4204] Bluetooth: hci5: Failed to get device id (-71) [ 90.028971][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.059716][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 90.110311][ T4779] bond0: (slave bond_slave_0): Releasing backup interface [ 90.190318][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 90.202507][ T21] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 90.210757][ T21] usb 1-1: Manufacturer: syz [ 90.217441][ T21] usb 1-1: config 0 descriptor?? [ 90.702364][ T21] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 90.709973][ T21] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 90.719160][ T21] appleir 0003:05AC:8243.0007: hiddev2,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 90.908113][ T4233] usb 1-1: USB disconnect, device number 8 [ 90.960267][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 90.966022][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 90.972764][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 90.985402][ T21] usb 5-1: USB disconnect, device number 8 [ 91.011576][ T2303] usb 4-1: USB disconnect, device number 6 [ 91.556960][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 91.579792][ T4786] loop2: detected capacity change from 0 to 16 [ 91.618796][ T4786] erofs: (device loop2): mounted with root inode @ nid 36. [ 91.652355][ T4786] erofs: (device loop2): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 91.684000][ T4786] fuse: Bad value for 'fd' [ 91.860038][ T4231] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 92.060981][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 92.116260][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 92.126670][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 92.155104][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 92.192449][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 92.229161][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 92.258279][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 92.269839][ T4231] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 92.295320][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 92.315862][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 92.823062][ T4821] loop0: detected capacity change from 0 to 32768 [ 92.915640][ T4821] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 92.924380][ T4821] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 92.968233][ T4821] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 92.983885][ T4269] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 93.011240][ T4269] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 93.025009][ T4819] loop2: detected capacity change from 0 to 131072 [ 93.179550][ T4269] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 168ms [ 93.190386][ T4231] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 93.199443][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 93.225197][ T4819] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.255418][ T4269] gfs2: fsid=syz:syz.0: jid=0: Done [ 93.276179][ T4231] usb 4-1: Product: syz [ 93.283015][ T4821] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 93.283023][ T4819] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.326944][ T4231] usb 4-1: Manufacturer: syz [ 93.347509][ T4826] loop4: detected capacity change from 0 to 4096 [ 93.349073][ T4231] usb 4-1: SerialNumber: syz [ 93.366796][ T4826] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 93.433847][ T4826] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 93.472157][ T4231] usb 4-1: config 0 descriptor?? [ 93.525276][ T4826] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 93.548027][ T4826] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 93.569605][ T4790] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.606100][ T4821] gfs2: fsid=syz:syz.0: found 1 quota changes [ 93.631832][ T4231] hub 4-1:0.0: bad descriptor, ignoring hub [ 93.642832][ T4826] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 93.692483][ T4231] hub: probe of 4-1:0.0 failed with error -5 [ 93.713087][ T4826] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 93.783611][ T4826] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 93.796869][ T4188] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 93.796869][ T4188] inode = 11 2339 [ 93.796869][ T4188] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 414 [ 93.797992][ T4826] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 93.843235][ T4188] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 93.880149][ T4188] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 93.905799][ T4826] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 93.914876][ T4188] CPU: 0 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 93.922438][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.922480][ T4188] Call Trace: [ 93.922488][ T4188] [ 93.922495][ T4188] dump_stack_lvl+0x188/0x250 [ 93.922529][ T4188] ? show_regs_print_info+0x20/0x20 [ 93.922547][ T4188] ? load_image+0x410/0x410 [ 93.922570][ T4188] ? do_raw_spin_unlock+0x11d/0x230 [ 93.922594][ T4188] gfs2_assert_warn_i+0x187/0x2c0 [ 93.922617][ T4188] gfs2_quota_cleanup+0x48c/0x670 [ 93.922642][ T4188] gfs2_make_fs_ro+0x440/0x620 [ 93.938897][ T4188] ? __might_sleep+0xf0/0xf0 [ 93.953226][ T4188] ? gfs2_dinode_out+0xb00/0xb00 [ 93.973162][ T4188] ? _raw_spin_unlock+0x24/0x40 [ 93.973187][ T4188] ? gfs2_glock_nq+0xcaa/0x1510 [ 93.973219][ T4188] gfs2_withdraw+0x660/0x14e0 [ 93.982694][ T4188] ? gfs2_meta_new+0x160/0x160 [ 93.982713][ T4188] ? gfs2_lm+0x240/0x240 [ 93.982731][ T4188] ? gfs2_freeze_lock+0x52/0xc0 [ 93.982751][ T4188] ? gfs2_consist_inode_i+0xc0/0xe0 [ 93.992420][ T4188] gfs2_inode_refresh+0xb2d/0x11a0 [ 93.992448][ T4188] ? gfs2_inode_metasync+0xf0/0xf0 [ 94.001933][ T4188] inode_go_lock+0x127/0x450 [ 94.001960][ T4188] do_promote+0x75b/0xb20 [ 94.011020][ T4188] finish_xmote+0x4c2/0xaf0 [ 94.011047][ T4188] do_xmote+0x752/0x10a0 [ 94.021306][ T4188] gfs2_glock_nq+0xc6b/0x1510 [ 94.021338][ T4188] do_sync+0x49c/0xba0 [ 94.030995][ T4188] ? slot_put+0x1e0/0x1e0 [ 94.031023][ T4188] ? do_sync+0x494/0xba0 [ 94.039805][ T4188] ? do_raw_spin_unlock+0x11d/0x230 [ 94.048681][ T4188] gfs2_quota_sync+0x355/0x780 [ 94.057045][ T4188] gfs2_sync_fs+0x48/0xb0 [ 94.066441][ T4188] sync_filesystem+0xe6/0x220 [ 94.075499][ T4188] generic_shutdown_super+0x6b/0x300 [ 94.075525][ T4188] kill_block_super+0x7c/0xe0 [ 94.075541][ T4188] deactivate_locked_super+0x93/0xf0 [ 94.085782][ T4188] cleanup_mnt+0x426/0x4d0 [ 94.085810][ T4188] task_work_run+0x125/0x1a0 [ 94.085834][ T4188] exit_to_user_mode_loop+0x10f/0x130 [ 94.110080][ T4188] exit_to_user_mode_prepare+0xee/0x180 [ 94.115662][ T4188] syscall_exit_to_user_mode+0x16/0x40 [ 94.121131][ T4188] do_syscall_64+0x58/0xa0 [ 94.125556][ T4188] ? clear_bhb_loop+0x30/0x80 [ 94.130235][ T4188] ? clear_bhb_loop+0x30/0x80 [ 94.134933][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.134956][ T4188] RIP: 0033:0x7f6800145397 [ 94.134972][ T4188] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 94.134985][ T4188] RSP: 002b:00007fffa0aeea98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 94.165161][ T4188] RAX: 0000000000000000 RBX: 00007f68001da4bb RCX: 00007f6800145397 [ 94.165178][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa0aeeb50 [ 94.165189][ T4188] RBP: 00007fffa0aeeb50 R08: 00007fffa0aefb50 R09: 00000000ffffffff [ 94.165201][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa0aefbe0 [ 94.197504][ T4188] R13: 00007f68001da4bb R14: 0000000000016dc6 R15: 00007fffa0aefc20 [ 94.197536][ T4188] [ 94.231326][ T4826] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 94.234293][ T4188] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 94.269547][ T4188] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 94.278057][ T4188] gfs2: fsid=syz:syz.0: File system withdrawn [ 94.290922][ T4188] CPU: 0 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 94.298494][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.308561][ T4188] Call Trace: [ 94.311850][ T4188] [ 94.314787][ T4188] dump_stack_lvl+0x188/0x250 [ 94.319474][ T4188] ? show_regs_print_info+0x20/0x20 [ 94.324675][ T4188] ? load_image+0x410/0x410 [ 94.329181][ T4188] ? lockref_put_or_lock+0x6e/0xb0 [ 94.334306][ T4188] gfs2_withdraw+0xb9a/0x14e0 [ 94.338991][ T4188] ? gfs2_meta_new+0x160/0x160 [ 94.343763][ T4188] ? gfs2_lm+0x240/0x240 [ 94.348017][ T4188] ? gfs2_consist_inode_i+0xc0/0xe0 [ 94.353225][ T4188] gfs2_inode_refresh+0xb2d/0x11a0 [ 94.358344][ T4188] ? gfs2_inode_metasync+0xf0/0xf0 [ 94.363467][ T4188] inode_go_lock+0x127/0x450 [ 94.368053][ T4188] do_promote+0x75b/0xb20 [ 94.372385][ T4188] finish_xmote+0x4c2/0xaf0 [ 94.376895][ T4188] do_xmote+0x752/0x10a0 [ 94.381157][ T4188] gfs2_glock_nq+0xc6b/0x1510 [ 94.381192][ T4188] do_sync+0x49c/0xba0 [ 94.389929][ T4188] ? slot_put+0x1e0/0x1e0 [ 94.394265][ T4188] ? do_sync+0x494/0xba0 [ 94.398608][ T4188] ? do_raw_spin_unlock+0x11d/0x230 [ 94.403801][ T4188] gfs2_quota_sync+0x355/0x780 [ 94.408571][ T4188] gfs2_sync_fs+0x48/0xb0 [ 94.412903][ T4188] sync_filesystem+0xe6/0x220 [ 94.417582][ T4188] generic_shutdown_super+0x6b/0x300 [ 94.417605][ T4188] kill_block_super+0x7c/0xe0 [ 94.417626][ T4188] deactivate_locked_super+0x93/0xf0 [ 94.417645][ T4188] cleanup_mnt+0x426/0x4d0 [ 94.427869][ T4188] task_work_run+0x125/0x1a0 [ 94.427899][ T4188] exit_to_user_mode_loop+0x10f/0x130 [ 94.427915][ T4188] exit_to_user_mode_prepare+0xee/0x180 [ 94.438052][ T4188] syscall_exit_to_user_mode+0x16/0x40 [ 94.448110][ T4188] do_syscall_64+0x58/0xa0 [ 94.454264][ C1] net_ratelimit: 73 callbacks suppressed [ 94.459086][ T4188] ? clear_bhb_loop+0x30/0x80 [ 94.469236][ T4188] ? clear_bhb_loop+0x30/0x80 [ 94.478576][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.484593][ T4188] RIP: 0033:0x7f6800145397 [ 94.489192][ T4188] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 94.508832][ T4188] RSP: 002b:00007fffa0aeea98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 94.508863][ T4188] RAX: 0000000000000000 RBX: 00007f68001da4bb RCX: 00007f6800145397 [ 94.508875][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa0aeeb50 [ 94.508885][ T4188] RBP: 00007fffa0aeeb50 R08: 00007fffa0aefb50 R09: 00000000ffffffff [ 94.508898][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa0aefbe0 [ 94.508908][ T4188] R13: 00007f68001da4bb R14: 0000000000016dc6 R15: 00007fffa0aefc20 [ 94.525712][ T4188] [ 94.580276][ T4826] ntfs: volume version 3.1. [ 94.592706][ T2303] usb 4-1: USB disconnect, device number 7 [ 94.737885][ T4838] netlink: 'syz.2.232': attribute type 11 has an invalid length. [ 95.116393][ T4857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.245'. [ 95.204970][ T4861] loop2: detected capacity change from 0 to 512 [ 95.372307][ T4868] loop4: detected capacity change from 0 to 128 [ 95.720651][ T4878] input: syz1 as /devices/virtual/input/input8 [ 95.991108][ T4888] loop3: detected capacity change from 0 to 256 [ 96.000044][ T4338] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.086677][ T4888] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 96.240157][ T4338] usb 5-1: Using ep0 maxpacket: 16 [ 96.411265][ T4338] usb 5-1: unable to get BOS descriptor or descriptor too short [ 96.490412][ T4881] loop2: detected capacity change from 0 to 32768 [ 96.500355][ T4338] usb 5-1: config 9 has an invalid interface number: 57 but max is 0 [ 96.520462][ T4338] usb 5-1: config 9 has no interface number 0 [ 96.528523][ T4338] usb 5-1: config 9 interface 57 has no altsetting 0 [ 96.592815][ T4881] XFS (loop2): Mounting V5 Filesystem [ 96.697795][ T4881] XFS (loop2): Ending clean mount [ 96.710263][ T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 96.763428][ T4191] XFS (loop2): Unmounting Filesystem [ 96.800781][ T4338] usb 5-1: string descriptor 0 read error: -22 [ 96.807080][ T4338] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 96.822482][ T4338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.830726][ T4269] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 97.100419][ T4269] usb 2-1: Using ep0 maxpacket: 8 [ 97.120948][ T21] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.129650][ T21] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 97.170193][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.179465][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 97.209985][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 97.223647][ T4926] loop0: detected capacity change from 0 to 4096 [ 97.248216][ T4926] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.263629][ T4926] EXT4-fs (loop0): shut down requested (2) [ 97.276142][ T4928] loop2: detected capacity change from 0 to 2048 [ 97.354736][ T4928] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 97.365822][ T21] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.375655][ T21] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.387579][ T21] usb 4-1: Product: syz [ 97.410080][ T21] usb 4-1: Manufacturer: syz [ 97.430374][ T4269] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 97.439582][ T4269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.452815][ T4269] usb 2-1: Product: syz [ 97.457010][ T4269] usb 2-1: Manufacturer: syz [ 97.464266][ T4269] usb 2-1: SerialNumber: syz [ 97.496980][ T4269] usb 2-1: config 0 descriptor?? [ 97.503375][ T21] cdc_wdm 4-1:1.0: skipping garbage [ 97.508593][ T21] cdc_wdm 4-1:1.0: skipping garbage [ 97.522841][ T4933] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.542339][ T21] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 97.548280][ T21] cdc_wdm 4-1:1.0: Unknown control protocol [ 97.566066][ T4935] loop0: detected capacity change from 0 to 512 [ 97.575132][ T4269] gspca_main: se401-2.14.0 probing 047d:5003 [ 97.627927][ T4935] EXT4-fs (loop0): Ignoring removed nobh option [ 97.641832][ T4935] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.661620][ T4935] EXT4-fs (loop0): 1 truncate cleaned up [ 97.668184][ T4935] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 97.980334][ T4338] video4linux radio48: keene_cmd_set failed (-71) [ 97.987369][ T4338] radio-keene 5-1:9.57: V4L2 device registered as radio48 [ 98.031182][ T4338] usb 5-1: USB disconnect, device number 9 [ 98.035934][ T4269] gspca_se401: ExtraFeatures: 46 [ 98.045338][ T4269] gspca_se401: Too many frame sizes [ 98.239805][ T1107] usb 2-1: USB disconnect, device number 7 [ 98.420055][ T4269] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 98.440045][ T4231] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 98.522817][ T1107] usb 4-1: USB disconnect, device number 8 [ 98.700294][ T4269] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 98.793967][ T4269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.803179][ T4231] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.803409][ T4269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.825267][ T4269] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.837898][ T4231] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.853815][ T4231] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.860560][ T4231] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 98.869685][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.889890][ T4231] usb 1-1: config 0 descriptor?? [ 98.920495][ T4269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.929848][ T4269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.941270][ T4269] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.051127][ T4269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.072098][ T4269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.084263][ T4269] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.180347][ T4269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.193071][ T4269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.205068][ T4269] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.213476][ T4977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.292'. [ 99.300180][ T4269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.314759][ T4269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.327591][ T4981] loop3: detected capacity change from 0 to 64 [ 99.359506][ T4269] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.461203][ T4983] loop4: detected capacity change from 0 to 512 [ 99.480172][ T4269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.502097][ T4269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.516751][ T4269] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.570898][ T4983] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.296: invalid indirect mapped block 256 (level 0) [ 99.587615][ T4983] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.296: attempt to clear invalid blocks 1024 len 1 [ 99.618860][ T4269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.628168][ T4269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.639245][ T4269] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.649630][ T4983] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 99.680568][ T4983] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.296: invalid indirect mapped block 1819239214 (level 0) [ 99.696579][ T4983] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.296: invalid indirect mapped block 33554432 (level 2) [ 99.726592][ T4983] EXT4-fs (loop4): 1 truncate cleaned up [ 99.736162][ T4269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.747319][ T4983] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000e,commit=0x0000000000000005,nodelalloc,block_validity,block_validity,nodiscard,,errors=continue. Quota mode: none. [ 99.767626][ C1] net_ratelimit: 54 callbacks suppressed [ 99.768471][ T4269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.785929][ T4269] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.818071][ T4231] sony 0003:054C:09CC.0008: Retrying DualShock 4 get calibration report (0x02) request [ 99.866308][ T4988] xt_CT: No such helper "netbios-ns" [ 99.951110][ T4269] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 99.966968][ T4269] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 100.008756][ T4269] usb 3-1: Product: syz [ 100.013667][ T4269] usb 3-1: Manufacturer: syz [ 100.022296][ T4269] usb 3-1: SerialNumber: syz [ 100.035786][ T4231] sony 0003:054C:09CC.0008: Failed to get calibration data from Dualshock 4 [ 100.045264][ T4269] usb 3-1: config 0 descriptor?? [ 100.079538][ T4231] sony 0003:054C:09CC.0008: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 100.095451][ T4269] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 100.102449][ T4231] sony 0003:054C:09CC.0008: failed to claim input [ 100.136867][ T5004] loop3: detected capacity change from 0 to 64 [ 100.167053][ T4231] usb 1-1: USB disconnect, device number 9 [ 100.178998][ T5002] loop4: detected capacity change from 0 to 4096 [ 100.242177][ T5002] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 100.289477][ T5008] fido_id[5008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 100.341478][ T4269] usb 3-1: USB disconnect, device number 7 [ 100.364085][ T4269] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 100.436706][ T5011] loop1: detected capacity change from 0 to 512 [ 100.750947][ T5024] loop4: detected capacity change from 0 to 2048 [ 100.802894][ T5024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.910055][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 101.103065][ T5042] loop2: detected capacity change from 0 to 512 [ 101.146788][ T5042] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.319: iget: bad i_size value: 38620345925642 [ 101.165200][ T5042] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.319: couldn't read orphan inode 15 (err -117) [ 101.177503][ T5042] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.180194][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 101.200106][ T1107] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 101.249745][ T5045] EXT4-fs (loop2): shut down requested (1) [ 101.350468][ T21] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 101.360137][ T21] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.380165][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.399725][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.409876][ T21] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.445195][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 101.540635][ T21] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.550537][ T21] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 101.559243][ T21] usb 2-1: Product: syz [ 101.570957][ T1107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.740737][ T2303] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 101.750269][ T1107] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 101.760550][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.768577][ T1107] usb 5-1: Product: syz [ 101.780807][ T1107] usb 5-1: Manufacturer: syz [ 101.785785][ T1107] usb 5-1: SerialNumber: syz [ 101.808746][ T5063] XFS (loop3): Mounting V5 Filesystem [ 101.840268][ T21] usb 2-1: usb_control_msg returned -32 [ 101.845865][ T21] usbtmc 2-1:16.0: can't read capabilities [ 101.888799][ T1107] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 101.900776][ T5063] XFS (loop3): Ending clean mount [ 101.950156][ T5063] XFS (loop3): User initiated shutdown received. [ 101.965295][ T5063] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 101.979188][ T5063] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 101.999796][ T4192] XFS (loop3): Unmounting Filesystem [ 102.150203][ T2303] usb 3-1: config index 0 descriptor too short (expected 50, got 32) [ 102.174906][ T2303] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.192243][ T2303] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 102.207223][ T2303] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.305653][ T5081] set_capacity_and_notify: 1 callbacks suppressed [ 102.305659][ T5081] loop3: detected capacity change from 0 to 512 [ 102.376497][ T5081] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,init_itable=0x00000000000000ff,grpid,,errors=continue. Quota mode: writeback. [ 102.393048][ T5081] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.425152][ T2303] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 102.442032][ T4338] usb 2-1: USB disconnect, device number 8 [ 102.446556][ T2303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.511349][ T2303] usb 3-1: Product: syz [ 102.515521][ T2303] usb 3-1: Manufacturer: syz [ 102.534565][ T2303] usb 3-1: SerialNumber: syz [ 102.600240][ T5053] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 102.614906][ T2303] usb_debug 3-1:1.0: debug converter detected [ 102.626950][ T2303] usb 3-1: debug converter now attached to ttyUSB0 [ 102.651589][ T1107] gspca_mr97310a: reg write [21] error -71 [ 102.657504][ T1107] mr97310a: probe of 5-1:1.0 failed with error -71 [ 102.707855][ T1107] usb 5-1: USB disconnect, device number 10 [ 102.860139][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 102.873819][ T2303] usb 3-1: USB disconnect, device number 8 [ 102.887509][ T2303] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 102.903699][ T2303] usb_debug 3-1:1.0: device disconnected [ 102.971113][ T5098] netlink: 104 bytes leftover after parsing attributes in process `syz.1.336'. [ 102.997809][ T5100] loop1: detected capacity change from 0 to 64 [ 103.007069][ T4231] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 103.030249][ T4198] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 103.290464][ T4231] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 103.379171][ T5106] loop1: detected capacity change from 0 to 32768 [ 103.386351][ T4231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.400422][ T4198] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 103.426473][ T4231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.439619][ T5106] [ 103.439619][ T5106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.439619][ T5106] [ 103.456909][ T4198] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 103.475133][ T4231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.483962][ T4198] usb 1-1: config 1 interface 0 has no altsetting 0 [ 103.490966][ T1107] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 103.513989][ T5106] ERROR: (device loop1): dbReAlloc: the block is outside the filesystem [ 103.513989][ T5106] [ 103.562688][ T5106] ERROR: (device loop1): remounting filesystem as read-only [ 103.570267][ T4231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.580456][ T5106] jfs_create: dtInsert returned -EIO [ 103.585995][ T4231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.588652][ T5106] ERROR: (device loop1): jfs_create: [ 103.588652][ T5106] [ 103.605553][ T4231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.650652][ T4198] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 103.660150][ T4198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.672086][ T4198] usb 1-1: Product: syz [ 103.676970][ T4198] usb 1-1: Manufacturer: syz [ 103.682609][ T4198] usb 1-1: SerialNumber: syz [ 103.700541][ T4231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.710196][ T4231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.710386][ T5096] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.721423][ T4231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.740268][ T5096] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.810535][ T4231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.820853][ T4231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.833004][ T5116] loop1: detected capacity change from 0 to 16 [ 103.845525][ T4231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.847263][ T5116] erofs: (device loop1): mounted with root inode @ nid 36. [ 103.860731][ T1107] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 103.885629][ T1107] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 103.895903][ T1107] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 103.908333][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.980385][ T4231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.007465][ T4231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.038359][ T4231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.126928][ T5133] loop1: detected capacity change from 0 to 512 [ 104.133786][ T4231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.143000][ T4231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.154198][ T4231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.179715][ T5133] EXT4-fs (loop1): Ignoring removed oldalloc option [ 104.187747][ T5133] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.208777][ T5133] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 104.240631][ T4231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.254490][ T4231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.281555][ T4231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.329913][ T5136] loop1: detected capacity change from 0 to 128 [ 104.357391][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 104.357404][ T26] audit: type=1800 audit(1790756911.748:6): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.353" name="file1" dev="loop1" ino=1048598 res=0 errno=0 [ 104.358565][ T5136] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 104.387003][ T5136] FAT-fs (loop1): Filesystem has been set read-only [ 104.401153][ T4231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.410092][ T4231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.421006][ T4231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.585119][ T4231] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 104.594453][ T4231] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 104.618193][ T4231] usb 4-1: Product: syz [ 104.629174][ T4231] usb 4-1: Manufacturer: syz [ 104.634050][ T4231] usb 4-1: SerialNumber: syz [ 104.659011][ T4231] usb 4-1: config 0 descriptor?? [ 104.715330][ T4231] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 104.735724][ T5157] device-mapper: table: 248:0: multipath: invalid initial priority group number [ 104.755617][ T5157] device-mapper: ioctl: error adding target to table [ 104.861207][ T4198] (unnamed net_device) (uninitialized): Assigned a random MAC address: c2:ed:6c:4a:92:86 [ 104.900684][ T4198] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 104.925485][ T4198] usb 1-1: USB disconnect, device number 10 [ 104.960083][ T4338] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 104.971192][ T5166] block nbd1: shutting down sockets [ 105.004774][ T4231] usb 4-1: USB disconnect, device number 9 [ 105.010983][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 105.028676][ T5094] yurex 4-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 105.059340][ T4231] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 105.089418][ T1107] pegasus: probe of 5-1:1.0 failed with error -71 [ 105.119995][ C1] net_ratelimit: 65 callbacks suppressed [ 105.133158][ T1107] usb 5-1: USB disconnect, device number 11 [ 105.340603][ T4338] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 105.357801][ T4338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.515887][ T5194] loop0: detected capacity change from 0 to 512 [ 105.629016][ T5194] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 105.669629][ T5194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 105.695227][ T5194] System zones: 1-12 [ 105.701909][ T5194] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.724939][ T5194] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.368: invalid indirect mapped block 12 (level 1) [ 105.779396][ T5208] loop3: detected capacity change from 0 to 128 [ 105.783050][ T5194] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.368: invalid indirect mapped block 2 (level 2) [ 105.839250][ T5194] EXT4-fs (loop0): 1 truncate cleaned up [ 105.879188][ T5208] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 105.903688][ T5194] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback. [ 105.978066][ T5217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 105.987270][ T5217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 106.090079][ C0] usb 3-1: NFC: Received an invalid frame [ 106.099068][ T4338] usb 3-1: NFC: Unable to get FW version [ 106.116082][ T4338] pn533_usb: probe of 3-1:1.0 failed with error -5 [ 106.255545][ T5229] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.277417][ T1107] usb 3-1: USB disconnect, device number 9 [ 106.416426][ T5240] netlink: 'syz.3.384': attribute type 4 has an invalid length. [ 106.438539][ T5242] "syz.4.386" (5242) uses obsolete ecb(arc4) skcipher [ 106.442895][ T5240] netlink: 203252 bytes leftover after parsing attributes in process `syz.3.384'. [ 106.528247][ T5249] loop4: detected capacity change from 0 to 128 [ 106.538778][ T5248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.387'. [ 106.613718][ T5249] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 106.630537][ T5249] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.945509][ T5274] loop2: detected capacity change from 0 to 2048 [ 106.958999][ T5277] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 107.013605][ T5274] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 107.039273][ T5274] UDF-fs: unknown compression code (0) [ 107.193850][ T5284] EXT4-fs (loop4): Ignoring removed oldalloc option [ 107.211325][ T5284] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 107.252046][ T5282] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000ffc,abort,,errors=continue. Quota mode: none. [ 107.284917][ T5284] EXT4-fs (loop4): 1 truncate cleaned up [ 107.345643][ T5284] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,abort,data_err=ignore,acl,oldalloc,errors=remount-ro,. Quota mode: none. [ 107.878565][ T5290] set_capacity_and_notify: 2 callbacks suppressed [ 107.878576][ T5290] loop2: detected capacity change from 0 to 32768 [ 108.071260][ T4269] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 108.308472][ T5303] loop1: detected capacity change from 0 to 32768 [ 108.364044][ T5303] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.413 (5303) [ 108.500290][ T4269] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 108.506364][ T5303] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 108.527487][ T4269] usb 1-1: config 0 has no interface number 0 [ 108.547049][ T4269] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 108.559471][ T5303] BTRFS info (device loop1): force clearing of disk cache [ 108.579650][ T5303] BTRFS info (device loop1): use zlib compression, level 3 [ 108.600445][ T4269] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 108.602200][ T5303] BTRFS info (device loop1): enabling ssd optimizations [ 108.655105][ T5303] BTRFS info (device loop1): using spread ssd allocation scheme [ 108.656214][ T4269] usb 1-1: config 0 interface 255 has no altsetting 0 [ 108.682619][ T5315] loop3: detected capacity change from 0 to 32768 [ 108.693909][ T5303] BTRFS info (device loop1): using free space tree [ 108.702261][ T4269] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 108.732731][ T5303] BTRFS info (device loop1): has skinny extents [ 108.738317][ T5315] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.418 (5315) [ 108.783292][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.818663][ T4269] usb 1-1: config 0 descriptor?? [ 108.838519][ T5315] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 108.849259][ T5315] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 108.859750][ T5315] BTRFS info (device loop3): use zstd compression, level 3 [ 108.868607][ T4269] cp210x 1-1:0.255: cp210x converter detected [ 108.880147][ T5315] BTRFS info (device loop3): using free space tree [ 108.886689][ T5315] BTRFS info (device loop3): has skinny extents [ 108.972812][ T5355] loop2: detected capacity change from 0 to 128 [ 109.002975][ T5303] BTRFS info (device loop1): clearing free space tree [ 109.011500][ T5303] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 109.023457][ T5303] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 109.058989][ T5355] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 109.065197][ T5303] BTRFS info (device loop1): creating free space tree [ 109.077584][ T5303] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 109.087625][ T5303] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 109.105749][ T5303] BTRFS info (device loop1): checking UUID tree [ 109.125683][ T2303] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 109.142284][ T5355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.178449][ T5315] BTRFS info (device loop3): enabling ssd optimizations [ 109.216541][ T26] audit: type=1800 audit(1790756916.608:7): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.418" name="file0" dev="loop3" ino=258 res=0 errno=0 [ 109.240113][ T5315] fs-verity: sha256 using implementation "sha256-avx2" [ 109.287068][ T5315] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 109.310163][ T4269] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 109.381797][ T4269] usb 1-1: cp210x converter now attached to ttyUSB0 [ 109.410755][ T2303] usb 5-1: Using ep0 maxpacket: 8 [ 109.431357][ T4269] usb 1-1: USB disconnect, device number 11 [ 109.448182][ T4582] udevd[4582]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 109.481601][ T4269] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.495586][ T4582] udevd[4582]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 109.517717][ T4269] cp210x 1-1:0.255: device disconnected [ 109.562898][ T2303] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.575999][ T2303] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.588886][ T2303] usb 5-1: config 0 interface 0 has no altsetting 0 [ 109.588959][ T2303] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 109.588995][ T2303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.623525][ T2303] usb 5-1: config 0 descriptor?? [ 109.680144][ T4338] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 110.043042][ T4338] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.063838][ T4338] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 110.079906][ T4338] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 110.094715][ T4338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.112473][ T2303] apple 0003:05AC:0244.0009: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 110.127667][ T2303] apple 0003:05AC:0244.0009: No inputs registered, leaving [ 110.146662][ T2303] apple 0003:05AC:0244.0009: hidraw0: USB HID v0.00 Device [HID 05ac:0244] on usb-dummy_hcd.4-1/input0 [ 110.150014][ C0] net_ratelimit: 67 callbacks suppressed [ 110.257254][ T4338] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 110.296452][ T5376] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 110.337806][ T2303] usb 5-1: USB disconnect, device number 12 [ 110.429890][ T5424] netlink: 'syz.3.428': attribute type 1 has an invalid length. [ 110.451815][ T5424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.428'. [ 110.547403][ T5436] loop3: detected capacity change from 0 to 512 [ 110.634614][ T5436] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.656962][ T5436] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.668704][ T5376] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 110.681662][ T5376] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 110.691529][ T5376] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 110.701345][ T5376] usb 1-1: config 1 interface 0 has no altsetting 0 [ 110.708030][ T5376] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 110.717434][ T5376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.735021][ T5436] Quota error (device loop3): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 110.747560][ T5436] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 110.761415][ T5376] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 110.770869][ T5436] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.431: Failed to acquire dquot type 0 [ 110.783045][ T5450] loop1: detected capacity change from 0 to 2048 [ 110.855027][ T5450] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.993499][ T5376] scsi host1: usb-storage 1-1:1.0 [ 111.185334][ T5376] usb 1-1: USB disconnect, device number 12 [ 111.310422][ T2303] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 111.673999][ T5482] loop1: detected capacity change from 0 to 32768 [ 111.721274][ T2303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.738255][ T2303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.760726][ T2303] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 111.770533][ T2303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.782936][ T2303] usb 5-1: config 0 descriptor?? [ 111.829857][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 111.850137][ T5489] netlink: 'syz.0.448': attribute type 20 has an invalid length. [ 111.858049][ T5489] netlink: 'syz.0.448': attribute type 21 has an invalid length. [ 112.273109][ T1107] usb 3-1: USB disconnect, device number 10 [ 112.285908][ T1107] idmouse 3-1:1.0: disconnected [ 112.300060][ T5376] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 112.317881][ T2303] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 112.328726][ T2303] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 112.477605][ T5502] loop3: detected capacity change from 0 to 4096 [ 112.520509][ T2303] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 112.540072][ T5376] usb 1-1: Using ep0 maxpacket: 16 [ 112.568026][ T5502] ntfs: volume version 3.1. [ 112.660274][ T5376] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 112.686468][ T5376] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.700084][ T5376] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 112.709149][ T5376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.736560][ T5504] FAULT_INJECTION: forcing a failure. [ 112.736560][ T5504] name failslab, interval 1, probability 0, space 0, times 0 [ 112.757110][ T5376] usb 1-1: config 0 descriptor?? [ 112.769488][ T5504] CPU: 0 PID: 5504 Comm: syz.1.455 Not tainted syzkaller #0 [ 112.776836][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 112.786899][ T5504] Call Trace: [ 112.786910][ T5504] [ 112.786918][ T5504] dump_stack_lvl+0x188/0x250 [ 112.786944][ T5504] ? show_regs_print_info+0x20/0x20 [ 112.786961][ T5504] ? load_image+0x410/0x410 [ 112.786980][ T5504] ? __lock_acquire+0x7b50/0x7b50 [ 112.797895][ T5504] should_fail+0x383/0x4b0 [ 112.807586][ T5504] should_failslab+0x5/0x20 [ 112.817014][ T5504] slab_pre_alloc_hook+0x51/0xc0 [ 112.826427][ T5504] ? __alloc_file+0x25/0x240 [ 112.831014][ T5504] kmem_cache_alloc+0x3d/0x280 [ 112.831036][ T5504] __alloc_file+0x25/0x240 [ 112.831056][ T5504] alloc_empty_file+0x90/0x180 [ 112.840217][ T5504] alloc_file+0x5c/0x510 [ 112.840235][ T5504] ? do_raw_spin_unlock+0x11d/0x230 [ 112.849224][ T5504] alloc_file_pseudo+0x180/0x200 [ 112.859342][ T5504] ? alloc_empty_file_noaccount+0x80/0x80 [ 112.865247][ T5504] ? _raw_spin_unlock+0x24/0x40 [ 112.870131][ T5504] __anon_inode_getfd+0x26b/0x3d0 [ 112.870166][ T5504] ? anon_inode_getfd+0x40/0x40 [ 112.870191][ T5504] __se_sys_fsopen+0x294/0x320 [ 112.870212][ T5504] do_syscall_64+0x4c/0xa0 [ 112.870228][ T5504] ? clear_bhb_loop+0x30/0x80 [ 112.880527][ T5504] ? clear_bhb_loop+0x30/0x80 [ 112.880556][ T5504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.889739][ T5504] RIP: 0033:0x7f1a4a2eb159 [ 112.889761][ T5504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.889776][ T5504] RSP: 002b:00007f1a48543028 EFLAGS: 00000246 [ 112.899085][ T5504] ORIG_RAX: 00000000000001ae [ 112.899095][ T5504] RAX: ffffffffffffffda RBX: 00007f1a4a572fa0 RCX: 00007f1a4a2eb159 [ 112.899109][ T5504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 112.899119][ T5504] RBP: 00007f1a4a38206b R08: 0000000000000000 R09: 0000000000000000 [ 112.899128][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.909855][ T5504] R13: 00007f1a4a573038 R14: 00007f1a4a572fa0 R15: 00007ffe1174b5c8 [ 112.909885][ T5504] [ 112.990990][ T2303] cp2112 0003:10C4:EA90.000A: error setting SMBus config [ 113.014315][ T2303] cp2112: probe of 0003:10C4:EA90.000A failed with error -71 [ 113.051333][ T2303] usb 5-1: USB disconnect, device number 13 [ 113.178756][ T5510] fido_id[5510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 113.224489][ T5517] loop3: detected capacity change from 0 to 4096 [ 113.380157][ T5375] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 113.392832][ T5523] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 113.441882][ T5376] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 113.448962][ T5376] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 113.448988][ T5376] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 113.464203][ T5523] CIFS: Attempting to mount \\127.0.0.1\test [ 113.486066][ T5376] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 113.519538][ T5376] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 113.537554][ T5376] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 113.559461][ T5376] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 113.580089][ T5376] cypress 0003:04B4:DE61.000B: item fetching failed at offset 26/33 [ 113.603494][ T5376] cypress 0003:04B4:DE61.000B: parse failed [ 113.609474][ T5376] cypress: probe of 0003:04B4:DE61.000B failed with error -22 [ 113.645724][ T5376] usb 1-1: USB disconnect, device number 13 [ 113.790283][ T5375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.805819][ T5525] loop3: detected capacity change from 0 to 40427 [ 113.807141][ T5375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.823130][ T5375] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.852083][ T5525] F2FS-fs (loop3): invalid crc value [ 113.860128][ T5525] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.869743][ T5375] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.892245][ T2303] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 113.903748][ T5375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.925731][ T5375] usb 3-1: config 0 descriptor?? [ 113.930079][ T5525] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.969263][ T5531] attempt to access beyond end of device [ 113.969263][ T5531] loop3: rw=2049, want=45104, limit=40427 [ 114.175255][ T2303] usb 5-1: Using ep0 maxpacket: 16 [ 114.188204][ T5536] loop3: detected capacity change from 0 to 256 [ 114.231773][ T5523] CIFS: VFS: cifs_mount failed w/return code = -112 [ 114.313473][ T2303] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.345097][ T2303] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.372583][ T2303] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.403650][ T2303] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 114.419546][ T5375] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 114.442555][ T5375] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 114.458329][ T2303] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.486227][ T2303] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 114.518902][ T2303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.535605][ T2303] usb 5-1: config 0 descriptor?? [ 114.649752][ T5376] usb 3-1: USB disconnect, device number 11 [ 114.876794][ T1504] tipc: Subscription rejected, illegal request [ 115.056454][ T2303] logitech-djreceiver 0003:046D:C53A.000D: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 115.140551][ T1107] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 115.262657][ T5376] usb 5-1: USB disconnect, device number 14 [ 115.510002][ C0] net_ratelimit: 60 callbacks suppressed [ 115.516107][ T1107] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 115.524351][ T1107] usb 2-1: config 0 has no interface number 0 [ 115.543869][ T1107] usb 2-1: config 0 interface 41 has no altsetting 0 [ 115.555816][ T5605] loop2: detected capacity change from 0 to 1024 [ 115.645774][ T5608] loop3: detected capacity change from 0 to 1024 [ 115.666655][ T5605] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 115.686406][ T5605] EXT4-fs (loop2): inline encryption not supported [ 115.694065][ T5605] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 115.703265][ T5605] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.720434][ T1107] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 115.733627][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.742200][ T1107] usb 2-1: Product: syz [ 115.747053][ T1107] usb 2-1: Manufacturer: syz [ 115.753607][ T5605] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,min_batch_time=0x0000000000000009,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 115.782192][ T5608] hfsplus: failed to load catalog file [ 115.789005][ T5605] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.799615][ T1107] usb 2-1: SerialNumber: syz [ 115.806360][ T1107] usb 2-1: config 0 descriptor?? [ 115.856987][ T5605] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.495: Freeing blocks not in datazone - block = 0, count = 16 [ 115.870860][ T5614] loop4: detected capacity change from 0 to 2048 [ 115.941357][ T5614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.954195][ T5605] EXT4-fs (loop2): Remounting filesystem read-only [ 116.190548][ T5622] FAULT_INJECTION: forcing a failure. [ 116.190548][ T5622] name failslab, interval 1, probability 0, space 0, times 0 [ 116.214494][ T5622] CPU: 0 PID: 5622 Comm: syz.4.500 Not tainted syzkaller #0 [ 116.221817][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.231889][ T5622] Call Trace: [ 116.235181][ T5622] [ 116.238120][ T5622] dump_stack_lvl+0x188/0x250 [ 116.242817][ T5622] ? show_regs_print_info+0x20/0x20 [ 116.248037][ T5622] ? load_image+0x410/0x410 [ 116.252557][ T5622] ? __might_sleep+0xf0/0xf0 [ 116.257164][ T5622] ? __lock_acquire+0x7b50/0x7b50 [ 116.262203][ T5622] should_fail+0x383/0x4b0 [ 116.266634][ T5622] should_failslab+0x5/0x20 [ 116.271158][ T5622] slab_pre_alloc_hook+0x51/0xc0 [ 116.276110][ T5622] __kmalloc_node+0x6d/0x3a0 [ 116.280703][ T5622] ? get_callchain_buffers+0x15f/0x360 [ 116.286193][ T5622] get_callchain_buffers+0x15f/0x360 [ 116.286223][ T5622] stack_map_alloc+0x384/0x550 [ 116.296249][ T5622] map_create+0x481/0x2330 [ 116.300665][ T5622] ? bpf_lsm_bpf+0x5/0x10 [ 116.300690][ T5622] __sys_bpf+0x30a/0x6f0 [ 116.309231][ T5622] ? bpf_link_show_fdinfo+0x380/0x380 [ 116.314614][ T5622] __x64_sys_bpf+0x78/0x90 [ 116.314633][ T5622] do_syscall_64+0x4c/0xa0 [ 116.314652][ T5622] ? clear_bhb_loop+0x30/0x80 [ 116.323431][ T5622] ? clear_bhb_loop+0x30/0x80 [ 116.323454][ T5622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.332760][ T5622] RIP: 0033:0x7fe961c92159 [ 116.332781][ T5622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.343043][ T5622] RSP: 002b:00007fe95feea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.343064][ T5622] RAX: ffffffffffffffda RBX: 00007fe961f19fa0 RCX: 00007fe961c92159 [ 116.379010][ T5622] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 116.387957][ T5622] RBP: 00007fe961d2906b R08: 0000000000000000 R09: 0000000000000000 [ 116.398632][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.406628][ T5622] R13: 00007fe961f1a038 R14: 00007fe961f19fa0 R15: 00007ffff2fe5a38 [ 116.414649][ T5622] [ 116.597786][ T5629] loop0: detected capacity change from 0 to 8192 [ 116.656079][ T5629] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 116.690406][ T5629] REISERFS (device loop0): using ordered data mode [ 116.711833][ T5629] reiserfs: using flush barriers [ 116.738954][ T5629] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.775309][ T5629] REISERFS (device loop0): checking transaction log (loop0) [ 116.860082][ T2303] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 116.934993][ T5629] REISERFS (device loop0): Using rupasov hash to sort names [ 116.954046][ T5629] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 116.990819][ T26] audit: type=1800 audit(1790756924.388:8): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.504" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 116.991797][ T5629] REISERFS warning (device loop0): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=8192, len=2 - odd [ 117.055242][ T1107] CoreChips: probe of 2-1:0.41 failed with error -71 [ 117.079581][ T1107] usb 2-1: USB disconnect, device number 9 [ 117.155092][ T2303] usb 4-1: Using ep0 maxpacket: 16 [ 117.173651][ T5640] loop2: detected capacity change from 0 to 1024 [ 117.250256][ T5640] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 117.301286][ T2303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 117.344118][ T5645] binder: 5643:5645 ioctl c018620c 200000000080 returned -1 [ 117.525647][ T2303] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 117.546449][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.565905][ T2303] usb 4-1: Product: syz [ 117.573865][ T2303] usb 4-1: Manufacturer: syz [ 117.616313][ T2303] usb 4-1: SerialNumber: syz [ 117.636295][ T2303] usb 4-1: config 0 descriptor?? [ 117.670139][ T5655] device-mapper: ioctl: only supply one of name or uuid, cmd(4) [ 117.717530][ T2303] hub 4-1:0.0: bad descriptor, ignoring hub [ 117.726999][ T2303] hub: probe of 4-1:0.0 failed with error -5 [ 117.817034][ T5665] loop2: detected capacity change from 0 to 512 [ 117.866559][ T5665] FAT-fs (loop2): bogus number of FAT sectors [ 117.893750][ T5665] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 117.969853][ T5665] FAT-fs (loop2): Can't find a valid FAT filesystem [ 118.037013][ T5676] process 'syz.0.524' launched './file0' with NULL argv: empty string added [ 118.084517][ T2303] usb 4-1: USB disconnect, device number 10 [ 118.190880][ T5681] mmap: syz.1.525 (5681) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 118.310859][ T5683] device team_slave_0 entered promiscuous mode [ 118.317555][ T5683] device team_slave_1 entered promiscuous mode [ 118.333029][ T5683] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 118.453586][ T5687] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 118.465258][ T5692] loop2: detected capacity change from 0 to 1024 [ 118.499119][ T5687] Zero length message leads to an empty skb [ 118.527505][ T5669] loop4: detected capacity change from 0 to 32768 [ 118.587552][ T5669] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 118.753601][ T5669] syz.4.521 (5669) used greatest stack depth: 18208 bytes left [ 118.805006][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 119.006320][ T5710] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 119.040535][ T1107] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 119.107758][ T5714] loop2: detected capacity change from 0 to 4096 [ 119.130279][ T5716] loop4: detected capacity change from 0 to 1024 [ 119.184156][ T5716] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 119.203827][ T5716] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 119.232150][ T5716] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 119.239854][ T5716] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.254412][ T5720] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.299689][ T5716] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 119.410618][ T1107] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.452479][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.475887][ T1107] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.528534][ T1107] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.579890][ T1107] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 119.594401][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.678375][ T5733] loop2: detected capacity change from 0 to 4096 [ 119.748192][ T5735] loop4: detected capacity change from 0 to 256 [ 119.758631][ T5736] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.858923][ T5735] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.894334][ T5740] NILFS (loop2): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 119.923535][ T5376] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 119.928229][ T26] audit: type=1800 audit(1790756927.318:9): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.546" name="file1" dev="loop4" ino=1048603 res=0 errno=0 [ 119.973478][ T5740] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 120.015402][ T26] audit: type=1800 audit(1790756927.358:10): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.546" name="file1" dev="loop4" ino=1048603 res=0 errno=0 [ 120.047195][ T5740] Remounting filesystem read-only [ 120.073243][ T5744] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 120.075431][ T5740] NILFS (loop2): error -5 preparing GC: cannot mark copying blocks dirty [ 120.119522][ T5746] loop3: detected capacity change from 0 to 1024 [ 120.120176][ T5744] FAT-fs (loop4): Filesystem has been set read-only [ 120.171099][ T5376] usb 2-1: Using ep0 maxpacket: 32 [ 120.172788][ T5744] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 120.186518][ T4191] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 120.229265][ T5746] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.320310][ T5376] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 120.331562][ T5376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.341732][ T5376] usb 2-1: config 0 descriptor?? [ 120.474947][ T5752] loop4: detected capacity change from 0 to 4096 [ 120.493094][ T5752] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 120.517978][ T5752] ntfs3: loop4: ino=0, Correct links count -> 1. [ 120.544764][ T5752] ntfs3: loop4: MFT: r=0, expect seq=1 instead of 0! [ 120.557200][ T5752] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 120.570318][ T1107] gud 1-1:1.0: Failed to get connectors (error=-5) [ 120.577498][ T5752] ntfs3: loop4: Failed to load $MFT. [ 120.578256][ T1107] gud: probe of 1-1:1.0 failed with error -5 [ 120.600787][ T5376] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 120.625752][ T5376] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.636002][ C0] net_ratelimit: 64 callbacks suppressed [ 120.672567][ T5376] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 120.679910][ T5376] usb 2-1: media controller created [ 120.759477][ T5376] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.776929][ T5375] usb 1-1: USB disconnect, device number 14 [ 120.890382][ T5376] az6027: usb out operation failed. (-71) [ 120.920182][ T5376] az6027: usb out operation failed. (-71) [ 120.928146][ T5376] stb0899_attach: Driver disabled by Kconfig [ 120.946371][ T5376] az6027: no front-end attached [ 120.946371][ T5376] [ 120.980174][ T5376] az6027: usb out operation failed. (-71) [ 120.988107][ T5376] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 121.015112][ T5376] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 121.048473][ T5376] dvb-usb: schedule remote query interval to 400 msecs. [ 121.068963][ T5376] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 121.106367][ T5376] usb 2-1: USB disconnect, device number 10 [ 121.266241][ T5376] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 121.417971][ T5769] loop3: detected capacity change from 0 to 1024 [ 121.458769][ T5759] loop4: detected capacity change from 0 to 32768 [ 121.552080][ T5777] FAULT_INJECTION: forcing a failure. [ 121.552080][ T5777] name failslab, interval 1, probability 0, space 0, times 0 [ 121.590837][ T5777] CPU: 1 PID: 5777 Comm: syz.1.563 Not tainted syzkaller #0 [ 121.598177][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.608379][ T5777] Call Trace: [ 121.611663][ T5777] [ 121.614591][ T5777] dump_stack_lvl+0x188/0x250 [ 121.619284][ T5777] ? show_regs_print_info+0x20/0x20 [ 121.624481][ T5777] ? load_image+0x410/0x410 [ 121.628994][ T5777] ? __lock_acquire+0x7b50/0x7b50 [ 121.634034][ T5777] should_fail+0x383/0x4b0 [ 121.638461][ T5777] should_failslab+0x5/0x20 [ 121.642964][ T5777] slab_pre_alloc_hook+0x51/0xc0 [ 121.647917][ T5777] ? __se_sys_mount+0x9b/0x3d0 [ 121.652698][ T5777] __kmalloc_track_caller+0x69/0x330 [ 121.657984][ T5777] ? __se_sys_mount+0x9b/0x3d0 [ 121.662751][ T5777] ? strnlen_user+0x19b/0x250 [ 121.667444][ T5777] strndup_user+0x71/0x150 [ 121.671870][ T5777] __se_sys_mount+0x9b/0x3d0 [ 121.676463][ T5777] ? __x64_sys_mount+0xc0/0xc0 [ 121.681221][ T5777] ? lockdep_hardirqs_on+0x94/0x140 [ 121.686534][ T5777] ? __x64_sys_mount+0x1c/0xc0 [ 121.691308][ T5777] do_syscall_64+0x4c/0xa0 [ 121.695780][ T5777] ? clear_bhb_loop+0x30/0x80 [ 121.700448][ T5777] ? clear_bhb_loop+0x30/0x80 [ 121.705118][ T5777] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.711022][ T5777] RIP: 0033:0x7f1a4a2eb159 [ 121.715482][ T5777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.735347][ T5777] RSP: 002b:00007f1a48543028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.743766][ T5777] RAX: ffffffffffffffda RBX: 00007f1a4a572fa0 RCX: 00007f1a4a2eb159 [ 121.751738][ T5777] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.759798][ T5777] RBP: 00007f1a4a38206b R08: 0000000000000000 R09: 0000000000000000 [ 121.767767][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.775743][ T5777] R13: 00007f1a4a573038 R14: 00007f1a4a572fa0 R15: 00007ffe1174b5c8 [ 121.783811][ T5777] [ 121.786914][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.800030][ T1107] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 121.958154][ T1504] hfsplus: found bad thread record in catalog [ 122.010992][ T5779] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 122.052205][ T5779] FAT-fs (loop1): Filesystem has been set read-only [ 122.058928][ T5779] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 122.070062][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 122.350840][ T1107] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 122.367310][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.396053][ T1107] usb 1-1: Product: syz [ 122.405335][ T1107] usb 1-1: Manufacturer: syz [ 122.423448][ T1107] usb 1-1: SerialNumber: syz [ 122.460880][ T1107] usb 1-1: config 0 descriptor?? [ 122.512999][ T1107] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 122.622377][ T5814] EXT4-fs (loop2): orphan cleanup on readonly fs [ 122.675352][ T26] audit: type=1800 audit(1790756930.068:11): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.583" name="c_volume_present" dev="configfs" ino=37553 res=0 errno=0 [ 122.733261][ T5814] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 122.786600][ T5823] device syzkaller1 entered promiscuous mode [ 122.807176][ T5814] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 122.833532][ T5814] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.580: Failed to acquire dquot type 0 [ 122.855595][ T5814] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 122.865477][ T5814] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 122.875904][ T5814] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.580: Failed to acquire dquot type 0 [ 122.907100][ T5814] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.580: bg 0: block 64: padding at end of block bitmap is not set [ 122.970023][ T5814] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 122.992725][ T5814] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 123.013978][ T5814] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 123.040837][ T5814] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.580: Failed to acquire dquot type 0 [ 123.080290][ T5814] EXT4-fs (loop2): 1 orphan inode deleted [ 123.095044][ T5814] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue. Quota mode: writeback. [ 123.417136][ T5864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.603'. [ 123.590227][ T1107] gspca_ov534_9: reg_w failed -71 [ 123.645793][ T2303] kernel write not supported for file bpf-prog (pid: 2303 comm: kworker/1:3) [ 123.953236][ T5893] set_capacity_and_notify: 4 callbacks suppressed [ 123.953242][ T5893] loop4: detected capacity change from 0 to 4096 [ 123.980272][ T1107] gspca_ov534_9: Unknown sensor 0000 [ 123.980323][ T1107] ov534_9: probe of 1-1:0.0 failed with error -22 [ 124.039140][ T1107] usb 1-1: USB disconnect, device number 15 [ 124.056305][ T5898] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.538052][ T5924] loop0: detected capacity change from 0 to 2048 [ 124.627800][ T5924] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 124.750038][ T5409] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 124.827177][ T5939] loop1: detected capacity change from 0 to 256 [ 124.862597][ T5902] loop4: detected capacity change from 0 to 32768 [ 124.887952][ T26] audit: type=1800 audit(1790756932.278:12): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.620" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 124.959635][ T5902] read_mapping_page failed! [ 124.979050][ T5943] loop0: detected capacity change from 0 to 256 [ 124.987440][ T5902] ERROR: (device loop4): txCommit: [ 124.987440][ T5902] [ 125.048043][ T5943] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.071340][ T5943] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 125.129122][ T5943] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xda9016d0, utbl_chksum : 0xe619d30d) [ 125.172950][ T5945] loop2: detected capacity change from 0 to 4096 [ 125.193893][ T5409] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.220727][ T5409] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.233597][ T5945] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 125.250082][ T5945] NILFS (loop2): mounting unchecked fs [ 125.270693][ T5945] NILFS (loop2): recovery required for readonly filesystem [ 125.299250][ T5945] NILFS (loop2): write access will be enabled during recovery [ 125.344159][ T4582] udevd[4582]: incorrect nilfs2 checksum on /dev/loop2 [ 125.360305][ T5409] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.382751][ T5409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.392201][ T5945] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 125.400333][ T5409] usb 4-1: SerialNumber: syz [ 125.431196][ T5949] netlink: 260 bytes leftover after parsing attributes in process `syz.0.641'. [ 125.456036][ T5945] NILFS (loop2): couldn't remount because the filesystem is in an incomplete recovery state [ 125.488890][ T4582] udevd[4582]: incorrect nilfs2 checksum on /dev/loop2 [ 125.610678][ T5957] loop4: detected capacity change from 0 to 256 [ 125.665902][ T5957] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 125.697289][ T5409] usb 4-1: 0:2 : does not exist [ 125.750432][ T5409] usb 4-1: USB disconnect, device number 11 [ 125.768318][ T5947] loop1: detected capacity change from 0 to 32768 [ 125.804809][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.910413][ C0] net_ratelimit: 64 callbacks suppressed [ 125.970631][ T5376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.999447][ T5947] XFS (loop1): Mounting V5 Filesystem [ 126.080832][ T5409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.100584][ T5947] XFS (loop1): Ending clean mount [ 126.117898][ T5947] XFS (loop1): Quotacheck needed: Please wait. [ 126.165082][ T5947] XFS (loop1): Quotacheck: Done. [ 126.239846][ T4185] XFS (loop1): Unmounting Filesystem [ 126.735890][ T6006] loop2: detected capacity change from 0 to 256 [ 126.887687][ T6012] loop3: detected capacity change from 0 to 1024 [ 127.187472][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 127.291085][ T6036] EXT4-fs (loop0): Test dummy encryption mode enabled [ 127.298037][ T6036] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.328886][ T6036] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.675: bad orphan inode 131083 [ 127.357569][ T6036] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,init_itable,dioread_lock,,errors=continue. Quota mode: none. [ 127.531880][ T5409] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 127.560546][ T6036] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 127.755726][ T6060] exfat: Deprecated parameter 'utf8' [ 127.779108][ T6060] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 127.791310][ T5376] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 127.987021][ T5409] usb 5-1: unable to get BOS descriptor or descriptor too short [ 128.030101][ T5376] usb 3-1: Using ep0 maxpacket: 16 [ 128.055197][ T5409] usb 5-1: not running at top speed; connect to a high speed hub [ 128.150456][ T5376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.161441][ T5409] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.170293][ T5376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.199962][ T5409] usb 5-1: config 1 interface 0 has no altsetting 0 [ 128.217053][ T5376] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.241232][ T5376] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.260691][ T5376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.288225][ T5376] usb 3-1: config 0 descriptor?? [ 128.390447][ T2303] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 128.403635][ T5409] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 128.413980][ T5409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.422272][ T5409] usb 5-1: Product: syz [ 128.426618][ T5409] usb 5-1: Manufacturer: syz [ 128.436386][ T5409] usb 5-1: SerialNumber: syz [ 128.763838][ T6082] Trying to free block not in datazone [ 128.782658][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 128.785464][ T2303] usb 4-1: not running at top speed; connect to a high speed hub [ 128.795625][ T6082] attempt to access beyond end of device [ 128.795625][ T6082] loop1: rw=0, want=1026, limit=64 [ 128.820854][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 128.828113][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 128.840466][ T5409] appletouch 5-1:1.0: Failed to read mode from device. [ 128.846887][ T6082] Buffer I/O error on dev loop1, logical block 512, async page read [ 128.856544][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 128.863835][ T5409] appletouch: probe of 5-1:1.0 failed with error -5 [ 128.876798][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 128.885017][ T6082] attempt to access beyond end of device [ 128.885017][ T6082] loop1: rw=0, want=113154, limit=64 [ 128.896836][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 128.904799][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 128.909136][ T2303] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.913346][ T6082] Buffer I/O error on dev loop1, logical block 56576, async page read [ 128.935893][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 128.943548][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 128.963011][ T6083] attempt to access beyond end of device [ 128.963011][ T6083] loop1: rw=0, want=1026, limit=64 [ 128.973795][ T5409] usb 5-1: USB disconnect, device number 15 [ 128.979223][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 129.005731][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 129.013734][ T6083] Buffer I/O error on dev loop1, logical block 512, async page read [ 129.030525][ T6083] attempt to access beyond end of device [ 129.030525][ T6083] loop1: rw=0, want=113154, limit=64 [ 129.033027][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 129.060707][ T6083] Buffer I/O error on dev loop1, logical block 56576, async page read [ 129.064542][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 129.077684][ T6084] attempt to access beyond end of device [ 129.077684][ T6084] loop1: rw=0, want=1026, limit=64 [ 129.094677][ T2303] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 129.095803][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 129.119471][ T2303] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 129.128171][ T2303] usb 4-1: Product: syz [ 129.128221][ T5376] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 129.132546][ T2303] usb 4-1: Manufacturer: syz [ 129.149556][ T6084] Buffer I/O error on dev loop1, logical block 512, async page read [ 129.158329][ T5376] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000E/input/input13 [ 129.175687][ T6084] attempt to access beyond end of device [ 129.175687][ T6084] loop1: rw=0, want=113154, limit=64 [ 129.214145][ T6084] Buffer I/O error on dev loop1, logical block 56576, async page read [ 129.234195][ T5376] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 129.252997][ T2303] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 129.265650][ T2303] usb 4-1: No streaming interface found for terminal 2. [ 129.323433][ T5376] usb 3-1: USB disconnect, device number 12 [ 129.439196][ T6085] fido_id[6085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 129.476060][ T5408] usb 4-1: USB disconnect, device number 12 [ 129.552996][ T6092] set_capacity_and_notify: 5 callbacks suppressed [ 129.553007][ T6092] loop1: detected capacity change from 0 to 128 [ 129.597508][ T6092] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 129.634691][ T6092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.037374][ T6110] block nbd1: shutting down sockets [ 130.139496][ T6112] loop4: detected capacity change from 0 to 512 [ 130.144755][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.704'. [ 130.205833][ T6112] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 130.306731][ T6123] FAULT_INJECTION: forcing a failure. [ 130.306731][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 130.333964][ T6123] CPU: 1 PID: 6123 Comm: syz.2.707 Not tainted syzkaller #0 [ 130.338159][ T6119] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 130.341288][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.341306][ T6123] Call Trace: [ 130.341313][ T6123] [ 130.341320][ T6123] dump_stack_lvl+0x188/0x250 [ 130.341345][ T6123] ? show_regs_print_info+0x20/0x20 [ 130.341363][ T6123] ? load_image+0x410/0x410 [ 130.341382][ T6123] ? __might_sleep+0xf0/0xf0 [ 130.341401][ T6123] ? __lock_acquire+0x7b50/0x7b50 [ 130.341430][ T6123] should_fail+0x383/0x4b0 [ 130.341454][ T6123] should_failslab+0x5/0x20 [ 130.341470][ T6123] slab_pre_alloc_hook+0x51/0xc0 [ 130.341489][ T6123] kmem_cache_alloc_node+0x47/0x2c0 [ 130.341503][ T6123] ? alloc_vmap_area+0x668/0x1b30 [ 130.341524][ T6123] alloc_vmap_area+0x668/0x1b30 [ 130.368976][ T6123] ? vm_map_ram+0xba0/0xba0 [ 130.387166][ T6123] __get_vm_area_node+0x14f/0x2d0 [ 130.410584][ T6123] __vmalloc_node_range+0xef/0x8b0 [ 130.425607][ T6123] ? htab_map_alloc+0xbf3/0x1670 [ 130.435129][ T6123] ? trace_kmalloc_node+0x1f/0xa0 [ 130.445142][ T6123] ? __kmalloc_node+0x261/0x3a0 [ 130.454984][ T6123] bpf_map_area_alloc+0xd4/0xe0 [ 130.459844][ T6123] ? htab_map_alloc+0xbf3/0x1670 [ 130.464795][ T6123] htab_map_alloc+0xbf3/0x1670 [ 130.469590][ T6123] map_create+0x481/0x2330 [ 130.474027][ T6123] ? bpf_lsm_bpf+0x5/0x10 [ 130.478379][ T6123] __sys_bpf+0x30a/0x6f0 [ 130.482650][ T6123] ? bpf_link_show_fdinfo+0x380/0x380 [ 130.488142][ T6123] __x64_sys_bpf+0x78/0x90 [ 130.492582][ T6123] do_syscall_64+0x4c/0xa0 [ 130.497020][ T6123] ? clear_bhb_loop+0x30/0x80 [ 130.501713][ T6123] ? clear_bhb_loop+0x30/0x80 [ 130.506415][ T6123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.512331][ T6123] RIP: 0033:0x7fb821803159 [ 130.516768][ T6123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.536394][ T6123] RSP: 002b:00007fb81fa5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.544828][ T6123] RAX: ffffffffffffffda RBX: 00007fb821a8afa0 RCX: 00007fb821803159 [ 130.552857][ T6123] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0100000000000000 [ 130.560846][ T6123] RBP: 00007fb82189a06b R08: 0000000000000000 R09: 0000000000000000 [ 130.568831][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.576902][ T6123] R13: 00007fb821a8b038 R14: 00007fb821a8afa0 R15: 00007ffeb00b25d8 [ 130.584906][ T6123] [ 130.803230][ T6135] cramfs: checking physical address 0x0000000147d8f000 for linear cramfs image [ 130.831058][ T6135] cramfs: wrong magic [ 130.849332][ T6135] cramfs: wrong magic [ 130.856850][ T6138] loop1: detected capacity change from 0 to 256 [ 131.030903][ T6148] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 131.030903][ T6148] The task syz.3.716 (6148) triggered the difference, watch for misbehavior. [ 131.096033][ T6147] loop1: detected capacity change from 0 to 2048 [ 131.203419][ T6149] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.349974][ C0] net_ratelimit: 62 callbacks suppressed [ 131.520764][ T6133] loop2: detected capacity change from 0 to 32768 [ 131.536411][ T6145] loop4: detected capacity change from 0 to 32768 [ 131.635546][ T6145] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 131.652670][ T6145] JBD2: Ignoring recovery information on journal [ 131.680712][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.748295][ T6145] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 131.790987][ T6154] loop2: detected capacity change from 0 to 64 [ 131.882856][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 131.898722][ T26] audit: type=1800 audit(1790756939.288:13): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.720" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 132.012111][ T6159] netlink: 'syz.3.723': attribute type 29 has an invalid length. [ 132.068669][ T6159] netlink: 'syz.3.723': attribute type 29 has an invalid length. [ 132.125144][ T6163] netlink: 'syz.3.723': attribute type 29 has an invalid length. [ 132.192241][ T6164] netlink: 'syz.3.723': attribute type 29 has an invalid length. [ 132.320391][ T6169] netlink: 'syz.3.723': attribute type 29 has an invalid length. [ 132.444968][ T6151] loop1: detected capacity change from 0 to 32768 [ 132.518698][ T26] audit: type=1800 audit(1790756939.908:14): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.719" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 132.690183][ T6180] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.792425][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.798734][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.151467][ T6195] loop3: detected capacity change from 0 to 128 [ 133.204740][ T6195] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 133.308664][ T6195] FAT-fs (loop3): error, corrupted directory (invalid i_start) [ 133.323184][ T6195] FAT-fs (loop3): Filesystem has been set read-only [ 133.374939][ T4192] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 133.727822][ T6187] loop4: detected capacity change from 0 to 32768 [ 133.739245][ T6211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.743'. [ 133.787928][ T6187] XFS (loop4): Mounting V5 Filesystem [ 133.818332][ T6187] XFS (loop4): Ending clean mount [ 133.820112][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.944386][ T4189] XFS (loop4): Unmounting Filesystem [ 134.020875][ T6221] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.069589][ T6221] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.114513][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 134.237050][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.266153][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.297190][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.316240][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.330296][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.339353][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.630311][ T7] usb 4-1: GET_CAPABILITIES returned 0 [ 134.635835][ T7] usbtmc 4-1:16.0: can't read capabilities [ 134.850054][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.859268][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.868959][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.878164][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.887386][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.896623][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.905862][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.915092][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.924351][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.933593][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.942840][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.942968][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.961681][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.970851][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.980074][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.989305][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.998641][ T6228] set_capacity_and_notify: 1 callbacks suppressed [ 134.998652][ T6228] loop1: detected capacity change from 0 to 32768 [ 135.015972][ T4231] usb 4-1: USB disconnect, device number 13 [ 135.179856][ T6228] JBD2: Ignoring recovery information on journal [ 135.228336][ T6228] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 135.289582][ T6228] JBD2: bad block at offset 32 [ 135.416666][ T6228] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 135.595894][ T6228] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 135.641878][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 135.663082][ T6228] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 135.673626][ T6246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.753'. [ 135.691974][ T6228] OCFS2: File system is now read-only. [ 135.700736][ T6228] (syz.1.747,6228,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 135.729228][ T6228] (syz.1.747,6228,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 135.756408][ T6228] (syz.1.747,6228,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 135.775570][ T6246] device geneve2 entered promiscuous mode [ 135.790287][ T2303] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 135.793835][ T6228] (syz.1.747,6228,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 135.820461][ T6228] (syz.1.747,6228,0):ocfs2_write_cluster:1156 ERROR: status = -30 [ 135.838584][ T6228] (syz.1.747,6228,0):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 135.871551][ T6228] (syz.1.747,6228,0):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 135.897471][ T6228] (syz.1.747,6228,0):ocfs2_write_begin:1910 ERROR: status = -30 [ 136.038239][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 136.220836][ T2303] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.251400][ T2303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 136.280234][ T2303] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.324994][ T6254] loop2: detected capacity change from 0 to 8192 [ 136.409623][ T6267] loop3: detected capacity change from 0 to 64 [ 136.418008][ T6254] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 136.500571][ T2303] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 136.509987][ T2303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.514185][ T6254] REISERFS (device loop2): using ordered data mode [ 136.517986][ T2303] usb 5-1: Product: syz [ 136.525097][ T6254] reiserfs: using flush barriers [ 136.546632][ T6254] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.581928][ T2303] usb 5-1: Manufacturer: syz [ 136.586572][ T2303] usb 5-1: SerialNumber: syz [ 136.621811][ T2303] usb 5-1: config 0 descriptor?? [ 136.638011][ T6254] REISERFS (device loop2): checking transaction log (loop2) [ 136.640403][ C0] net_ratelimit: 67 callbacks suppressed [ 136.682784][ T6254] REISERFS (device loop2): Using rupasov hash to sort names [ 136.724414][ T6273] loop1: detected capacity change from 0 to 128 [ 136.730916][ T6254] REISERFS (device loop2): using 3.5.x disk format [ 136.737638][ T6254] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 136.815108][ T6254] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 136.889175][ T5408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.898880][ T6254] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 136.985672][ T6254] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 137.742660][ T5408] usb 5-1: USB disconnect, device number 16 [ 138.005840][ T6276] loop3: detected capacity change from 0 to 40427 [ 138.036369][ T6276] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 138.049974][ T6276] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 138.060849][ T6276] F2FS-fs (loop3): invalid crc value [ 138.104444][ T6276] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 138.190057][ T2303] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.371779][ T6276] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 138.384330][ T6276] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.405611][ T26] audit: type=1800 audit(1790756945.798:15): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.767" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 138.520270][ T5408] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 138.575624][ T2303] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.587121][ T2303] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.633408][ T4192] attempt to access beyond end of device [ 138.633408][ T4192] loop3: rw=2049, want=45104, limit=40427 [ 138.659105][ T6315] loop2: detected capacity change from 0 to 136 [ 138.690218][ T2303] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.707704][ T2303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.727016][ T2303] usb 2-1: SerialNumber: syz [ 138.810372][ T5408] usb 5-1: Using ep0 maxpacket: 16 [ 138.945123][ T5408] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.963737][ T5408] usb 5-1: config 0 has no interface number 0 [ 138.969898][ T5408] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.984011][ T5408] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.027401][ T2303] usb 2-1: 0:2 : does not exist [ 139.041300][ T5408] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.080370][ T2303] usb 2-1: USB disconnect, device number 11 [ 139.100593][ T5408] usb 5-1: config 0 interface 1 has no altsetting 0 [ 139.121493][ T5408] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 139.161122][ T5408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.199614][ T5408] usb 5-1: config 0 descriptor?? [ 139.222957][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 139.310445][ T5408] usbhid 5-1:0.1: fixing wrong optional hid class descriptors count [ 139.386545][ T4582] udevd[4582]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.427003][ T6318] team0: Port device team_slave_0 removed [ 139.734316][ T5408] elan 0003:04F3:074D.000F: failed to start in urb: -90 [ 139.881029][ T6336] loop3: detected capacity change from 0 to 256 [ 139.943141][ T6336] exfat: Deprecated parameter 'utf8' [ 139.990396][ T6336] exfat: Deprecated parameter 'namecase' [ 139.996134][ T6336] exfat: Deprecated parameter 'namecase' [ 140.084607][ T6336] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 140.150284][ T6343] IPVS: Scheduler module ip_vs_sip not found [ 140.388268][ T6354] input: syz1 as /devices/virtual/input/input15 [ 140.400009][ T5408] elan 0003:04F3:074D.000F: Set report error for parm 7: -71 [ 140.433293][ T5408] elan 0003:04F3:074D.000F: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.4-1/input1 [ 140.455828][ T5408] elan 0003:04F3:074D.000F: Input device is not registered [ 140.506567][ T5408] elan: probe of 0003:04F3:074D.000F failed with error -119 [ 140.560398][ T5408] usb 5-1: USB disconnect, device number 17 [ 140.608072][ T6360] loop1: detected capacity change from 0 to 1024 [ 140.767856][ T6361] fido_id[6361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 140.973120][ T6371] loop4: detected capacity change from 0 to 256 [ 141.624098][ T6387] device syzkaller1 entered promiscuous mode [ 141.651045][ T6391] comedi comedi1: Minor 47 could not be opened [ 141.670002][ C1] net_ratelimit: 72 callbacks suppressed [ 141.745986][ T6396] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 142.082740][ T6417] netlink: 656 bytes leftover after parsing attributes in process `syz.2.822'. [ 142.140192][ T6419] loop4: detected capacity change from 0 to 256 [ 142.319954][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.430745][ T6427] loop2: detected capacity change from 0 to 128 [ 142.483176][ T6427] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.544949][ T6427] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.676950][ T6429] loop1: detected capacity change from 0 to 8192 [ 142.772207][ T6429] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 142.844190][ T6429] REISERFS (device loop1): using ordered data mode [ 142.850864][ T6429] reiserfs: using flush barriers [ 142.864282][ T6429] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 142.880712][ T6429] REISERFS (device loop1): checking transaction log (loop1) [ 142.910057][ T6429] REISERFS (device loop1): Using r5 hash to sort names [ 142.930781][ T6429] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 142.960356][ T6429] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 143.028332][ T6429] capability: warning: `syz.1.828' uses 32-bit capabilities (legacy support in use) [ 143.081261][ T6441] loop2: detected capacity change from 0 to 256 [ 143.157779][ T6441] exfat: Deprecated parameter 'namecase' [ 143.186322][ T6441] exfat: Bad value for 'dmask' [ 143.343893][ T6445] FAULT_INJECTION: forcing a failure. [ 143.343893][ T6445] name failslab, interval 1, probability 0, space 0, times 0 [ 143.360355][ T6445] CPU: 1 PID: 6445 Comm: syz.3.837 Not tainted syzkaller #0 [ 143.367671][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.377737][ T6445] Call Trace: [ 143.381023][ T6445] [ 143.383958][ T6445] dump_stack_lvl+0x188/0x250 [ 143.388650][ T6445] ? show_regs_print_info+0x20/0x20 [ 143.393859][ T6445] ? load_image+0x410/0x410 [ 143.398376][ T6445] ? __might_sleep+0xf0/0xf0 [ 143.402981][ T6445] ? __lock_acquire+0x7b50/0x7b50 [ 143.408023][ T6445] should_fail+0x383/0x4b0 [ 143.412452][ T6445] should_failslab+0x5/0x20 [ 143.416965][ T6445] slab_pre_alloc_hook+0x51/0xc0 [ 143.421911][ T6445] ? prepare_creds+0x3c/0x610 [ 143.426592][ T6445] kmem_cache_alloc+0x3d/0x280 [ 143.431352][ T6445] prepare_creds+0x3c/0x610 [ 143.431378][ T6445] __sys_setfsgid+0xc9/0x370 [ 143.431397][ T6445] ? lockdep_hardirqs_on+0x94/0x140 [ 143.431418][ T6445] do_syscall_64+0x4c/0xa0 [ 143.431434][ T6445] ? clear_bhb_loop+0x30/0x80 [ 143.431454][ T6445] ? clear_bhb_loop+0x30/0x80 [ 143.431473][ T6445] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.431491][ T6445] RIP: 0033:0x7ff0dea59159 [ 143.431509][ T6445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.431525][ T6445] RSP: 002b:00007ff0dccb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 143.431546][ T6445] RAX: ffffffffffffffda RBX: 00007ff0dece0fa0 RCX: 00007ff0dea59159 [ 143.431559][ T6445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 143.431571][ T6445] RBP: 00007ff0deaf006b R08: 0000000000000000 R09: 0000000000000000 [ 143.431590][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.431598][ T6445] R13: 00007ff0dece1038 R14: 00007ff0dece0fa0 R15: 00007ffccdd18498 [ 143.441408][ T6445] [ 143.575712][ T6431] loop4: detected capacity change from 0 to 32768 [ 143.735657][ T6431] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 143.822271][ T6431] JBD2: Ignoring recovery information on journal [ 143.943663][ T6431] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 144.130185][ T6465] netlink: 104 bytes leftover after parsing attributes in process `syz.2.843'. [ 144.294344][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 144.385408][ T6467] loop2: detected capacity change from 0 to 2048 [ 144.458104][ T6467] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 144.508615][ T6467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.751688][ T4255] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.824991][ T6471] loop3: detected capacity change from 0 to 512 [ 144.855165][ T6473] loop1: detected capacity change from 0 to 512 [ 144.941191][ T4255] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.018872][ T4255] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.033087][ T6473] EXT4-fs (loop1): 1 truncate cleaned up [ 145.055410][ T6473] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: none. [ 145.074754][ T26] audit: type=1800 audit(1790756952.468:16): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.847" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 145.233406][ T6471] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 145.247729][ T6471] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.294070][ T4255] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.436219][ T6471] overlayfs: conflicting lowerdir path [ 145.785284][ T5376] Bluetooth: hci1: command 0x0409 tx timeout [ 145.831656][ T6507] loop4: detected capacity change from 0 to 8 [ 145.864185][ T6448] chnl_net:caif_netlink_parms(): no params data found [ 145.872722][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 145.883398][ T4204] CPU: 0 PID: 4204 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 145.891144][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.901230][ T4204] Workqueue: hci2 hci_rx_work [ 145.905929][ T4204] Call Trace: [ 145.909221][ T4204] [ 145.912224][ T4204] dump_stack_lvl+0x188/0x250 [ 145.916924][ T4204] ? show_regs_print_info+0x20/0x20 [ 145.922138][ T4204] ? load_image+0x410/0x410 [ 145.926690][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 145.931855][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 145.936574][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 145.941878][ T4204] kobject_add_internal+0x5ba/0xcd0 [ 145.947116][ T4204] kobject_add+0x160/0x230 [ 145.951732][ T4204] ? kobject_init+0x1c0/0x1c0 [ 145.956452][ T4204] ? __raw_spin_lock_init+0x41/0x100 [ 145.961746][ T4204] ? klist_children_get+0x50/0x50 [ 145.966783][ T4204] ? get_device_parent+0x121/0x3e0 [ 145.971909][ T4204] device_add+0x470/0x1050 [ 145.976423][ T4204] ? device_initialize+0x2a5/0x4d0 [ 145.981542][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 145.987035][ T4204] le_conn_complete_evt+0xc55/0x14d0 [ 145.992342][ T4204] ? cs_le_create_conn+0x5e0/0x5e0 [ 145.997456][ T4204] hci_le_meta_evt+0x285/0x3ca0 [ 146.002306][ T4204] ? hci_event_packet+0x363/0x1310 [ 146.007411][ T4204] ? __lock_acquire+0x7b50/0x7b50 [ 146.012428][ T4204] ? _printk+0xda/0x130 [ 146.016658][ T4204] ? hci_remote_host_features_evt+0x240/0x240 [ 146.022717][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 146.028338][ T4204] ? mark_lock+0x94/0x320 [ 146.032654][ T4204] ? mutex_unlock+0x10/0x10 [ 146.037147][ T4204] ? __dynamic_pr_debug+0x196/0x240 [ 146.042338][ T4204] ? __rwlock_init+0x140/0x140 [ 146.047108][ T4204] hci_event_packet+0xe0b/0x1310 [ 146.052038][ T4204] ? _raw_spin_unlock+0x40/0x40 [ 146.056874][ T4204] ? rcu_lock_release+0x20/0x20 [ 146.061716][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 146.066994][ T4204] hci_rx_work+0x255/0xa10 [ 146.071410][ T4204] process_one_work+0x867/0xff0 [ 146.076263][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 146.081881][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 146.087155][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 146.092181][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 146.097727][ T4204] ? wq_worker_running+0x97/0x170 [ 146.102746][ T4204] worker_thread+0xad7/0x12a0 [ 146.107422][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 146.113334][ T4204] kthread+0x42e/0x520 [ 146.117432][ T4204] ? rcu_lock_release+0x20/0x20 [ 146.122371][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 146.126969][ T4204] ret_from_fork+0x1f/0x30 [ 146.131402][ T4204] [ 146.136803][ T4204] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 146.150276][ T4204] Bluetooth: hci2: failed to register connection device [ 146.586007][ T6526] loop4: detected capacity change from 0 to 512 [ 146.675232][ T6526] EXT4-fs (loop4): Ignoring removed nobh option [ 146.710047][ C1] net_ratelimit: 56 callbacks suppressed [ 146.777485][ T6526] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 146.803337][ T6526] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 146.867783][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.875535][ T5409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.896479][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.906593][ T6526] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #13: comm syz.4.864: inode has both inline data and extents flags [ 146.941117][ T6448] device bridge_slave_0 entered promiscuous mode [ 146.961586][ T6526] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.864: couldn't read orphan inode 13 (err -117) [ 147.010108][ T5375] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 147.059805][ T6526] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 147.079042][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.104455][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.150144][ T6448] device bridge_slave_1 entered promiscuous mode [ 147.207524][ T6560] block nbd1: shutting down sockets [ 147.290040][ T5375] usb 3-1: Using ep0 maxpacket: 8 [ 147.348306][ T6448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.413675][ T5375] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 147.426552][ T6448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.449161][ T5375] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 147.514340][ T5375] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 147.560595][ T5375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.607937][ T6574] device tunl0 entered promiscuous mode [ 147.637087][ T6574] netlink: 'syz.1.875': attribute type 4 has an invalid length. [ 147.660241][ T6574] netlink: 9 bytes leftover after parsing attributes in process `syz.1.875'. [ 147.684080][ T6448] team0: Port device team_slave_0 added [ 147.721892][ T6448] team0: Port device team_slave_1 added [ 147.830133][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 147.850742][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.857726][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.922378][ T5375] usb 3-1: string descriptor 0 read error: -71 [ 147.934889][ T5375] mdc800 3-1:1.0: probe fails -> wrong Interface [ 147.943101][ T6448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.963641][ T5375] usb 3-1: USB disconnect, device number 13 [ 148.026529][ T6601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.882'. [ 148.119769][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.133501][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.198152][ T6448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.222919][ T6601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.882'. [ 148.512055][ T6448] device hsr_slave_0 entered promiscuous mode [ 148.529645][ T6625] loop3: detected capacity change from 0 to 512 [ 148.542584][ T6448] device hsr_slave_1 entered promiscuous mode [ 148.549618][ T6448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.559711][ T6448] Cannot create hsr debugfs directory [ 148.585554][ T6625] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.686244][ T6625] EXT4-fs (loop3): 1 truncate cleaned up [ 148.702756][ T6625] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.740221][ T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 148.980160][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 149.027511][ T4255] device hsr_slave_0 left promiscuous mode [ 149.052473][ T4255] device hsr_slave_1 left promiscuous mode [ 149.078368][ T4255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.098169][ T4255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.105611][ T7] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 149.125589][ T6649] loop4: detected capacity change from 0 to 4096 [ 149.133165][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.152864][ T4255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.161105][ T4255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.172061][ T4255] device bridge_slave_1 left promiscuous mode [ 149.183435][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.193504][ T7] usb 3-1: config 0 descriptor?? [ 149.206124][ T6649] EXT4-fs (loop4): Ignoring removed orlov option [ 149.234993][ T6649] EXT4-fs (loop4): Test dummy encryption mode enabled [ 149.267553][ T4255] device bridge_slave_0 left promiscuous mode [ 149.278776][ T6649] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 149.292252][ T7] as10x_usb: device has been detected [ 149.292602][ T7] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 149.316636][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.328831][ T6649] EXT4-fs (loop4): Test dummy encryption mode enabled [ 149.369845][ T7] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 149.383680][ T6649] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000009,orlov,journal_ioprio=0x0000000000000000,test_dummy_encryption=v1,nomblk_io_submit,data_err=ignore,acl,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 149.408069][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.508702][ T6622] ------------[ cut here ]------------ [ 149.515081][ T4255] macvlan3: bond_netdev_event received NETDEV_GOING_DOWN [ 149.518862][ T7] usb 3-1: dvb_frontend_clear_cache: Clearing cache for delivery system 3 [ 149.522222][ T4255] net macvlan3: siw: event 10 [ 149.532454][ T6659] kcov: kcov_start: t = ffff88805641d940, size = 524288, area = ffffc90005b61000 [ 149.535511][ T4255] macvlan2: bond_netdev_event received NETDEV_GOING_DOWN [ 149.552780][ T6622] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 149.552847][ T6622] WARNING: CPU: 0 PID: 6622 at kernel/locking/mutex.c:575 __mutex_lock_common+0x193b/0x2400 [ 149.552967][ T4255] net macvlan2: siw: event 10 [ 149.573823][ T6649] EXT4-fs (loop4): shut down requested (0) [ 149.578218][ T6622] Modules linked in: [ 149.579793][ T6660] kcov: kcov_start: t = ffff888020b19dc0, size = 524288, area = ffffc9000f4a5000 [ 149.587920][ T6622] [ 149.593414][ T6661] kcov: kcov_start: t = ffff88801dab0000, size = 524288, area = ffffc9000f0a4000 [ 149.599205][ T7] firmware_class: __allocate_fw_priv: fw-as102_data1_st.hex fw_priv=ffff88802398a600 [ 149.606023][ T4255] geneve1: bond_netdev_event received NETDEV_GOING_DOWN [ 149.614380][ C1] virtqueue callback for ffff888147e7bc00 (ffffffff85491a80) [ 149.614402][ C1] No more buffers in queue [ 149.614432][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 149.614453][ C1] No more buffers in queue [ 149.614483][ C1] tcp_in_window: START [ 149.614489][ C1] tcp_in_window: [ 149.614494][ C1] seq=380930160 ack=495909949+(0) sack=495909949+(0) win=24567 end=380930161 [ 149.614512][ C1] tcp_in_window: sender end=380930160 maxend=384074736 maxwin=3144576 scale=7 receiver end=495909949 maxend=499054525 maxwin=3144832 scale=7 [ 149.614533][ C1] tcp_in_window: [ 149.614539][ C1] seq=380930160 ack=495909949+(0) sack=495909949+(0) win=24567 end=380930161 [ 149.614557][ C1] tcp_in_window: sender end=380930160 maxend=384074736 maxwin=3144576 scale=7 receiver end=495909949 maxend=499054525 maxwin=3144832 scale=7 [ 149.614579][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 149.614593][ C1] tcp_in_window: res=1 sender end=380930161 maxend=384074736 maxwin=3144576 receiver end=495909949 maxend=499054525 maxwin=3144832 [ 149.614618][ C1] tcp_conntracks: [ 149.614626][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 149.642622][ T6662] kcov: kcov_start: t = ffff8880249e0000, size = 524288, area = ffffc90010caa000 [ 149.644291][ T6663] kcov: kcov_start: t = ffff88802c070000, size = 524288, area = ffffc9000f8a6000 [ 149.660807][ T7] async_waiting @ 7 [ 149.674537][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.674657][ C1] nf_conntrack: normal packet for ffff8880763c8480 [ 149.674675][ C1] tcp_in_window: START [ 149.674681][ C1] tcp_in_window: [ 149.674687][ C1] seq=495909949 ack=380930161+(0) sack=380930161+(0) win=24569 end=495909949 [ 149.674706][ C1] tcp_in_window: sender end=495909949 maxend=499054525 maxwin=3144832 scale=7 receiver end=380930161 maxend=384074736 maxwin=3144576 scale=7 [ 149.794453][ C1] tcp_in_window: [ 149.794463][ C1] seq=495909949 ack=380930161+(0) sack=380930161+(0) win=24569 end=495909949 [ 149.806819][ C1] tcp_in_window: sender end=495909949 maxend=499054525 maxwin=3144832 scale=7 receiver end=380930161 maxend=384074736 maxwin=3144576 scale=7 [ 149.821153][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 149.826428][ C1] tcp_in_window: res=1 sender end=495909949 maxend=499054525 maxwin=3144832 receiver end=380930161 maxend=384074993 maxwin=3144576 [ 149.839876][ C1] virtqueue callback for ffff888147e7bc00 (ffffffff85491a80) [ 149.847334][ C1] tcp_conntracks: [ 149.847342][ C1] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 149.856477][ C1] No more buffers in queue [ 149.860884][ C1] eth0: xmit ffff888061cf0000 42:01:0a:80:00:01 [ 149.867108][ C1] Added buffer head 15 to ffff888147e7bd00 [ 149.872914][ C1] virtqueue callback for ffff888147e7bd00 (ffffffff85491b70) [ 149.880741][ T6652] kcov: kcov_task_exit: t = ffff888027941dc0, kcov->t = ffff888027941dc0 [ 149.884917][ T6622] CPU: 1 PID: 6622 Comm: syz.2.888 Not tainted syzkaller #0 [ 149.896801][ T6659] kcov: kcov_task_exit: t = ffff88805641d940, kcov->t = ffff88805641d940 [ 149.896929][ T6661] kcov: kcov_task_exit: t = ffff88801dab0000, kcov->t = ffff88801dab0000 [ 149.914322][ T6664] kcov: kcov_start: t = ffff888023d48000, size = 524288, area = ffffc90011cad000 [ 149.914340][ T4255] net geneve1: siw: event 10 [ 149.928693][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 149.933145][ T7] async_continuing @ 7 after 1 usec [ 149.939156][ T4255] geneve0: bond_netdev_event received NETDEV_GOING_DOWN [ 149.944063][ T6622] RIP: 0010:__mutex_lock_common+0x193b/0x2400 [ 149.951064][ T4255] net geneve0: siw: event 10 [ 149.961831][ T4255] macsec0: bond_netdev_event received NETDEV_GOING_DOWN [ 149.961901][ T6622] Code: 00 00 83 3d 6e 8d c1 03 00 4c 8d b4 24 e0 00 00 00 0f 85 02 e8 ff ff 48 c7 c7 e0 1a 2b 8a 48 c7 c6 20 1b 2b 8a e8 95 84 ec ff <0f> 0b e9 e8 e7 ff ff e8 c9 b7 36 f7 e9 41 fb ff ff 0f 0b e9 63 f1 [ 149.969123][ T4255] net macsec0: siw: event 10 [ 149.988496][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.999355][ T4255] macvtap0: bond_netdev_event received NETDEV_GOING_DOWN [ 150.005701][ T1092] sd 0:0:1:0: cmd ffff8880240b4d28 CDB: 0x28 [ 150.009437][ T4255] net macvtap0: siw: event 10 [ 150.012386][ T1092] Added buffer head 55 to ffff8880216c5900 [ 150.017160][ T4255] veth0_macvtap: bond_netdev_event received NETDEV_GOING_DOWN [ 150.024213][ T4231] Added buffer head 0 to ffff88801e820800 [ 150.030453][ T4255] net veth0_macvtap: siw: event 10 [ 150.041392][ T4255] veth1_macvtap: bond_netdev_event received NETDEV_GOING_DOWN [ 150.046197][ T5376] nf_conntrack: normal packet for ffff8880794ae780 [ 150.048881][ C1] virtqueue callback for ffff8880216c5900 (ffffffff85068310) [ 150.055574][ T4338] nf_conntrack: normal packet for ffff8880794ae600 [ 150.062725][ C1] sd 0:0:1:0: cmd ffff8880240b4d28 response 0 status 0x0 sense_len 0 [ 150.062751][ C1] No more buffers in queue [ 150.062966][ T4255] net veth1_macvtap: siw: event 10 [ 150.073550][ T4198] nf_conntrack: normal packet for ffff8880794afc80 [ 150.077495][ T6649] kcov: kcov_task_exit: t = ffff888023d79dc0, kcov->t = ffff888023d79dc0 [ 150.090965][ T6664] kcov: kcov_task_exit: t = ffff888023d48000, kcov->t = ffff888023d48000 [ 150.093578][ T4255] macvlan1: bond_netdev_event received NETDEV_GOING_DOWN [ 150.120210][ T6663] kcov: kcov_task_exit: t = ffff88802c070000, kcov->t = ffff88802c070000 [ 150.128886][ T4255] net macvlan1: siw: event 10 [ 150.135325][ T4255] macvlan0: bond_netdev_event received NETDEV_GOING_DOWN [ 150.142417][ T4255] net macvlan0: siw: event 10 [ 150.142653][ T6622] RSP: 0018:ffffc9000316fa80 EFLAGS: 00010246 [ 150.147267][ T4255] vlan1: bond_netdev_event received NETDEV_GOING_DOWN [ 150.156438][ T6622] [ 150.160211][ T4255] net vlan1: siw: event 10 [ 150.165856][ T6622] RAX: 1af20e1d71843500 RBX: ffff888053ffcce0 RCX: 0000000000080000 [ 150.166982][ T4255] vlan0: bond_netdev_event received NETDEV_GOING_DOWN [ 150.181995][ C1] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 3) [ 150.193814][ C1] Sent skb ffff888061cf0000 [ 150.193942][ T6346] nf_conntrack: normal packet for ffff8880794aea80 [ 150.198344][ C1] No more buffers in queue [ 150.198373][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 150.206178][ T6622] RDX: ffffc9000c4b9000 RSI: 00000000000020b4 RDI: 00000000000020b5 [ 150.209313][ C1] No more buffers in queue [ 150.209351][ C1] tcp_in_window: START [ 150.231603][ C1] tcp_in_window: [ 150.231619][ C1] seq=380930160 ack=495909949+(0) sack=495909949+(0) win=24567 end=380930161 [ 150.241782][ T6622] RBP: ffffc9000316fc10 R08: ffffc9000316f5a7 R09: 1ffff9200062deb4 [ 150.244041][ C1] tcp_in_window: sender end=380930161 maxend=384074993 maxwin=3144576 scale=7 receiver end=495909949 maxend=499054525 maxwin=3144832 scale=7 [ 150.266340][ C1] tcp_in_window: [ 150.266355][ C1] seq=380930160 ack=495909949+(0) sack=495909949+(0) win=24567 end=380930161 [ 150.275241][ T6622] R10: dffffc0000000000 R11: fffff5200062deb5 R12: 0000000000000000 [ 150.278762][ C1] tcp_in_window: sender end=380930161 maxend=384074993 maxwin=3144576 scale=7 receiver end=495909949 maxend=499054525 maxwin=3144832 scale=7 [ 150.278791][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 150.286884][ T4197] hcon ffff88802018c000 state BT_CONNECTED [ 150.301118][ C1] tcp_in_window: res=1 sender end=380930161 maxend=384074993 maxwin=3144576 receiver end=495909949 maxend=499054525 maxwin=3144832 [ 150.301148][ C1] tcp_conntracks: [ 150.301154][ C1] syn=0 ack=1 fin=1 rst=0 old=5 new=6 [ 150.301457][ T5375] Bluetooth: hci1: command 0x040f tx timeout [ 150.306638][ C1] No more buffers in queue [ 150.306670][ T7] usb 3-1: loading /lib/firmware/updates/syzkaller/as102_data1_st.hex failed for no such file or directory. [ 150.306756][ T7] usb 3-1: loading /lib/firmware/updates/as102_data1_st.hex failed for no such file or directory. [ 150.306869][ T7] usb 3-1: loading /lib/firmware/syzkaller/as102_data1_st.hex failed for no such file or directory. [ 150.307448][ T7] sd 0:0:1:0: cmd ffff8880240b5128 CDB: 0x28 [ 150.315199][ T6622] R13: dffffc0000000000 R14: ffffc9000316fb60 R15: 0000000000000000 [ 150.326498][ T7] Added buffer head 55 to ffff8880216c5900 [ 150.326658][ T4197] hcon ffff88802018c000 [ 150.333401][ T2303] nf_conntrack: normal packet for ffff8880794ae900 [ 150.335632][ T4204] hci1 cmd_cnt 1 cmd queued 1 [ 150.341602][ C1] virtqueue callback for ffff8880216c5900 (ffffffff85068310) [ 150.341626][ C1] sd 0:0:1:0: cmd ffff8880240b5128 response 0 status 0x0 sense_len 0 [ 150.346315][ T4204] hci1 type 1 len 13 [ 150.357436][ C1] No more buffers in queue [ 150.358276][ T4189] kernfs delayed_allocation_blocks: removing [ 150.368125][ T4197] hci2: opcode 0x0406 plen 3 [ 150.378960][ T6622] FS: 00007fb81fa5b6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 150.385170][ T4197] hci2: skb len 6 [ 150.393292][ T4189] kernfs session_write_kbytes: removing [ 150.398679][ T4197] hci2: length 1 [ 150.402827][ T4255] net vlan0: siw: event 10 [ 150.402920][ T4255] veth0_vlan: bond_netdev_event received NETDEV_GOING_DOWN [ 150.409706][ T4197] hci2 cmd_cnt 1 cmd queued 1 [ 150.414569][ T6622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.421521][ C0] virtqueue callback for ffff88801e820800 (ffffffff8444ab50) [ 150.429615][ T4189] kernfs lifetime_write_kbytes: removing [ 150.433447][ C0] virtqueue interrupt with no work for ffff88801e820700 [ 150.437895][ T4255] net veth0_vlan: siw: event 10 [ 150.443810][ C0] virtqueue interrupt with no work for ffff88801e820600 [ 150.443943][ T4197] hci2 type 1 len 6 [ 150.448433][ T4189] kernfs reserved_clusters: removing [ 150.459091][ T5376] Added buffer head 0 to ffff88801e820800 [ 150.461444][ T6622] CR2: 00005555851aba38 CR3: 000000005a560000 CR4: 00000000003506e0 [ 150.466917][ T4173] nf_conntrack: normal packet for ffff8880763c8480 [ 150.470710][ T4255] veth1_vlan: bond_netdev_event received NETDEV_GOING_DOWN [ 150.475047][ T4173] tcp_in_window: START [ 150.482197][ T4189] kernfs sra_exceeded_retry_limit: removing [ 150.486433][ T4173] tcp_in_window: [ 150.486441][ T4173] seq=495909949 ack=380930161+(0) sack=380930161+(0) win=24569 end=495909949 [ 150.493308][ T6622] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.500602][ T4173] tcp_in_window: sender end=495909949 maxend=499054525 maxwin=3144832 scale=7 receiver end=380930161 maxend=384074993 maxwin=3144576 scale=7 [ 150.506279][ T4255] net veth1_vlan: siw: event 10 [ 150.513157][ T4173] tcp_in_window: [ 150.518030][ T4189] kernfs inode_readahead_blks: removing [ 150.525011][ T4173] seq=495909949 ack=380930161+(0) sack=380930161+(0) win=24569 end=495909949 [ 150.528887][ T6622] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.534086][ T4173] tcp_in_window: sender end=495909949 maxend=499054525 maxwin=3144832 scale=7 receiver end=380930161 maxend=384074993 maxwin=3144576 scale=7 [ 150.539929][ T4255] veth0_virt_wifi: bond_netdev_event received NETDEV_GOING_DOWN [ 150.547764][ T4173] tcp_in_window: I=1 II=1 III=1 IV=1 [ 150.554300][ T4189] kernfs inode_goal: removing [ 150.561427][ T4173] tcp_in_window: res=1 sender end=495909949 maxend=499054525 maxwin=3144832 receiver end=380930161 maxend=384074993 maxwin=3144576 [ 150.565563][ T6622] Call Trace: [ 150.571374][ T4173] tcp_conntracks: [ 150.571383][ T4173] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 150.573444][ T4173] No more buffers in queue [ 150.575929][ T6622] [ 150.583787][ T4173] eth0: xmit ffff888078135780 42:01:0a:80:00:01 [ 150.591809][ T4255] net veth0_virt_wifi: siw: event 10 [ 150.606113][ T4173] Added buffer head 9 to ffff888147e7bb00 [ 150.610969][ C0] virtqueue callback for ffff888147e7bb00 (ffffffff85491b70) [ 150.611025][ T4189] kernfs mb_stats: removing [ 150.614646][ C0] Sent skb ffff888078135780 [ 150.620179][ T4189] kernfs mb_max_to_scan: removing [ 150.628911][ C0] No more buffers in queue [ 150.636960][ T6622] ? __mutex_lock_common+0x435/0x2400 [ 150.651867][ T4255] veth1_virt_wifi: bond_netdev_event received NETDEV_GOING_DOWN [ 150.660034][ T4189] kernfs mb_min_to_scan: removing [ 150.664551][ T4255] net veth1_virt_wifi: siw: event 10 [ 150.669277][ T6622] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 150.684135][ T4255] hsr0: bond_netdev_event received NETDEV_GOING_DOWN [ 150.686097][ T4189] kernfs mb_order2_req: removing [ 150.689678][ T4255] net hsr0: siw: event 10 [ 150.695202][ T4189] kernfs mb_stream_req: removing [ 150.699531][ T4255] hsr_slave_1: bond_netdev_event received NETDEV_GOING_DOWN [ 150.705883][ T6622] ? mutex_lock_io_nested+0x60/0x60 [ 150.709159][ T7] sd 0:0:1:0: cmd ffff8880240b5528 CDB: 0x28 [ 150.715183][ T4189] kernfs mb_group_prealloc: removing [ 150.719482][ T7] Added buffer head 55 to ffff8880216c5900 [ 150.719581][ C0] wireguard: wg1: Handshake for peer 10 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 2) [ 150.728755][ T6622] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 150.731987][ T7] sd 0:0:1:0: cmd ffff8880240b5928 CDB: 0x28 [ 150.736182][ T6346] nf_conntrack: normal packet for ffff8880794aec00 [ 150.740953][ T7] Added buffer head 103 to ffff8880216c5900 [ 150.752002][ T6622] ? mutex_unlock+0x10/0x10 [ 150.758667][ T4189] kernfs mb_max_inode_prealloc: removing [ 150.763423][ C1] virtqueue callback for ffff8880216c5900 (ffffffff85068310) [ 150.768737][ T4189] kernfs mb_max_linear_groups: removing [ 150.774354][ C1] sd 0:0:1:0: cmd ffff8880240b5528 response 0 status 0x0 sense_len 0 [ 150.774379][ C1] sd 0:0:1:0: cmd ffff8880240b5928 response 0 status 0x0 sense_len 0 [ 150.774394][ C1] No more buffers in queue [ 150.781157][ T4189] kernfs max_writeback_mb_bump: removing [ 150.788921][ T4255] net hsr_slave_1: siw: event 10 [ 150.791845][ T7] usb 3-1: Loading firmware from /lib/firmware/as102_data1_st.hex [ 150.796026][ T4255] veth1_to_hsr: bond_netdev_event received NETDEV_GOING_DOWN [ 150.802921][ T4189] kernfs extent_max_zeroout_kb: removing [ 150.810467][ T6622] ? mutex_lock_io_nested+0x60/0x60 [ 150.814398][ T7] usb 3-1: direct-loading as102_data1_st.hex [ 150.819391][ T4255] net veth1_to_hsr: siw: event 10 [ 150.825205][ T4189] kernfs trigger_fs_error: removing [ 150.825226][ T4189] kernfs err_ratelimit_interval_ms: removing [ 150.837708][ T6622] mutex_lock_interruptible_nested+0x17/0x20 [ 150.843069][ T7] firmware_class: fw_set_page_data: fw-as102_data1_st.hex fw_priv=ffff88802398a600 data=ffffc90003511000 size=95500 [ 150.850767][ T6622] as102_dvb_dmx_start_feed+0x6c/0x280 [ 150.855430][ T7] usb 3-1: usb_bulk_msg(send) failed, err -22 [ 150.863614][ T4255] hsr_slave_0: bond_netdev_event received NETDEV_GOING_DOWN [ 150.865943][ T4189] kernfs err_ratelimit_burst: removing [ 150.872100][ T4255] net hsr_slave_0: siw: event 10 [ 150.879245][ T7] as10x_usb: error during firmware upload part1 [ 150.886826][ T6622] dmx_ts_feed_start_filtering+0x11c/0x210 [ 150.893049][ T4189] kernfs warning_ratelimit_interval_ms: removing [ 150.901349][ T4255] veth0_to_hsr: bond_netdev_event received NETDEV_GOING_DOWN [ 150.905560][ T4189] kernfs warning_ratelimit_burst: removing [ 150.913769][ T4255] net veth0_to_hsr: siw: event 10 [ 150.916707][ T7] firmware_class: __free_fw_priv: fw-as102_data1_st.hex fw_priv=ffff88802398a600 data=ffffc90003511000 size=95500 [ 150.924732][ T6622] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 150.931918][ T4189] kernfs msg_ratelimit_interval_ms: removing [ 150.939569][ T4255] batadv_slave_1: bond_netdev_event received NETDEV_GOING_DOWN [ 150.942845][ T4189] kernfs msg_ratelimit_burst: removing [ 150.949445][ T4255] net batadv_slave_1: siw: event 10 [ 150.954217][ T7] Registered device nBox DVB-T Dongle [ 150.963151][ T4255] veth1_to_batadv: bond_netdev_event received NETDEV_GOING_DOWN [ 150.965184][ T4189] kernfs errors_count: removing [ 150.973161][ T6622] dvb_dmxdev_filter_start+0x422/0x1060 [ 150.983406][ T7] driver: 'Abilis Systems as10x usb driver': driver_bound: bound to device '3-1:0.0' [ 150.989072][ T4255] net veth1_to_batadv: siw: event 10 [ 150.996501][ T5376] nf_conntrack: normal packet for ffff8880794aef00 [ 151.004564][ T6622] dvb_demux_do_ioctl+0x47e/0x530 [ 151.007948][ T7] kobject: '3-1:0.0' (ffff88801ed67030): kobject_uevent_env [ 151.013068][ T4255] batadv_slave_0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.019169][ T4189] kernfs warning_count: removing [ 151.025215][ T4255] net batadv_slave_0: siw: event 10 [ 151.033143][ T7] kobject: '3-1:0.0' (ffff88801ed67030): fill_kobj_path: path = '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0' [ 151.039003][ T6622] dvb_usercopy+0x191/0x2b0 [ 151.044517][ T4189] kernfs msg_count: removing [ 151.049821][ T4255] veth0_to_batadv: bond_netdev_event received NETDEV_GOING_DOWN [ 151.064058][ T7] bus: 'usb': really_probe: bound device 3-1:0.0 to driver Abilis Systems as10x usb driver [ 151.068555][ T6622] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 151.073454][ T7] driver: 'usb': driver_bound: bound to device '3-1' [ 151.081207][ T4255] net veth0_to_batadv: siw: event 10 [ 151.088205][ T4189] kernfs first_error_ino: removing [ 151.092064][ T4255] team_slave_1: bond_netdev_event received NETDEV_GOING_DOWN [ 151.097113][ T6622] ? dvb_generic_ioctl+0xb0/0xb0 [ 151.105062][ T4255] net team_slave_1: siw: event 10 [ 151.111700][ T4189] kernfs last_error_ino: removing [ 151.115694][ T4255] veth1_to_team: bond_netdev_event received NETDEV_GOING_DOWN [ 151.126324][ T7] kobject: '3-1' (ffff88805ff080a8): kobject_uevent_env [ 151.132523][ T4255] net veth1_to_team: siw: event 10 [ 151.136694][ T7] kobject: '3-1' (ffff88805ff080a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.2/usb3/3-1' [ 151.142089][ T4255] team_slave_0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.149039][ T4189] kernfs first_error_block: removing [ 151.156966][ T4255] net team_slave_0: siw: event 10 [ 151.163253][ T6622] ? dvb_demux_poll+0x210/0x210 [ 151.167129][ T4255] veth0_to_team: bond_netdev_event received NETDEV_GOING_DOWN [ 151.179070][ T7] bus: 'usb': really_probe: bound device 3-1 to driver usb [ 151.183901][ T4255] net veth0_to_team: siw: event 10 [ 151.189559][ T4189] kernfs last_error_block: removing [ 151.195915][ T4255] bond_slave_1: bond_netdev_event received NETDEV_GOING_DOWN [ 151.207939][ T6622] dvb_demux_ioctl+0x25/0x30 [ 151.211587][ T4255] bond0: (slave bond_slave_1): bond_slave_netdev_event called [ 151.223474][ T7] device: 'ep_00': device_add [ 151.231351][ T4255] net bond_slave_1: siw: event 10 [ 151.244583][ T4189] kernfs first_error_line: removing [ 151.246565][ T6622] __se_sys_ioctl+0xfa/0x170 [ 151.253176][ T7] kobject: 'ep_00' (ffff888079542010): kobject_add_internal: parent: '3-1', set: 'devices' [ 151.259306][ T4255] veth1_to_bond: bond_netdev_event received NETDEV_GOING_DOWN [ 151.267134][ T6622] do_syscall_64+0x4c/0xa0 [ 151.276791][ T4255] net veth1_to_bond: siw: event 10 [ 151.281940][ T4189] kernfs last_error_line: removing [ 151.289625][ T4255] bond_slave_0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.298809][ T7] ep_00: No ACPI support [ 151.299897][ T4255] bond0: (slave bond_slave_0): bond_slave_netdev_event called [ 151.304946][ T7] PM: Adding info for No Bus:ep_00 [ 151.312221][ T4255] net bond_slave_0: siw: event 10 [ 151.319202][ T4189] kernfs first_error_func: removing [ 151.326640][ T4255] veth0_to_bond: bond_netdev_event received NETDEV_GOING_DOWN [ 151.329874][ T4189] kernfs last_error_func: removing [ 151.337441][ T4255] net veth0_to_bond: siw: event 10 [ 151.341872][ T6622] ? clear_bhb_loop+0x30/0x80 [ 151.351471][ T4255] bridge_slave_1: bond_netdev_event received NETDEV_GOING_DOWN [ 151.354126][ T7] kobject: 'ep_00' (ffff888079542010): kobject_uevent_env [ 151.359026][ T4255] net bridge_slave_1: siw: event 10 [ 151.364229][ T4189] kernfs first_error_errcode: removing [ 151.364251][ T4189] kernfs last_error_errcode: removing [ 151.364270][ T4189] kernfs first_error_time: removing [ 151.364287][ T4189] kernfs last_error_time: removing [ 151.364305][ T4189] kernfs journal_task: removing [ 151.364322][ T4189] kernfs mb_prefetch: removing [ 151.364340][ T4189] kernfs mb_prefetch_limit: removing [ 151.364364][ T4189] kernfs loop4: removing [ 151.364441][ T6622] ? clear_bhb_loop+0x30/0x80 [ 151.374027][ T4255] veth1_to_bridge: bond_netdev_event received NETDEV_GOING_DOWN [ 151.379442][ T7] kobject: 'ep_00' (ffff888079542010): kobject_uevent_env: filter function caused the event to drop! [ 151.387014][ T4255] net veth1_to_bridge: siw: event 10 [ 151.396480][ T4189] kobject: 'loop4' (ffff88807e5c02d0): kobject_cleanup, parent 0000000000000000 [ 151.401941][ T4255] bridge_slave_0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.408524][ T7] kcov: kcov_move_area: ffffc900120ae000 1048576 <= ffffc900138b1000 1048575 [ 151.413275][ T4255] net bridge_slave_0: siw: event 10 [ 151.422254][ C0] virtqueue callback for ffff88801e820800 (ffffffff8444ab50) [ 151.426031][ T4255] veth0_to_bridge: bond_netdev_event received NETDEV_GOING_DOWN [ 151.430492][ C0] virtqueue interrupt with no work for ffff88801e820700 [ 151.430505][ C0] virtqueue interrupt with no work for ffff88801e820600 [ 151.432692][ T4189] kobject: 'loop4' (ffff88807e5c02d0): calling ktype release [ 151.436143][ T4255] net veth0_to_bridge: siw: event 10 [ 151.443307][ T4189] kobject: 'loop4': free name [ 151.448959][ T4255] wg2: bond_netdev_event received NETDEV_GOING_DOWN [ 151.453620][ T7] kcov: kcov_remote_start: handle = 100000000000003, context: task [ 151.460389][ T6662] kcov: kcov_task_exit: t = ffff8880249e0000, kcov->t = ffff8880249e0000 [ 151.465899][ T7] kcov: kcov_start: t = ffff888016e8bb80, size = 1048576, area = ffffc900138b1000 [ 151.473410][ T4255] net wg2: siw: event 10 [ 151.478271][ T6660] kcov: kcov_task_exit: t = ffff888020b19dc0, kcov->t = ffff888020b19dc0 [ 151.485897][ T4255] wg1: bond_netdev_event received NETDEV_GOING_DOWN [ 151.489245][ T6622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.496587][ T4255] net wg1: siw: event 10 [ 151.499415][ T7] hub 3-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 151.504749][ T4255] wg0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.509325][ T6622] RIP: 0033:0x7fb821803159 [ 151.517234][ T4255] net wg0: siw: event 10 [ 151.518790][ T6622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.523822][ T4255] veth1: bond_netdev_event received NETDEV_GOING_DOWN [ 151.531238][ C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 151.531333][ T4189] kernfs backing_file: removing [ 151.544379][ T4255] net veth1: siw: event 10 [ 151.547584][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 151.556885][ T4255] veth0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.563993][ C0] kcov: kcov_start: t = ffff888027940000, size = 262144, area = ffffc90002289000 [ 151.564048][ C0] kcov: kcov_move_area: ffffc900120ae000 1048576 <= ffffc90002289000 34 [ 151.573478][ T4255] net veth0: siw: event 10 [ 151.581700][ T4198] Added buffer head 0 to ffff88801e820800 [ 151.585881][ T4255] vxcan1: bond_netdev_event received NETDEV_GOING_DOWN [ 151.594785][ T7] kcov: kcov_move_area: ffffc900120ae000 1048576 <= ffffc900138b1000 168939 [ 151.600235][ T4189] kernfs offset: removing [ 151.621562][ T6622] RSP: 002b:00007fb81fa5b028 EFLAGS: 00000246 [ 151.624755][ T2303] nf_conntrack: normal packet for ffff8880794ae900 [ 151.631406][ T6622] ORIG_RAX: 0000000000000010 [ 151.640301][ T4255] net vxcan1: siw: event 10 [ 151.649523][ T6622] RAX: ffffffffffffffda RBX: 00007fb821a8afa0 RCX: 00007fb821803159 [ 151.657338][ T4255] vxcan0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.661407][ T4189] kernfs sizelimit: removing [ 151.670018][ T4255] net vxcan0: siw: event 10 [ 151.678215][ T6622] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 151.682894][ T4255] batadv0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.686791][ T4189] kernfs autoclear: removing [ 151.693310][ T4255] net batadv0: siw: event 10 [ 151.703128][ T6622] RBP: 00007fb82189a06b R08: 0000000000000000 R09: 0000000000000000 [ 151.705382][ T4255] nlmon0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.708627][ T6622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.708642][ T6622] R13: 00007fb821a8b038 R14: 00007fb821a8afa0 R15: 00007ffeb00b25d8 [ 151.708661][ T6622] [ 151.728667][ T4255] net nlmon0: siw: event 10 [ 151.737482][ T4189] kernfs partscan: removing [ 151.744289][ T4255] dummy0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.748811][ T4189] kernfs dio: removing [ 151.753149][ T4255] net dummy0: siw: event 10 [ 151.763306][ T4189] kernfs loop: removing [ 151.768294][ T4255] team0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.777341][ T4189] kobject: 'loop4' (ffff888145ef6a00): kobject_uevent_env [ 151.785696][ T4255] net team0: siw: event 10 [ 151.791959][ T6622] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 151.795973][ T4255] bond0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.802627][ T6622] CPU: 0 PID: 6622 Comm: syz.2.888 Not tainted syzkaller #0 [ 151.802644][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.802652][ T6622] Call Trace: [ 151.802658][ T6622] [ 151.802664][ T6622] dump_stack_lvl+0x188/0x250 [ 151.811423][ T4255] bond0: bond_master_netdev_event called [ 151.815637][ T6622] ? show_regs_print_info+0x20/0x20 [ 151.815659][ T6622] ? load_image+0x410/0x410 [ 151.821790][ T4255] net bond0: siw: event 10 [ 151.828176][ T6622] panic+0x2f8/0x850 [ 151.828202][ T6622] ? bpf_jit_dump+0xd0/0xd0 [ 151.833142][ T4255] vcan0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.837328][ T6622] ? __mutex_lock_common+0x193b/0x2400 [ 151.837350][ T6622] __warn+0x248/0x2b0 [ 151.846605][ T4255] net vcan0: siw: event 10 [ 151.852131][ T6622] ? __mutex_lock_common+0x193b/0x2400 [ 151.852153][ T6622] report_bug+0x1b9/0x2e0 [ 151.852174][ T6622] handle_bug+0x3a/0x70 [ 151.857193][ T4255] bridge0: bond_netdev_event received NETDEV_GOING_DOWN [ 151.861220][ T6622] exc_invalid_op+0x16/0x40 [ 151.861241][ T6622] asm_exc_invalid_op+0x16/0x20 [ 151.861258][ T6622] RIP: 0010:__mutex_lock_common+0x193b/0x2400 [ 151.869720][ T4255] net bridge0: siw: event 10 [ 151.876166][ T6622] Code: 00 00 83 3d 6e 8d c1 03 00 4c 8d b4 24 e0 00 00 00 0f 85 02 e8 ff ff 48 c7 c7 e0 1a 2b 8a 48 c7 c6 20 1b 2b 8a e8 95 84 ec ff <0f> 0b e9 e8 e7 ff ff e8 c9 b7 36 f7 e9 41 fb ff ff 0f 0b e9 63 f1 [ 151.876187][ T6622] RSP: 0018:ffffc9000316fa80 EFLAGS: 00010246 [ 151.876203][ T6622] RAX: 1af20e1d71843500 RBX: ffff888053ffcce0 RCX: 0000000000080000 [ 151.876215][ T6622] RDX: ffffc9000c4b9000 RSI: 00000000000020b4 RDI: 00000000000020b5 [ 151.876225][ T6622] RBP: ffffc9000316fc10 R08: ffffc9000316f5a7 R09: 1ffff9200062deb4 [ 151.876238][ T6622] R10: dffffc0000000000 R11: fffff5200062deb5 R12: 0000000000000000 [ 151.876248][ T6622] R13: dffffc0000000000 R14: ffffc9000316fb60 R15: 0000000000000000 [ 151.881480][ T4255] lo: bond_netdev_event received NETDEV_GOING_DOWN [ 151.885404][ T6622] ? __mutex_lock_common+0x435/0x2400 [ 151.885432][ T6622] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 151.894211][ T4255] net lo: siw: event 10 [ 151.900299][ T6622] ? mutex_lock_io_nested+0x60/0x60 [ 151.900321][ T6622] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 151.900341][ T6622] ? mutex_unlock+0x10/0x10 [ 151.909675][ T4189] kobject: 'loop4' (ffff888145ef6a00): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 151.916262][ T6622] ? mutex_lock_io_nested+0x60/0x60 [ 151.916288][ T6622] mutex_lock_interruptible_nested+0x17/0x20 [ 151.916304][ T6622] as102_dvb_dmx_start_feed+0x6c/0x280 [ 151.916322][ T6622] dmx_ts_feed_start_filtering+0x11c/0x210 [ 151.920480][ T4189] kobject: 'loop4' (ffff888145ef6a00): kobject_uevent_env [ 151.923803][ T6622] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 151.923830][ T6622] dvb_dmxdev_filter_start+0x422/0x1060 [ 151.928417][ T4189] kobject: 'loop4' (ffff888145ef6a00): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 151.935138][ T6622] dvb_demux_do_ioctl+0x47e/0x530 [ 151.935160][ T6622] dvb_usercopy+0x191/0x2b0 [ 151.935174][ T6622] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 151.935188][ T6622] ? dvb_generic_ioctl+0xb0/0xb0 [ 151.935207][ T6622] ? dvb_demux_poll+0x210/0x210 [ 151.935222][ T6622] dvb_demux_ioctl+0x25/0x30 [ 151.935237][ T6622] __se_sys_ioctl+0xfa/0x170 [ 151.935254][ T6622] do_syscall_64+0x4c/0xa0 [ 151.935269][ T6622] ? clear_bhb_loop+0x30/0x80 [ 151.935287][ T6622] ? clear_bhb_loop+0x30/0x80 [ 151.935304][ T6622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.952098][ T4582] inotify_handle_inode_event: group=ffff888147ecb800 mark=ffff888058e4be10 mask=8000 [ 151.954716][ T6622] RIP: 0033:0x7fb821803159 [ 151.954736][ T6622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.961942][ T4582] fsnotify_insert_event: group=ffff888147ecb800 event=ffff888059ec9d80 [ 151.966222][ T6622] RSP: 002b:00007fb81fa5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.966242][ T6622] RAX: ffffffffffffffda RBX: 00007fb821a8afa0 RCX: 00007fb821803159 [ 151.966254][ T6622] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 151.974081][ T3558] get_one_event: group=ffff888147ecb800 event=ffff888059ec9d80 [ 151.980256][ T6622] RBP: 00007fb82189a06b R08: 0000000000000000 R09: 0000000000000000 [ 151.980270][ T6622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.980279][ T6622] R13: 00007fb821a8b038 R14: 00007fb821a8afa0 R15: 00007ffeb00b25d8 [ 151.980297][ T6622] [ 151.987575][ T3558] fsnotify_remove_first_event: group=ffff888147ecb800 event=ffff888059ec9d80 [ 151.997701][ T6622] Kernel Offset: disabled [ 152.428556][ T6622] Rebooting in 86400 seconds..