last executing test programs: 7m22.581194351s ago: executing program 4 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='16\x00', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/size\x00', 0x2, 0x0) write(r4, &(0x7f0000000840)='65500\x00', 0x6) close(r4) ioctl(r2, 0x400c0930, &(0x7f0000000700)='\x00'/12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0) close(r5) 7m15.560091954s ago: executing program 4 (id=246): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffc, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) capset(&(0x7f0000000100)={0x20080521}, &(0x7f0000000140)={0x0, 0xc019, 0x0, 0x8e, 0xfffffffb, 0xfffffffd}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x100}, 0x16, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x204031, r5, 0xa5ce5000) 7m9.715901792s ago: executing program 4 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:test', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='ppl', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='1:0', 0x3) write(r6, &(0x7f00000005c0)='1:1', 0x3) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram0/ppl_size\x00', 0x1, 0x0) write(r7, &(0x7f0000000740)='128', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f0000000a40)='active', 0x6) 7m4.410012466s ago: executing program 4 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x3) r5 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)=""/257, 0x101}], 0x1, 0x0, 0xd}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000380)=0x10) sched_getparam(r0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={r9, 0x40, 0x8, 0x1}, &(0x7f0000000100)=0x10) 7m2.595161149s ago: executing program 4 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) process_madvise(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f00000004c0)}, {&(0x7f00000008c0)="0ed475db6b0b6c5079c8904ef932efc58d0bd462a586c9eb6cfe7f3a9afa363341bbc9511196a134d29b", 0x2a}, {&(0x7f0000000a00)="b71d718ba567f052acd2643b3ce53969cb3c051a5f18590087f566e4ecf081b4d9d8f597b09dc9d9d9f914445c182d", 0x2f}], 0x3, 0x2, 0x0) r0 = getpgrp(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x100) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x11) 7m0.088306604s ago: executing program 4 (id=260): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) open(0x0, 0x100000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_procfs(r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) flock(r0, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 6m56.409871763s ago: executing program 3 (id=264): mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000190c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), 0x0) r3 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='utf8', &(0x7f0000000440)='\x00dev\a\x00\x00\x00\x00\x00h&{|\xed\x0f\xb8\x93:\x1a\xea\xf8\n\xb7\xec\x16\xb5r\v\x12\xd7\xe7\x85]OI\xdaZ\xb9\"^\xd9\x91r\x93<\xfa\xd6\xd7\x17z\x04\xe8\x05N!\x01.\xcc\x8cR\xbc\xff\'\xbf;*\xdf\xdf\xe6 \x92>\xffre\x19FZ\x94\x1c\x13h', 0x0) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) 6m50.895753096s ago: executing program 3 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./file3\x00', 0x80000000) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0, 0x0], 0x2, r6, r7, 0x3, 0x0, 0xfff7ffff, 0x6, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0x0, "fe1d00003413000000000020b42717e47f00"}}) 6m49.50775941s ago: executing program 3 (id=270): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x1d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2000000, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r3 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r4, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 6m48.747682095s ago: executing program 3 (id=272): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200880, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r5, &(0x7f0000010440), 0x0, 0xc03, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 6m46.644265512s ago: executing program 3 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000540)={{r5}, 0x40ea, 0x101, 0x9}) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff, 0x71a0, 0xffffffff, 0x4], [0xffffffff, 0xffffffff, 0xffffffff, 0xf974, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0x6d, 0x0, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x9a8}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) 6m44.520042199s ago: executing program 3 (id=278): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x10, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x5, 0x80, 0x4bd, 0x8103, 0x15}) write$binfmt_aout(r3, 0x0, 0xff2e) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) write(r2, &(0x7f0000000400), 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000f40)) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m44.388760325s ago: executing program 32 (id=260): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) open(0x0, 0x100000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_procfs(r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) flock(r0, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 6m29.381950994s ago: executing program 33 (id=278): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x10, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x5, 0x80, 0x4bd, 0x8103, 0x15}) write$binfmt_aout(r3, 0x0, 0xff2e) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) write(r2, &(0x7f0000000400), 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000f40)) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m14.924237908s ago: executing program 0 (id=301): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8020) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000400)={{0x9, 0x6}, 'port1\x00', 0x60, 0x820, 0x8, 0x0, 0xffff69ac, 0xd9, 0x8, 0x0, 0x0, 0x5}) ioperm(0x4, 0x8, 0x5) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x0, 0x0}, 0x10) delete_module(0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioperm(0x68, 0x547ce70, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0x2, 0x0, 0xbd, 0xfdfdffff, 0xffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6m14.23378477s ago: executing program 0 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='md0\n', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='no', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='raid1\n', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, 0x0, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='1:0\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='0\n', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r6, 0x0, 0x0) close(r6) close(0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) close(r7) 6m13.15715112s ago: executing program 0 (id=305): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120101020958b810101404702c2e8b14030109021b0001010110040904e85d014210ab02090583020002090106"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000540), 0x0, 0x40010063, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8bb0e285b84b6b92) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x325, @time={0xbc, 0x20000002}, 0x41, {}, 0x2, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000300)={{0x0, 0x7}, 0x0, 0x2000000, 0x5, {0x8, 0x1}, 0x0, 0x7}) tkill(r2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) fsopen(&(0x7f00000004c0)='adfs\x00', 0x1) open_tree(0xffffffffffffff9c, 0x0, 0x1103) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r4, 0x0, 0x0) 6m9.840107482s ago: executing program 0 (id=307): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_setup(0xa1c, &(0x7f0000000340)={0x0, 0xcbff, 0x80, 0x1, 0x2e0}) r4 = io_uring_setup(0x79ce, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 6m8.126009881s ago: executing program 0 (id=309): socket(0x1e, 0x4, 0xfffffffd) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) listen(r2, 0x1) recvmmsg(r2, &(0x7f0000000100)=[{{&(0x7f0000000240)=@alg, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffd61}, 0x1000}], 0x1, 0x140, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f00003ab000/0x4000)=nil, 0x4000, 0x6) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xfffffffd}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x401, 0xe50, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x6}}}, 0x0) syz_io_uring_setup(0x34b9, &(0x7f00000001c0)={0x0, 0x8329, 0x10, 0xffffffff, 0x2c9, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000180)) 6m5.115392159s ago: executing program 0 (id=313): r0 = syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x2, 0x638, &(0x7f0000000ac0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x105, 0x7) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141e677e53cc188dc41581142590d4e071303f4ae95293dd9ce1c8236b03632dab46a43356a89c37f32b221bf1e7310797dd1db083ffc38c12923ab42348585af679581ab62438f23ef4adeb46294", @ANYRES64=r1, @ANYRESHEX, @ANYRESOCT, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r1, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x4412, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$hfsplus(&(0x7f0000000300), &(0x7f0000000240)='./file1\x00', 0x3a01809, &(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYRESOCT=r4, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES64=r3, @ANYBLOB="ba7e58f2b58c695d4595bc92e0da2d5ded2f266f85f01c318857ae510b6583355182de9f860133cec5c896767b18569cc10c7090e070fadd257d7a", @ANYRES64=0x0, @ANYRESDEC=r5, @ANYRES8=r2], 0x1, 0x70d, &(0x7f0000002480)="$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") r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x68d44ab5e3377f89, &(0x7f00000002c0)={[{@quota}]}, 0xfb, 0x4a6, &(0x7f00000018c0)="$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") sched_setscheduler(0x0, 0x2, 0x0) r9 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r6, 0x28f43000) syz_open_procfs(r9, &(0x7f0000000280)='net/hci\x00') setns(r8, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) connect$inet(r5, 0x0, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r11, &(0x7f0000000100), 0x0) setsockopt$inet_mreqsrc(r10, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmmsg(r5, 0x0, 0x0, 0x0) 5m49.697000438s ago: executing program 34 (id=313): r0 = syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x2, 0x638, &(0x7f0000000ac0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x105, 0x7) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141e677e53cc188dc41581142590d4e071303f4ae95293dd9ce1c8236b03632dab46a43356a89c37f32b221bf1e7310797dd1db083ffc38c12923ab42348585af679581ab62438f23ef4adeb46294", @ANYRES64=r1, @ANYRESHEX, @ANYRESOCT, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r1, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x4412, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$hfsplus(&(0x7f0000000300), &(0x7f0000000240)='./file1\x00', 0x3a01809, &(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYRESOCT=r4, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES64=r3, @ANYBLOB="ba7e58f2b58c695d4595bc92e0da2d5ded2f266f85f01c318857ae510b6583355182de9f860133cec5c896767b18569cc10c7090e070fadd257d7a", @ANYRES64=0x0, @ANYRESDEC=r5, @ANYRES8=r2], 0x1, 0x70d, &(0x7f0000002480)="$eJzs3U9sHFcZAPBv1mt7N1Udt03TIFWqaaEgLPLPciGnBoRQkCqoggRnq3EaKxsn2C5ye8AuIHHlwBWpHMwFTiCEhIQUqXe4FW4WpwokLj0lPTBo/q1nHe96nci7Cfx+0WTezHvz5ptvZt54d7XaAP5vXZmP5t1oT8b8G5vZ8u7OQmd3Z+FWUW50ImI6IhoRzdpWyYcRl6OY4jPZiqqi335+sXLp6kef7H5cLDXLqRHFf+3+ATaHOYrtcoq5iJgo54+gp7+3Hq6/6b1i0s1MlrBXqsTBuE1GRNrjB6f3ag6STtQW+t7vwJMjKZ6bD5iNOBERreqBtl2sbow2uqEcaSzaPr44AAAA4LFx8t5WxGbMjDsOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJKUv/+flNP9qjwXSfX7/5+rNZ8aY6iDDY6sVRXuNkYRDAAAAAAAAAAcr5fuxW+upulMtZwm0fjeRLnQLufvxHosNyPOxmYsxUZsxFpciIjZWkdTm0sbG2sX4uV86dSnaZrGU8WWsdaz5cUDt7w4ZMDtRz1iAAAAAAAAAPif8vridD7/cVyJmXEHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdUnERDHLp1NVeTYazYhoRcRU1m474q9V+THSPOoGd48nDgAAABizyZ6lk/fiXmzGTLWcJvlr/tP56/5WvBOrsRErsRGdWI5r+XsBxav+xu7O1vzuzsKtbCq7/c7T3X6/9u+9ffx+5tCg8h6jeO/h4D2fyVu043qs5GvOxltxOzpxLRr5lpkzVTy1uGrez2JKXi+kaUwPk65r5Tw78p+X85FoH9ZgNs/IZDcj57PYkiKPzwzORP3sDGH/ni5Eo/vOz6n+e6rejEmnI4qkD9xL8p80LUonqjURT31rYM7z62XySAfzSPZn4mLt6js9OOcRX/jDb79/o7N680ayPT+yy+ihvHTw6ul/VGeoykRhO5ZjoZaJF4bOxPX1xzwTffW+09iI57vlK/HN+G7Mx1y8GWuxEj+MpdiI5ZiLb+SlpfJ6zv6fHZypy+W8uNnePCym6p6c2BfTZ08W80ExvZyf05lYiW/H7bgWy/Fa/u9iXIivxGIsxqXaGX5+iJG2UY609bv+j/2Df+WLZSEb+H62NwCO8O7uJ8vrM7W81sfc2byuvqaRD3iZZ4/wPBo8Nlb2HlnZmfhJ7R4cv24mWtF9SlTRPVdlYPLATPwqH1bWO6s3124s3dnXb7JdW/j8arf4avQe/iMMJEf+2GCw7Hp5tttt79WR1T33QN3f8nxNlZ+4FHW9T9ypiF+3u3WH3alT5d9wzaKjnidWVvdCRPyyjDary2RjeFZ3phZBu1l85rMcn6ZpWvy9BcBj78SXTky1/9X+S/uD9k/bN9pvtL4+/dXpF1tl7cSrjReT38UH8aM4/BU6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwqPV337u51Oksr+0rpGm61afqWArRjOhZ8+c/1drkvzUWEcN3mLW+3IjI1zSjLAyx+T8jolyzla85wk6LwvsPm4S/l+dkJAkfUEiGbtzqe/2UhdtPl4dzP03TkR9O9fNOR948LR3auNrDWM/X4YXqJ7IeqEqaEX22GvlQBIzYuY1bd86tv/vel1duLb29/Pby6qXFxUvnLy2+tnDu+kqnNe7wgGOUP+vzv3PGHQkAAAAAAAAAAAAwrOG+nJPcXIq9Lzz0b5we+N2VcR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GS7Mh/Nu5HEhfNnz2fLuzsLnWyqytl8Im95PyIaEZHMRSQfRlyOYorZWndJv/1sR1z96JPdj4ulZjnl7RvDR9vs33s+xVwZ7tzB7VoHrUy3+vWX5P3c6d/fkJJymuiuyRP34H5htP4bAAD//5XWBZo=") r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x68d44ab5e3377f89, &(0x7f00000002c0)={[{@quota}]}, 0xfb, 0x4a6, &(0x7f00000018c0)="$eJzs3M9vFFUcAPDv7LallR+tiCgIWkEj8UdLCyoHD2o08aCJiR7wWNuCyEINrQmQRosxeDQk3o1HE/8Cb16MejAmXjXxaEiI9kLxtGZ2Z+iy7Jbd0rLQ/XyS7c6bebPvvXnv7b6Z15kAutZw+ieJ2BIRf0TEYDV4Y4Th6tvS4vzktcX5ySTK5Xf+SSrxri7OT+ZR8/02Z4EDhYjC50lfo3Rnz50/OVEqTZ/JwqNzpz4anT13/rkTpyaOTx+fPj1+5MjhQ2MvvjD+/JqUMy3X1d2fzOzZ9cZ7l96aPHrp/Z+/S/O7c291e205bula0lK04fSo/VuuqN/2ZBt5vxdsrVlOejqYEdpSjIi0unor/X8wirFceYPx+mcdzRywrtLfpk3NNy+UgQ0siU7nAOiM/Ic+Pf/NX3do6HFXuPJKRH6BYmlxfnLpevl7opCt713H9Icj4ujCf1+nr2j3OgQAwCpUxjbPNhr/FWJn5b0617Etm0MZioj7I2J7RDwQETsi4sGIStyHIuLh6s7lwRbTH64L3zz+KVxumOc1ko7/XqoZ+y3VlD97Gypmoa2V8vcmx06Upg9mx+RA9G5Kw2MrpPHDa79/2Wxb7fgvfaXp52PBLAOXe+ou0E1NzE2s1UG4ciFid0+j8ifXZwLSFrArIna399Hb8oUTT3+7p1mkW5d/BWswz1T+JuKpav0vRF35c8nK85Oj/VGaPjiat4qb/fLbxbebpX9b5V8DV/Y9Ul1Yrv+6GDUNrVSaPjPbfhoX//yi6TnNatt/X/JuZc761w+q685OzM2dGYvoS96shPNzusr68eV9z07MDaThPH7a/g/sb9z/t2f7pPWfHqW0Ee+NiEcj4rEs749HxL6I2L9C+X969YkPVyh/Ekl0rv4vREw1/P673v6Hktr5+lUsFE/++H2zGfPW6v9wLFS+a6sq33+30GoGb/PwAQAAwD2hEBFbIimMVJeHt0ShMDJS/R/+HXFfoTQzO/fMsZmPT09V7xEYit5CfqVrsOZ66FiykH1iNTyeXSvOtx/Krht/VRyohEcmZ0pTHS47dLvNN/b/yPt/6u9ip3MHrDv3a0H3qu//hQ7lA7jzWvn9dy4AG9ON/b8//TPQqbwAd5bzf+hejfr/p3Vh43/YmG7u/381eGQdsBEZ/0P30v+he+n/0JXauZ0/Xm62qT8i2nksQH6zwOqfKtDf8h3+3bKQP/FiPdMaiPMn+7I1UehQSYttNbZyEnEX1M7tLqQ9Zq0+sKelvrP8DBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB72f8BAAD//y413HM=") sched_setscheduler(0x0, 0x2, 0x0) r9 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r6, 0x28f43000) syz_open_procfs(r9, &(0x7f0000000280)='net/hci\x00') setns(r8, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) connect$inet(r5, 0x0, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r11, &(0x7f0000000100), 0x0) setsockopt$inet_mreqsrc(r10, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmmsg(r5, 0x0, 0x0, 0x0) 57.088397307s ago: executing program 5 (id=1024): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_ATTR(r1, 0x0, 0x0) 56.735055014s ago: executing program 5 (id=1026): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x3}, 'syz1\x00', 0x33}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) 56.024346216s ago: executing program 5 (id=1030): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000000, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53.743557161s ago: executing program 5 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, 0x0, 0x42, 0xc0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000240)=""/244, 0xf4) 52.666189601s ago: executing program 5 (id=1035): syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 42.297748297s ago: executing program 5 (id=1056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mlockall(0x7) 29.079729864s ago: executing program 1 (id=1071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xd}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) 26.391105737s ago: executing program 35 (id=1056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mlockall(0x7) 20.128987195s ago: executing program 2 (id=1087): ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x3, 'hsr0\x00', {0x5}}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0xb7, 0x18, 0xd3, 0x40, 0x8ca, 0x2016, 0xf7ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x50, 0xf9, "", [{{0x9, 0x4, 0x4, 0x1, 0x0, 0xdc, 0xc2, 0x85, 0x9}}]}}]}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 19.914933545s ago: executing program 1 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_io_uring(0x191, &(0x7f00000000c0)={0x0, 0x30bc, 0x0, 0x2, 0x15d}, &(0x7f00000002c0), &(0x7f0000000280), &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) 16.039889573s ago: executing program 1 (id=1091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x5, 0x6, 0x3, 0x0, 0x7, 0x6, 0x9, 0x7f, 0x26, 0x4, 0xc2, 0x0, 0x0, 0x3, 0x9, 0xf7, 0x7, 0x7d, 0x7f, '\x00', 0x89, 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x1, 0x1000000000000, 0x3, 0x12, 0x0, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0x6, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.606980633s ago: executing program 2 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, 0x0, 0x42, 0xc0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000240)=""/244, 0xf4) 15.496155148s ago: executing program 1 (id=1093): socket$inet6(0xa, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./sys\x00', 0x102) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0), 0x0) 14.432592767s ago: executing program 2 (id=1094): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x58014}, 0x2000c450) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r1, 0x0, 0x2002) 12.507308855s ago: executing program 1 (id=1096): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') symlinkat(&(0x7f0000000840)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 11.504495091s ago: executing program 7 (id=1097): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) write$cgroup_pid(r1, &(0x7f0000000640), 0x15) 7.580202542s ago: executing program 2 (id=1101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_io_uring(0x191, &(0x7f00000000c0)={0x0, 0x30bc, 0x0, 0x2, 0x15d}, &(0x7f00000002c0), &(0x7f0000000280), &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) 5.87216174s ago: executing program 6 (id=1102): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x10082, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x102, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x400, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffefffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x4, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x3, 0xe, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x1, 0x5, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x1, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x2, 0x9c, 0x0, 0x2, 0x7f, 0x9, 0x5, 0x2, 0x5, 0x5, 0x5, 0x0, 0x9, 0x8, 0xe, 0x6, 0x8, 0x7, '\x00', 0x0, 0x3f92}) 3.977807317s ago: executing program 2 (id=1103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, 0x0, 0x42, 0xc0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000240)=""/244, 0xf4) 3.852260593s ago: executing program 7 (id=1104): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 2.711741196s ago: executing program 2 (id=1105): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010428bd70000100000000130000", @ANYRES32=0x0, @ANYBLOB="08000000000001002c00128009000100766c616e000000001c000280060001000200000006000100020000000600050088a8000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 2.660065958s ago: executing program 1 (id=1106): socket(0x2, 0xa, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2.476293676s ago: executing program 6 (id=1107): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) 2.431678728s ago: executing program 7 (id=1108): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x24d, &(0x7f0000000dc0)="$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") syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaac1aaaaaaaaaaaaaaaa88a80c40814f8a1ede4ccb036613006700000106"], 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}, {&(0x7f0000000600)=ANY=[], 0x290}], 0x2}, 0x200400d1) 2.139699502s ago: executing program 6 (id=1109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x0, 0x0, '\x00', 0x6}, {0x6, 0x8, 0x4, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x4, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0xf, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x2, 0xf6, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x40, 0xfa, '\x00', 0x5}, {0x1, 0x4, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xfa}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x4, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x89, 0x4}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.96017109s ago: executing program 7 (id=1110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='0x0200\n', 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0x0100\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0123456789', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='syzkaller\n', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000006c0)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(r3, &(0x7f0000000740)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000a40)='dummy_udc.0\n', 0xc) 1.574447118s ago: executing program 7 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='add testcell 127.0.0.1\n\x00', 0x17) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='testcell:127.0.0.1\n\x00', 0x13) close(r1) 1.487762312s ago: executing program 6 (id=1112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 1.179854065s ago: executing program 7 (id=1113): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) memfd_secret(0x0) close_range(r0, r1, 0x2) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 1.177310986s ago: executing program 6 (id=1114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, 0x0, 0x42, 0xc0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000240)=""/244, 0xf4) 0s ago: executing program 6 (id=1115): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0xfffffffd, 0x1f4, 0x0, r6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x100, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x14, 0x0, r0}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 6126] Cannot create hsr debugfs directory [ 394.887642][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 394.905429][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 394.940663][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 394.960612][ T5832] device veth0_macvtap entered promiscuous mode [ 394.973138][ T6171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.026089][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 395.060960][ T5832] device veth1_macvtap entered promiscuous mode [ 395.083682][ T6171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.153865][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.207414][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.239342][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 395.245637][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.272351][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.298855][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.335721][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.369085][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.399335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 395.432642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 395.459721][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.489618][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.519151][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.560123][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.584230][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.619103][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.663688][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.693981][ T6171] team0: Port device team_slave_0 added [ 395.730320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 395.768348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 395.792282][ T5832] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.827972][ T5832] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.848256][ T5832] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.871261][ T5832] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.910614][ T6171] team0: Port device team_slave_1 added [ 396.062153][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.079682][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.148764][ T6171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.215819][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.222799][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.287594][ T6171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.463165][ T6171] device hsr_slave_0 entered promiscuous mode [ 396.479846][ T6171] device hsr_slave_1 entered promiscuous mode [ 396.488199][ T6171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.499012][ T6171] Cannot create hsr debugfs directory [ 396.611809][ T5049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.655272][ T5049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.690990][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 396.781639][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.830214][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.937855][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 397.223708][ T6224] usb usb7: usbfs: process 6224 (syz.1.423) did not claim interface 0 before use [ 397.272006][ T6126] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 397.314619][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 398.268559][ T6229] "syz.6.287" (6229) uses obsolete ecb(arc4) skcipher [ 398.604903][ T6126] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 398.740194][ T6126] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 398.794599][ T5801] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 398.862100][ T6126] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 399.010086][ T5801] usb 3-1: unable to get BOS descriptor or descriptor too short [ 399.058470][ T5801] usb 3-1: not running at top speed; connect to a high speed hub [ 399.112695][ T5801] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.177946][ T5801] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.264407][ T5801] usb 3-1: New USB device found, idVendor=ff35, idProduct=0007, bcdDevice= 0.00 [ 399.303980][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.404316][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 399.565014][ T5801] usb 3-1: string descriptor 0 read error: -71 [ 399.608488][ T5801] usb 3-1: MIDIStreaming interface descriptor not found [ 399.623622][ T6234] loop1: detected capacity change from 0 to 32768 [ 399.755083][ T5801] usb 3-1: USB disconnect, device number 7 [ 399.870664][ T6250] udevd[6250]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.943045][ T6234] XFS (loop1): Mounting V5 Filesystem [ 400.143585][ T6234] XFS (loop1): Ending clean mount [ 400.173823][ T6171] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 400.376129][ T6126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.382960][ T6171] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 400.458364][ T6171] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 401.467390][ T4274] XFS (loop1): Unmounting Filesystem [ 401.564554][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 401.572211][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 401.636270][ T6171] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 401.700573][ T4583] device hsr_slave_0 left promiscuous mode [ 401.735147][ T4583] device hsr_slave_1 left promiscuous mode [ 401.775404][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.816431][ T4583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.834906][ T6263] md/raid:md0: not clean -- starting background reconstruction [ 401.891725][ T6263] md/raid:md0: device ram1 operational as raid disk 1 [ 401.904652][ T6263] md/raid:md0: device ram0 operational as raid disk 0 [ 401.918390][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.944390][ T4583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.990911][ T4583] device bridge_slave_1 left promiscuous mode [ 402.004123][ T6263] md/raid:md0: raid level 5 active with 2 out of 2 devices, algorithm 0 [ 402.024898][ T4583] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.045221][ T4583] device bridge_slave_0 left promiscuous mode [ 402.051386][ T4583] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.078961][ T6263] md/raid:md0: PPL space overlaps with data on ram1 [ 402.192421][ T4583] device veth1_macvtap left promiscuous mode [ 402.251685][ T4583] device veth0_macvtap left promiscuous mode [ 402.289290][ T4583] device veth1_vlan left promiscuous mode [ 402.319551][ T4583] device veth0_vlan left promiscuous mode [ 402.433324][ T6263] md/raid:md0: failed to run raid set. [ 402.471149][ T6269] Config c/1 of g1 needs at least one function. [ 402.484050][ T6263] md: pers->run() failed ... [ 402.520248][ T6269] udc dummy_udc.0: failed to start g1: -22 [ 402.555060][ T6269] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 402.599308][ T6269] UDC core: g1: couldn't find an available UDC or it's busy [ 404.812889][ T6280] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 404.835755][ T4363] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 405.043720][ T4363] usb 2-1: config index 0 descriptor too short (expected 897, got 27) [ 405.063412][ T4363] usb 2-1: config 2 has an invalid interface number: 1 but max is -1 [ 405.076559][ T4363] usb 2-1: config 2 has an invalid interface number: 1 but max is -1 [ 405.090074][ T4363] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 405.102474][ T4363] usb 2-1: config 2 has no interface number 0 [ 405.121601][ T4363] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 405.141981][ T4363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.152398][ T4363] usb 2-1: Product: syz [ 405.158791][ T4363] usb 2-1: Manufacturer: syz [ 405.163509][ T4363] usb 2-1: SerialNumber: syz [ 405.239448][ T4583] team0 (unregistering): Port device team_slave_1 removed [ 405.284145][ T4583] team0 (unregistering): Port device team_slave_0 removed [ 405.340437][ T4583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.391544][ T4363] cdc_ncm 2-1:2.1: CDC Union missing and no IAD found [ 405.402322][ T4363] cdc_ncm 2-1:2.1: bind() failure [ 405.410397][ T4363] usb 2-1: no audio or video endpoints found [ 405.433052][ T4363] usb 2-1: USB disconnect, device number 2 [ 405.453140][ T4583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.744287][ T4583] bond0 (unregistering): Released all slaves [ 405.818647][ T6126] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.952544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 405.994886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.714992][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.722102][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.865356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 406.907951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.008595][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.015741][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.040576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.159641][ T5948] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 407.177575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.198054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.212534][ T6293] loop6: detected capacity change from 0 to 512 [ 407.238159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.295504][ T6293] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 407.316483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.343493][ T6293] ext4 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.355117][ T5801] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 407.373546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 407.389217][ T5948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.418233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.441793][ T5948] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 407.473917][ T6293] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.433: bg 0: block 312: padding at end of block bitmap is not set [ 407.499686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 407.519276][ T5948] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 407.542102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.563689][ T5948] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.587479][ T5801] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 407.600321][ T6293] Quota error (device loop6): write_blk: dquota write failed [ 407.624603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 407.638701][ T5801] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 407.655007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 407.663051][ T6293] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 407.679411][ T5948] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 407.691326][ T5801] usb 2-1: config 0 has no interface number 0 [ 407.705924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.720493][ T6293] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 407.737663][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.746160][ T5801] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 407.766096][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 407.789959][ T6293] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.433: Failed to acquire dquot type 1 [ 407.818677][ T5801] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.886776][ T5801] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 407.927958][ T6171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.950745][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.008593][ T6171] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.019300][ T5948] gud 3-1:1.0: Protocol version 3 is not supported [ 408.039620][ T5801] usb 2-1: config 0 descriptor?? [ 408.115592][ T5832] EXT4-fs (loop6): unmounting filesystem. [ 408.138369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 408.185199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.278159][ T14] usb 3-1: USB disconnect, device number 8 [ 408.321050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.388522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.417036][ T6306] loop6: detected capacity change from 0 to 128 [ 408.453880][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.461030][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.503586][ T6306] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.528794][ T5801] usb 2-1: USB disconnect, device number 3 [ 408.583346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.638570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.669331][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.676537][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.775075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.782838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 408.952228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 408.966835][ T6313] loop6: detected capacity change from 0 to 512 [ 409.017321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 409.031413][ T6313] EXT4-fs: Ignoring removed bh option [ 409.106567][ T6313] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.129017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 409.161475][ T6313] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 409.205553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 409.258030][ T6313] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 409.272206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 409.305844][ T6313] EXT4-fs (loop6): orphan cleanup on readonly fs [ 409.354800][ T5801] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 409.362824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 409.398190][ T6313] Quota error (device loop6): v2_read_file_info: Free block number 117440512 out of range (1, 6). [ 409.430980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 409.486202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 409.498444][ T6313] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 409.536501][ T6171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.567325][ T6313] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 409.575998][ T5801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.061852][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 411.207214][ T6313] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.435: Invalid block bitmap block 0 in block_group 0 [ 411.221694][ T5801] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 411.253173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 411.281766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 411.293977][ T5801] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 411.341364][ T6313] EXT4-fs (loop6): Remounting filesystem read-only [ 411.352811][ T6126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.381885][ T5801] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 411.412129][ T6313] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 411.434943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.474499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.536476][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.588377][ T6313] EXT4-fs (loop6): Remounting filesystem read-only [ 411.626852][ T6313] EXT4-fs (loop6): 1 orphan inode deleted [ 411.643641][ T5801] usb 3-1: config 0 descriptor?? [ 411.703174][ T6313] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 413.666994][ T4360] usb 3-1: USB disconnect, device number 9 [ 413.753467][ T6339] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 413.777407][ T5832] EXT4-fs (loop6): unmounting filesystem. [ 414.467436][ T6358] netlink: 64 bytes leftover after parsing attributes in process `syz.1.444'. [ 414.495539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 414.503033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.642224][ T6171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.998051][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 415.236258][ T14] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 415.326703][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 415.377115][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 415.466020][ T14] usb 7-1: Using ep0 maxpacket: 16 [ 415.478555][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 415.511075][ T14] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 415.533103][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 415.563159][ T14] usb 7-1: config 0 has no interface number 0 [ 415.591615][ T6126] device veth0_vlan entered promiscuous mode [ 415.607113][ T14] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 415.627763][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 415.654414][ T5985] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 415.667607][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 415.686685][ T14] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 415.710640][ T6126] device veth1_vlan entered promiscuous mode [ 415.729895][ T14] usb 7-1: config 0 interface 41 has no altsetting 0 [ 415.768550][ T14] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 415.813492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 415.830473][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.849412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 415.871190][ T14] usb 7-1: Product: syz [ 415.876270][ T5985] usb 3-1: Using ep0 maxpacket: 16 [ 415.892856][ T5985] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 415.909666][ T6126] device veth0_macvtap entered promiscuous mode [ 415.921200][ T14] usb 7-1: Manufacturer: syz [ 415.939876][ T14] usb 7-1: SerialNumber: syz [ 415.953856][ T6126] device veth1_macvtap entered promiscuous mode [ 415.963726][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.988012][ T14] usb 7-1: config 0 descriptor?? [ 416.012707][ T5985] usb 3-1: Product: syz [ 416.019286][ T6370] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 416.053036][ T5985] usb 3-1: Manufacturer: syz [ 416.064031][ T6370] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 416.079086][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.099618][ T5985] usb 3-1: SerialNumber: syz [ 416.132128][ T5985] r8152-cfgselector 3-1: config 0 descriptor?? [ 416.156430][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.183531][ T6388] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 416.225000][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.297518][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.343921][ T6370] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 416.368095][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.384008][ T6370] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 416.399663][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.433617][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.508977][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 416.529903][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 416.541661][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 416.552058][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 416.565704][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.586488][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.606593][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.623923][ T14] sr9700 7-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 416.633492][ T5985] r8152-cfgselector 3-1: Unknown version 0x0000 [ 416.660415][ T5985] r8152-cfgselector 3-1: USB disconnect, device number 10 [ 416.691594][ T14] usb 7-1: USB disconnect, device number 2 [ 416.697878][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.772258][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.800931][ T6396] loop1: detected capacity change from 0 to 256 [ 416.809922][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.845447][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.893014][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 416.932331][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 416.965303][ T6126] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.974008][ T6126] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.031596][ T6126] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.043196][ T6126] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.070865][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 417.082202][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 417.117782][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 417.158113][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.244938][ T6171] device veth0_vlan entered promiscuous mode [ 417.266434][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 417.321890][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.371633][ T6171] device veth1_vlan entered promiscuous mode [ 417.409224][ T6398] loop1: detected capacity change from 0 to 2048 [ 417.428201][ T6402] loop6: detected capacity change from 0 to 512 [ 417.526118][ T6398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 417.550091][ T5049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.571866][ T6402] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 417.618613][ T5049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.660064][ T6398] EXT4-fs error (device loop1): ext4_ext_precache:627: inode #2: comm syz.1.463: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 417.708193][ T6171] device veth0_macvtap entered promiscuous mode [ 417.757183][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 417.782410][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 417.800204][ T5832] EXT4-fs (loop6): unmounting filesystem. [ 417.818351][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 417.908982][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 417.962554][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 417.973243][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.994287][ T6413] loop6: detected capacity change from 0 to 256 [ 418.049776][ T6171] device veth1_macvtap entered promiscuous mode [ 418.099178][ T6412] loop2: detected capacity change from 0 to 2048 [ 418.117359][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 418.131702][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.160159][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 418.191470][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.285178][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 418.333184][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.359588][ T6416] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 418.420303][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.511180][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.564131][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.587139][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.602094][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.618420][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.629524][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.693045][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.751422][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 418.814712][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 418.874490][ T5985] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 420.045642][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.561364][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.834856][ T5985] usb 2-1: Using ep0 maxpacket: 8 [ 421.493427][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.426077][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.481171][ T5985] usb 2-1: device descriptor read/all, error -71 [ 422.744380][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.854478][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.937931][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.960698][ T6441] loop6: detected capacity change from 0 to 1024 [ 422.991227][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.075682][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.162056][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 423.197508][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.259404][ T6445] Config c/1 of g1 needs at least one function. [ 423.290146][ T6171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.357261][ T6445] udc dummy_udc.0: failed to start g1: -22 [ 423.365255][ T6171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.402690][ T6445] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 423.424220][ T6171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.449789][ T6445] UDC core: g1: couldn't find an available UDC or it's busy [ 423.470252][ T6171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.926622][ T5049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.985613][ T5049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.993151][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 424.063527][ T4583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.140232][ T4583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.210889][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 424.300602][ T6455] loop7: detected capacity change from 0 to 1024 [ 424.639125][ T6457] loop2: detected capacity change from 0 to 512 [ 426.445978][ T6457] EXT4-fs: Ignoring removed nobh option [ 426.521286][ T6459] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 426.553077][ T6457] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 426.681901][ T6457] EXT4-fs (loop2): 1 truncate cleaned up [ 426.748283][ T6457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 427.224517][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 428.850047][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 429.051215][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.169809][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.284805][ T6476] loop6: detected capacity change from 0 to 256 [ 429.341728][ T14] usb 6-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 429.371885][ T6476] exfat: Deprecated parameter 'utf8' [ 429.406780][ T6480] Bluetooth: MGMT ver 1.22 [ 429.458786][ T6476] exfat: Deprecated parameter 'namecase' [ 429.469039][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.525156][ T6476] exfat: Deprecated parameter 'utf8' [ 429.584842][ T14] usb 6-1: config 0 descriptor?? [ 429.646627][ T6476] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 429.682191][ T6482] Config c/1 of g1 needs at least one function. [ 429.732266][ T6482] udc dummy_udc.0: failed to start g1: -22 [ 429.790779][ T6482] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 429.853297][ T6482] UDC core: g1: couldn't find an available UDC or it's busy [ 429.864455][ T5986] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 430.039929][ T14] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x3 [ 430.084223][ T14] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x6 [ 430.094870][ T5986] usb 3-1: Using ep0 maxpacket: 16 [ 430.116146][ T5986] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 430.138932][ T14] hid-rmi 0003:17EF:6085.0001: report_id 0 is invalid [ 430.161138][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.180349][ T14] hid-rmi 0003:17EF:6085.0001: item 0 0 1 8 parsing failed [ 430.202878][ T5986] usb 3-1: Product: syz [ 430.218387][ T14] hid-rmi 0003:17EF:6085.0001: parse failed [ 430.239208][ T5986] usb 3-1: Manufacturer: syz [ 430.255525][ T14] hid-rmi: probe of 0003:17EF:6085.0001 failed with error -22 [ 430.268097][ T5986] usb 3-1: SerialNumber: syz [ 430.308621][ T5986] usb 3-1: config 0 descriptor?? [ 430.355554][ T14] usb 6-1: USB disconnect, device number 2 [ 430.588420][ T5986] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 430.634645][ T5986] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 430.733305][ T6500] loop6: detected capacity change from 0 to 256 [ 430.813531][ T5986] usb 3-1: USB disconnect, device number 11 [ 430.820482][ T6500] FAT-fs (loop6): "posix" option is obsolete, not supported now [ 434.837255][ T6518] loop7: detected capacity change from 0 to 64 [ 434.863952][ T6522] loop1: detected capacity change from 0 to 128 [ 436.785031][ T6527] Config c/1 of g1 needs at least one function. [ 436.791421][ T6527] udc dummy_udc.0: failed to start g1: -22 [ 436.930045][ T6527] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 437.075428][ T6527] UDC core: g1: couldn't find an available UDC or it's busy [ 437.659259][ T6548] Config c/1 of g1 needs at least one function. [ 437.719561][ T6548] udc dummy_udc.0: failed to start g1: -22 [ 437.780776][ T6548] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 437.849392][ T6548] UDC core: g1: couldn't find an available UDC or it's busy [ 438.412299][ T6554] loop7: detected capacity change from 0 to 4096 [ 438.430792][ T6535] loop6: detected capacity change from 0 to 32768 [ 438.500618][ T6539] loop2: detected capacity change from 0 to 32768 [ 438.533681][ T6554] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 438.559831][ T6540] loop1: detected capacity change from 0 to 32768 [ 438.627511][ T6535] XFS (loop6): Mounting V5 Filesystem [ 438.830952][ T6535] XFS (loop6): Ending clean mount [ 438.880653][ T6535] XFS (loop6): Quotacheck needed: Please wait. [ 439.193041][ T6535] XFS (loop6): Quotacheck: Done. [ 439.642065][ T5832] XFS (loop6): Unmounting Filesystem [ 439.658230][ T6579] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 439.877662][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.884009][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.038102][ T6583] Config c/1 of g1 needs at least one function. [ 440.099902][ T6583] udc dummy_udc.0: failed to start g1: -22 [ 440.175750][ T6583] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 440.231569][ T6583] UDC core: g1: couldn't find an available UDC or it's busy [ 440.297331][ T6587] Config c/1 of g1 needs at least one function. [ 440.347777][ T6587] udc dummy_udc.0: failed to start g1: -22 [ 440.398712][ T6587] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 440.417555][ T4363] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 440.480863][ T6587] UDC core: g1: couldn't find an available UDC or it's busy [ 440.621402][ T6591] Config c/1 of g1 needs at least one function. [ 440.644503][ T4363] usb 8-1: Using ep0 maxpacket: 16 [ 440.672919][ T4363] usb 8-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30 [ 440.698222][ T6591] udc dummy_udc.0: failed to start g1: -22 [ 440.753623][ T6591] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 440.773010][ T4363] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.820564][ T6591] UDC core: g1: couldn't find an available UDC or it's busy [ 441.843730][ T4363] usb 8-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 442.686778][ T4363] usb 8-1: config 0 interface 0 has no altsetting 0 [ 442.730144][ T4363] usb 8-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 442.801992][ T4363] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.851849][ T4363] usb 8-1: config 0 descriptor?? [ 443.120712][ T6607] support for the xor transformation has been removed. [ 443.164402][ T5948] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 443.196466][ T4363] usbhid 8-1:0.0: can't add hid device: -71 [ 443.243190][ T4363] usbhid: probe of 8-1:0.0 failed with error -71 [ 443.310413][ T4363] usb 8-1: USB disconnect, device number 2 [ 443.408059][ T5948] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.475821][ T5948] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.493481][ T6615] loop1: detected capacity change from 0 to 64 [ 443.569387][ T6615] MINIX-fs: mounting file system with errors, running fsck is recommended [ 443.583559][ T5948] usb 7-1: config 0 interface 0 has no altsetting 0 [ 443.621823][ T5948] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 443.683881][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.740861][ T5948] usb 7-1: config 0 descriptor?? [ 443.796340][ T6617] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 444.189189][ T5948] hid-multitouch 0003:0EEF:72C4.0002: unbalanced collection at end of report description [ 444.275049][ T5948] hid-multitouch: probe of 0003:0EEF:72C4.0002 failed with error -22 [ 444.296951][ T6624] Config c/1 of g1 needs at least one function. [ 444.324139][ T6624] udc dummy_udc.0: failed to start g1: -22 [ 444.343771][ T6626] loop7: detected capacity change from 0 to 2048 [ 444.385471][ T126] usb 7-1: USB disconnect, device number 3 [ 444.398285][ T6624] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 444.448962][ T6626] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 444.472173][ T6624] UDC core: g1: couldn't find an available UDC or it's busy [ 444.506574][ T5948] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 444.555784][ T6626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.744438][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 444.763753][ T49] Bluetooth: hci1: Unknown advertising packet type: 0x30 [ 444.763821][ T49] Bluetooth: hci1: Malformed LE Event: 0x0d [ 444.786409][ T5948] usb 2-1: unable to get BOS descriptor or descriptor too short [ 444.857041][ T5948] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 444.869316][ T6630] loop5: detected capacity change from 0 to 256 [ 444.940244][ T5948] usb 2-1: can't read configurations, error -71 [ 445.003821][ T6630] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 447.001789][ T6639] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 447.404140][ T6648] Config c/1 of g1 needs at least one function. [ 447.458859][ T6648] udc dummy_udc.0: failed to start g1: -22 [ 447.503401][ T6648] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 447.518113][ T4360] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 447.568543][ T6648] UDC core: g1: couldn't find an available UDC or it's busy [ 447.737781][ T4360] usb 2-1: Using ep0 maxpacket: 16 [ 447.771403][ T4360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.871043][ T4360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.942313][ T4360] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.046484][ T4360] usb 2-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.00 [ 448.091247][ T6653] loop6: detected capacity change from 0 to 4096 [ 448.119969][ T4360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.184868][ T4360] usb 2-1: config 0 descriptor?? [ 448.200107][ T6653] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 448.541704][ T6644] loop2: detected capacity change from 0 to 32768 [ 448.681316][ T4360] input: HID 04f2:0618 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F2:0618.0003/input/input7 [ 448.697752][ T6644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.530 (6644) [ 448.752878][ T6646] loop5: detected capacity change from 0 to 32768 [ 448.854933][ T6644] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 448.880546][ T6646] XFS (loop5): Mounting V5 Filesystem [ 448.917071][ T4360] topseed 0003:04F2:0618.0003: input,hidraw0: USB HID v0.05 Joystick [HID 04f2:0618] on usb-dummy_hcd.1-1/input0 [ 448.980805][ T6644] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 449.034436][ T6644] BTRFS info (device loop2): turning on sync discard [ 449.092011][ T4360] usb 2-1: USB disconnect, device number 8 [ 449.165200][ T6644] BTRFS info (device loop2): using free space tree [ 449.285235][ T6646] XFS (loop5): Ending clean mount [ 449.458385][ T6644] BTRFS info (device loop2): enabling ssd optimizations [ 449.581122][ T6171] XFS (loop5): Unmounting Filesystem [ 449.768630][ T6671] fido_id[6671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 450.350553][ T4275] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 450.425521][ T6698] Config c/1 of g1 needs at least one function. [ 450.431858][ T6698] udc dummy_udc.0: failed to start g1: -22 [ 450.445126][ T6700] loop1: detected capacity change from 0 to 512 [ 450.514934][ T6700] EXT4-fs: Ignoring removed mblk_io_submit option [ 450.695763][ T6700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 450.710810][ T6698] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 450.778763][ T6700] ext4 filesystem being mounted at /156/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.046411][ T6698] UDC core: g1: couldn't find an available UDC or it's busy [ 451.142963][ T6700] EXT4-fs warning (device loop1): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 451.269153][ T6669] loop6: detected capacity change from 0 to 32768 [ 451.648729][ T6708] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 451.661062][ T6669] XFS (loop6): Mounting V5 Filesystem [ 451.681289][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 451.863534][ T6669] XFS (loop6): Ending clean mount [ 452.151401][ T5832] XFS (loop6): Unmounting Filesystem [ 454.036615][ T6731] Config c/1 of g1 needs at least one function. [ 454.111288][ T6731] udc dummy_udc.0: failed to start g1: -22 [ 454.162848][ T6731] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 454.230925][ T6731] UDC core: g1: couldn't find an available UDC or it's busy [ 454.598115][ T6746] loop5: detected capacity change from 0 to 2048 [ 454.720082][ T6746] NILFS (loop5): invalid segment: Magic number mismatch [ 454.808037][ T6746] NILFS (loop5): trying rollback from an earlier position [ 454.941977][ T6746] NILFS (loop5): recovery complete [ 455.015844][ T6752] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 455.095828][ T6753] loop2: detected capacity change from 0 to 16 [ 455.175463][ T6753] erofs: (device loop2): mounted with root inode @ nid 36. [ 455.609414][ T6760] Config c/1 of g1 needs at least one function. [ 455.670631][ T6760] udc dummy_udc.0: failed to start g1: -22 [ 455.734631][ T6760] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 455.974489][ T6760] UDC core: g1: couldn't find an available UDC or it's busy [ 456.019847][ T6766] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 456.102096][ T6743] loop1: detected capacity change from 0 to 32768 [ 456.235231][ T6743] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.545 (6743) [ 456.307490][ T6772] loop6: detected capacity change from 0 to 256 [ 456.376224][ T6772] exfat: Deprecated parameter 'namecase' [ 456.455895][ T6743] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 456.505566][ T6772] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 456.587730][ T6743] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 456.678089][ T6743] BTRFS info (device loop1): using free space tree [ 456.984523][ T6743] BTRFS info (device loop1): enabling ssd optimizations [ 457.376886][ T6805] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 457.546628][ T6801] loop6: detected capacity change from 0 to 4096 [ 457.743619][ T4274] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 457.806372][ T6801] ntfs: volume version 3.1. [ 458.074357][ T5985] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 458.315781][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 458.384774][ T5985] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 458.468661][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 458.528554][ T5985] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 458.600191][ T5985] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 458.650549][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.693561][ T5985] usb 3-1: config 0 descriptor?? [ 458.929232][ T5985] hdpvr 3-1:0.0: firmware version 0x0 dated [ 458.941362][ T5985] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 459.320348][ T6822] Illegal XDP return value 4294967262 on prog (id 15) dev N/A, expect packet loss! [ 459.481401][ T5985] hdpvr 3-1:0.0: Could not setup controls [ 459.556856][ T5985] hdpvr 3-1:0.0: registering videodev failed [ 459.661873][ T5985] hdpvr: probe of 3-1:0.0 failed with error -71 [ 459.735275][ T5985] usb 3-1: USB disconnect, device number 12 [ 460.048498][ T6838] loop5: detected capacity change from 0 to 512 [ 460.226542][ T6838] Quota error (device loop5): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 460.294844][ T6848] loop1: detected capacity change from 0 to 128 [ 460.307765][ T6838] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 460.389398][ T6838] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.567: Failed to acquire dquot type 1 [ 460.414434][ T5945] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 460.427905][ T6848] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 460.520370][ T6848] hpfs: filesystem error: improperly stopped [ 460.545861][ T6838] EXT4-fs (loop5): 1 truncate cleaned up [ 460.564575][ T6848] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 460.603290][ T6852] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 460.627143][ T6838] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 460.644369][ T5945] usb 8-1: Using ep0 maxpacket: 16 [ 460.661239][ T5945] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.688875][ T6848] hpfs: You really don't want any checks? You are crazy... [ 460.712853][ T6838] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.757348][ T6848] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 460.765554][ T5945] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.800954][ T6848] hpfs: code page support is disabled [ 460.824406][ T5945] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 460.855735][ T6848] hpfs: hpfs_map_4sectors(): unaligned read [ 460.911337][ T6848] hpfs: hpfs_map_4sectors(): unaligned read [ 460.943211][ T5945] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 460.963793][ T6848] hpfs: filesystem error: unable to find root dir [ 460.980860][ T6838] EXT4-fs: Ignoring sb option on remount [ 460.997107][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 461.006834][ T5945] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.028802][ T6838] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 461.051622][ T6848] hpfs: hpfs_map_4sectors(): unaligned read [ 461.078854][ T5945] usb 8-1: config 0 descriptor?? [ 461.098747][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 461.118064][ T6838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 461.208023][ T6838] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 461.297171][ T6838] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 461.558309][ T6171] EXT4-fs (loop5): unmounting filesystem. [ 461.589071][ T5945] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0004/input/input8 [ 461.707367][ T5945] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 461.879484][ T5945] usb 8-1: USB disconnect, device number 3 [ 462.294426][ T5985] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 462.309898][ T6874] fido_id[6874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 462.372590][ T6885] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 462.468142][ T6887] Dead loop on virtual device ip6_vti0, fix it urgently! [ 462.535711][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 462.617421][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.687505][ T5985] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.729461][ T6894] Config c/1 of g1 needs at least one function. [ 462.787141][ T6894] udc dummy_udc.0: failed to start g1: -22 [ 462.793076][ T5985] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 462.827669][ T6894] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 462.843874][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.878666][ T6894] UDC core: g1: couldn't find an available UDC or it's busy [ 462.918901][ T5985] usb 6-1: config 0 descriptor?? [ 463.341374][ T5985] input: HID 05ac:0324 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:0324.0005/input/input9 [ 463.473571][ T6907] loop2: detected capacity change from 0 to 512 [ 463.487319][ T5985] magicmouse 0003:05AC:0324.0005: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:0324] on usb-dummy_hcd.5-1/input0 [ 463.574452][ T126] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 463.595663][ T6907] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 463.632289][ T5985] usb 6-1: USB disconnect, device number 3 [ 463.705285][ T6907] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 463.814512][ T6907] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.589: Failed to acquire dquot type 1 [ 463.854560][ T126] usb 7-1: Using ep0 maxpacket: 16 [ 463.882166][ T126] usb 7-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 463.919906][ T6907] EXT4-fs (loop2): 1 truncate cleaned up [ 463.951676][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.962899][ T6907] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 464.021874][ T6913] fido_id[6913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 464.042864][ T126] usb 7-1: Product: syz [ 464.052912][ T6907] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.087227][ T126] usb 7-1: Manufacturer: syz [ 464.143475][ T126] usb 7-1: SerialNumber: syz [ 464.175610][ T126] usb 7-1: config 0 descriptor?? [ 464.417156][ T6907] EXT4-fs: Ignoring sb option on remount [ 464.462595][ T126] usb 7-1: Found UVC 0.00 device syz (046d:0721) [ 464.470007][ T6907] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 464.510124][ T126] usb 7-1: No valid video chain found. [ 464.548068][ T6907] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 464.586901][ T6907] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 464.623118][ T6925] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 464.675395][ T6907] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 464.693116][ T5945] usb 7-1: USB disconnect, device number 4 [ 464.709214][ T5985] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 464.813803][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 464.827239][ T126] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 464.914686][ T5985] usb 8-1: Using ep0 maxpacket: 16 [ 464.939509][ T5985] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 465.031071][ T5985] usb 8-1: config 0 interface 0 has no altsetting 0 [ 465.041756][ T126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.641087][ T5985] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 466.661207][ T126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.733113][ T5985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.746406][ T126] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 466.791344][ T5985] usb 8-1: config 0 descriptor?? [ 466.812490][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.887026][ T126] usb 6-1: config 0 descriptor?? [ 467.248260][ T5985] apple 0003:05AC:0292.0006: ignoring exceeding usage max [ 467.282716][ T5985] apple 0003:05AC:0292.0006: unknown main item tag 0x6 [ 467.313813][ T5985] apple 0003:05AC:0292.0006: unknown main item tag 0x0 [ 467.339995][ T126] pyra 0003:1E7D:2CF6.0007: unknown global tag 0xd [ 467.357625][ T5985] apple 0003:05AC:0292.0006: unknown main item tag 0x0 [ 467.371032][ T6953] Config c/1 of g1 needs at least one function. [ 467.384177][ T126] pyra 0003:1E7D:2CF6.0007: item 0 2 1 13 parsing failed [ 467.402735][ T5985] apple 0003:05AC:0292.0006: unknown main item tag 0x0 [ 467.418849][ T6953] udc dummy_udc.0: failed to start g1: -22 [ 467.430917][ T126] pyra 0003:1E7D:2CF6.0007: parse failed [ 467.444178][ T6953] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 467.457283][ T5985] apple 0003:05AC:0292.0006: unknown main item tag 0x0 [ 467.467559][ T126] pyra: probe of 0003:1E7D:2CF6.0007 failed with error -22 [ 467.483196][ T5985] apple 0003:05AC:0292.0006: unknown main item tag 0x0 [ 467.492731][ T6953] UDC core: g1: couldn't find an available UDC or it's busy [ 467.510803][ T5985] apple 0003:05AC:0292.0006: unknown main item tag 0x0 [ 467.556736][ T5985] apple 0003:05AC:0292.0006: unknown main item tag 0x0 [ 467.592099][ T5985] apple 0003:05AC:0292.0006: unknown main item tag 0x0 [ 467.626291][ T5985] apple 0003:05AC:0292.0006: unknown main item tag 0x0 [ 467.665879][ T5985] apple 0003:05AC:0292.0006: hidraw0: USB HID v0.45 Device [HID 05ac:0292] on usb-dummy_hcd.7-1/input0 [ 467.729089][ T5985] usb 8-1: USB disconnect, device number 4 [ 467.789461][ T6958] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 467.803626][ T126] usb 6-1: USB disconnect, device number 4 [ 468.142891][ T6964] loop1: detected capacity change from 0 to 512 [ 468.204466][ T5945] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 468.238418][ T6964] EXT4-fs: Ignoring removed i_version option [ 468.318517][ T6961] fido_id[6961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 468.342196][ T6964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 468.363804][ T6966] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 468.446464][ T5945] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 468.473524][ T6964] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.604: invalid indirect mapped block 4294967295 (level 1) [ 468.514636][ T5945] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 468.589462][ T5945] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 468.620408][ T6964] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.604: invalid indirect mapped block 4294967295 (level 1) [ 468.676057][ T5945] usb 7-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 468.721570][ T6964] EXT4-fs (loop1): 2 truncates cleaned up [ 468.731767][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.750224][ T6964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 468.784668][ T6962] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 468.798132][ T6976] Config c/1 of g1 needs at least one function. [ 468.884473][ T6976] udc dummy_udc.0: failed to start g1: -22 [ 468.930899][ T6976] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 468.989394][ T6976] UDC core: g1: couldn't find an available UDC or it's busy [ 469.055345][ T126] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 469.090729][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 469.119721][ T4291] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 469.127028][ T4291] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 469.234430][ T4291] Bluetooth: hci0: command 0x0405 tx timeout [ 469.240547][ T5945] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 469.290933][ T126] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 469.321296][ T49] Bluetooth: hci4: Reading Intel version command failed (-71) [ 469.350302][ T126] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 469.390311][ T126] usb 3-1: Product: syz [ 469.444391][ T5945] usb 8-1: Using ep0 maxpacket: 32 [ 471.022700][ T5945] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.034251][ T126] usb 3-1: Manufacturer: syz [ 471.039544][ T126] usb 3-1: SerialNumber: syz [ 471.096494][ T5945] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 471.119869][ T126] usb 3-1: config 0 descriptor?? [ 471.183595][ T5945] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.241780][ T5945] usb 8-1: config 0 descriptor?? [ 471.290749][ T6990] Config c/1 of g1 needs at least one function. [ 471.300026][ T5945] hub 8-1:0.0: bad descriptor, ignoring hub [ 471.327667][ T5945] hub: probe of 8-1:0.0 failed with error -5 [ 471.333952][ T6990] udc dummy_udc.0: failed to start g1: -22 [ 471.384183][ T6990] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 471.401403][ T5945] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 471.428704][ T126] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 471.469275][ T6990] UDC core: g1: couldn't find an available UDC or it's busy [ 471.507952][ T126] peak_usb 3-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 471.535766][ T5945] usb 8-1: USB disconnect, device number 5 [ 471.653370][ T5985] usb 7-1: USB disconnect, device number 5 [ 471.688763][ T6986] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 471.925666][ T126] peak_usb: probe of 3-1:0.0 failed with error -71 [ 471.944539][ T5945] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 471.992769][ T126] usb 3-1: USB disconnect, device number 13 [ 472.164423][ T5945] usb 8-1: Using ep0 maxpacket: 32 [ 472.204249][ T5945] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.267730][ T5945] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 472.305744][ T5945] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.378750][ T5945] usb 8-1: config 0 descriptor?? [ 472.405760][ T126] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 472.416427][ T5945] hub 8-1:0.0: bad descriptor, ignoring hub [ 472.422343][ T5945] hub: probe of 8-1:0.0 failed with error -5 [ 472.505363][ T5945] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 472.638913][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.674567][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 472.724504][ T126] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 472.839041][ T126] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 472.862788][ T7016] Config c/1 of g1 needs at least one function. [ 472.897049][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.907933][ T7016] udc dummy_udc.0: failed to start g1: -22 [ 472.935173][ T7016] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 472.996583][ T7016] UDC core: g1: couldn't find an available UDC or it's busy [ 473.075034][ T5945] usb 8-1: USB disconnect, device number 6 [ 473.210184][ T126] dvbdev: DVB: registering new adapter (DEC2000-t) [ 473.275153][ T5945] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 473.292281][ T126] usb 3-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 473.410268][ T126] ttusb_dec_send_command: command bulk message failed: error -71 [ 473.472197][ T126] usb 3-1: USB disconnect, device number 14 [ 473.506165][ T5945] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 473.571760][ T5945] usb 6-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00 [ 475.334390][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.408220][ T5945] usb 6-1: Product: syz [ 475.434425][ T5945] usb 6-1: Manufacturer: syz [ 475.459355][ T5945] usb 6-1: SerialNumber: syz [ 475.503210][ T5945] kaweth 6-1:1.0: couldn't find required endpoints [ 475.571869][ T7032] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 475.647079][ T5949] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 475.856263][ T5949] usb 7-1: Using ep0 maxpacket: 8 [ 475.872403][ T5949] usb 7-1: unable to get BOS descriptor or descriptor too short [ 475.903485][ T5949] usb 7-1: config 4 interface 0 has no altsetting 0 [ 475.911676][ T126] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 475.942507][ T5949] usb 7-1: string descriptor 0 read error: -22 [ 475.969036][ T5949] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 476.008742][ T5949] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 476.050466][ T5949] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 476.086821][ T5945] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 476.125800][ T126] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.142532][ T5949] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 476.173965][ T126] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.196484][ T5949] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 476.227524][ T5949] usb 7-1: media controller created [ 476.244243][ T126] usb 3-1: config 0 interface 0 has no altsetting 0 [ 476.278173][ T126] usb 3-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 476.308014][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 476.320378][ T5945] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.344372][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.375007][ T5945] usb 2-1: config 0 interface 0 has no altsetting 0 [ 476.386537][ T7035] loop7: detected capacity change from 0 to 32768 [ 476.402628][ T126] usb 3-1: config 0 descriptor?? [ 476.413096][ T5949] zl10353_read_register: readreg error (reg=127, ret==0) [ 476.430537][ T5945] usb 2-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 476.485170][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.549030][ T5945] usb 2-1: config 0 descriptor?? [ 476.608649][ T5949] usb 7-1: USB disconnect, device number 6 [ 476.698499][ T7035] XFS (loop7): Mounting V5 Filesystem [ 476.785959][ T7035] XFS (loop7): Ending clean mount [ 476.861249][ T126] lg-g15 0003:046D:0A07.0008: unknown main item tag 0x2 [ 476.944141][ T126] lg-g15 0003:046D:0A07.0008: unknown main item tag 0x1 [ 477.008138][ T126] lg-g15 0003:046D:0A07.0008: unknown main item tag 0x3 [ 477.020064][ T5945] input: HID 046d:c082 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C082.0009/input/input10 [ 477.079706][ T126] lg-g15 0003:046D:0A07.0008: hidraw0: USB HID v11.06 Device [HID 046d:0a07] on usb-dummy_hcd.2-1/input0 [ 478.855522][ T5945] logitech-hidpp-device 0003:046D:C082.0009: input,hidraw1: USB HID v0.05 Joystick [HID 046d:c082] on usb-dummy_hcd.1-1/input0 [ 478.916443][ T126] usb 3-1: USB disconnect, device number 15 [ 479.023150][ T5945] usb 2-1: USB disconnect, device number 9 [ 479.132424][ T5948] usb 6-1: USB disconnect, device number 5 [ 479.212480][ T6126] XFS (loop7): Unmounting Filesystem [ 479.441938][ T7064] fido_id[7064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 479.520957][ T7065] fido_id[7065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 479.825249][ T7081] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 480.065862][ T7085] tipc: Started in network mode [ 480.138226][ T7085] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 480.179682][ T7088] loop6: detected capacity change from 0 to 256 [ 480.220156][ T7085] tipc: Enabled bearer , priority 0 [ 481.336304][ T126] tipc: Node number set to 43690 [ 481.444345][ T5945] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 481.675366][ T5945] usb 8-1: Using ep0 maxpacket: 32 [ 481.721924][ T5945] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 481.804551][ T5945] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.862243][ T5945] usb 8-1: Product: syz [ 481.893370][ T5945] usb 8-1: Manufacturer: syz [ 481.928676][ T5945] usb 8-1: SerialNumber: syz [ 481.973291][ T5945] usb 8-1: config 0 descriptor?? [ 482.011259][ T7138] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 482.651441][ T5945] peak_usb 8-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 482.749464][ T7161] loop2: detected capacity change from 0 to 64 [ 482.764346][ T5948] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 482.875053][ T5945] peak_usb: probe of 8-1:0.0 failed with error -71 [ 482.973785][ T5945] usb 8-1: USB disconnect, device number 7 [ 482.996405][ T5948] usb 6-1: unable to get BOS descriptor or descriptor too short [ 483.059305][ T5948] usb 6-1: config 189 has an invalid interface number: 127 but max is 0 [ 483.105502][ T7171] loop1: detected capacity change from 0 to 2048 [ 483.128489][ T5948] usb 6-1: config 189 has no interface number 0 [ 483.167674][ T5948] usb 6-1: config 189 interface 127 has no altsetting 0 [ 483.183653][ T7171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 483.271947][ T5948] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 483.306557][ T7171] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.361140][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.430398][ T5948] usb 6-1: Product: syz [ 483.474451][ T5948] usb 6-1: Manufacturer: syz [ 483.479179][ T5948] usb 6-1: SerialNumber: syz [ 483.754729][ T7186] netlink: 72 bytes leftover after parsing attributes in process `syz.7.663'. [ 483.766487][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 483.780243][ T5948] usbserial_generic 6-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 485.509935][ T5948] usbserial_generic 6-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 485.593074][ T5948] usbserial_generic 6-1:189.127: device has no bulk endpoints [ 485.692029][ T5948] safe_serial 6-1:189.127: safe_serial converter detected [ 485.742333][ T5948] safe_serial: probe of 6-1:189.127 failed with error -22 [ 485.787625][ T7199] loop7: detected capacity change from 0 to 128 [ 485.815328][ T5948] usb 6-1: USB disconnect, device number 6 [ 485.874202][ T7199] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 486.014502][ T7199] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 486.244391][ T5985] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 486.465625][ T5985] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 488.025031][ T6126] EXT4-fs (loop7): unmounting filesystem. [ 488.061666][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.129475][ T5985] usb 3-1: config 0 descriptor?? [ 489.727882][ T5985] usb 3-1: string descriptor 0 read error: -71 [ 489.792974][ T5985] uclogic 0003:256C:006E.000A: failed retrieving string descriptor #200: -71 [ 489.848105][ T5985] uclogic 0003:256C:006E.000A: failed retrieving pen parameters: -71 [ 489.917061][ T5985] uclogic 0003:256C:006E.000A: failed probing pen v2 parameters: -71 [ 489.968339][ T5985] uclogic 0003:256C:006E.000A: failed probing parameters: -71 [ 490.024968][ T5985] uclogic: probe of 0003:256C:006E.000A failed with error -71 [ 490.047495][ T7231] loop1: detected capacity change from 0 to 256 [ 490.091926][ T5985] usb 3-1: USB disconnect, device number 16 [ 495.124407][ T5945] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 495.213165][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.676'. [ 495.235709][ T5985] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 495.325572][ T5945] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.431349][ T5945] usb 3-1: config 0 interface 0 has no altsetting 0 [ 495.445718][ T5985] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 495.513301][ T5945] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 495.532749][ T5985] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 495.590585][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.607652][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.666804][ T5945] usb 3-1: config 0 descriptor?? [ 495.696264][ T5985] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 496.005284][ T4360] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 496.128410][ T5945] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x2 [ 496.166829][ T5945] magicmouse 0003:05AC:0265.000B: magicmouse setup input failed (no input) [ 496.226156][ T5945] magicmouse 0003:05AC:0265.000B: hidraw0: USB HID v0.00 Joystick [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 496.247136][ T4360] usb 8-1: unable to get BOS descriptor or descriptor too short [ 496.277480][ T7301] device-mapper: ioctl: Invalid ioctl structure: name c, dev 2 [ 496.288397][ T4360] usb 8-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 496.342805][ T5945] usb 3-1: USB disconnect, device number 17 [ 496.373989][ T4360] usb 8-1: config 1 interface 0 has no altsetting 0 [ 496.433046][ T4360] usb 8-1: string descriptor 0 read error: -22 [ 496.482631][ T4360] usb 8-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.40 [ 496.527884][ T4360] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.586970][ T7306] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 496.635952][ T7303] fido_id[7303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 496.956649][ T5985] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 497.003364][ T4360] elecom 0003:056E:010C.000C: unknown main item tag 0x5 [ 497.040810][ T5985] stv0680 2-1:4.0: last error: 86, command = 0x78 [ 497.054334][ T4360] elecom 0003:056E:010C.000C: nested delimiters [ 497.102911][ T5985] usb 2-1: USB disconnect, device number 10 [ 497.122213][ T4360] elecom 0003:056E:010C.000C: item 0 1 2 10 parsing failed [ 497.200191][ T4360] elecom: probe of 0003:056E:010C.000C failed with error -22 [ 498.698349][ T4360] usb 8-1: USB disconnect, device number 8 [ 501.564703][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.571105][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.626287][ T7327] Config c/1 of g1 needs at least one function. [ 501.632732][ T7327] udc dummy_udc.0: failed to start g1: -22 [ 501.734244][ T7327] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 501.966939][ T7327] UDC core: g1: couldn't find an available UDC or it's busy [ 501.984375][ T4360] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 502.017468][ T7337] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 502.204411][ T4360] usb 6-1: Using ep0 maxpacket: 8 [ 502.248891][ T4360] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.299797][ T4360] usb 6-1: config 0 has no interface number 0 [ 502.343403][ T4360] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.403137][ T4360] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 502.450207][ T4360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.489563][ T4360] usb 6-1: config 0 descriptor?? [ 502.513838][ T7346] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 502.584591][ T4360] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 502.766152][ T5985] usb 6-1: USB disconnect, device number 7 [ 504.446195][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.6.720'. [ 504.886113][ T7407] use of bytesused == 0 is deprecated and will be removed in the future, [ 504.969174][ T7407] use the actual size instead. [ 505.353393][ T7416] loop1: detected capacity change from 0 to 4096 [ 505.420044][ T7420] loop2: detected capacity change from 0 to 512 [ 505.576688][ T7420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 505.675116][ T7420] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.880796][ T7416] ntfs3: loop1: no free space to extend mft [ 506.051757][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 506.665749][ T7411] loop7: detected capacity change from 0 to 40427 [ 506.713351][ T7418] loop6: detected capacity change from 0 to 32768 [ 506.763857][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 506.798325][ T7411] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 506.847484][ T7418] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.726 (7418) [ 506.885265][ T7411] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 507.015584][ T7418] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 507.061894][ T7411] F2FS-fs (loop7): Found nat_bits in checkpoint [ 507.157694][ T7418] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 507.248495][ T7418] BTRFS info (device loop6): setting nodatasum [ 507.290852][ T7423] loop5: detected capacity change from 0 to 40427 [ 507.323898][ T7418] BTRFS info (device loop6): enabling auto defrag [ 507.414506][ T7418] BTRFS info (device loop6): disabling tree log [ 507.440428][ T7423] F2FS-fs (loop5): invalid crc value [ 507.477811][ T7418] BTRFS info (device loop6): using free space tree [ 507.502579][ T7423] F2FS-fs (loop5): Found nat_bits in checkpoint [ 507.574432][ T7411] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 507.631476][ T7411] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 507.724724][ T7418] BTRFS info (device loop6): enabling ssd optimizations [ 507.826400][ T7423] F2FS-fs (loop5): Start checkpoint disabled! [ 507.995587][ T7423] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 508.211524][ T6126] syz-executor: attempt to access beyond end of device [ 508.211524][ T6126] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 508.308542][ T5832] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 508.471236][ T7488] loop2: detected capacity change from 0 to 512 [ 508.514505][ T4291] Bluetooth: hci5: command 0x0406 tx timeout [ 508.551921][ T7488] EXT4-fs: Ignoring removed oldalloc option [ 508.648475][ T7488] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 508.779375][ T7488] EXT4-fs (loop2): 1 truncate cleaned up [ 508.824477][ T7488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 509.062564][ T7488] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 509.185711][ T4347] kworker/u4:7: attempt to access beyond end of device [ 509.185711][ T4347] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 509.410897][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 509.455349][ T7501] loop1: detected capacity change from 0 to 8 [ 510.874335][ T5947] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 510.882240][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 512.207201][ T7524] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 512.314390][ T5947] usb 3-1: device descriptor read/64, error -32 [ 512.572777][ T7534] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 512.634350][ T5947] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 512.721352][ T7540] bond0: option slaves: interface -b does not exist! [ 512.866317][ T5947] usb 3-1: not running at top speed; connect to a high speed hub [ 512.938504][ T5947] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 513.029088][ T5947] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 513.098827][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.634550][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 514.804307][ T5947] usb 3-1: Product: syz [ 514.832982][ T5947] usb 3-1: Manufacturer: syz [ 514.883155][ T5947] usb 3-1: SerialNumber: syz [ 516.534366][ T5947] usb 3-1: can't set config #1, error -71 [ 516.635118][ T5947] usb 3-1: USB disconnect, device number 19 [ 518.787797][ T7575] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 519.188140][ T7594] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 519.226979][ T7595] loop7: detected capacity change from 0 to 256 [ 519.352087][ T7600] loop5: detected capacity change from 0 to 512 [ 519.650281][ T6672] udevd[6672]: symlink '../../loop7' '/dev/disk/by-diskseq/283.tmp-b7:7' failed: Read-only file system [ 519.757493][ T6436] udevd[6436]: symlink '../../loop5' '/dev/disk/by-diskseq/284.tmp-b7:5' failed: Read-only file system [ 521.653825][ T6436] udevd[6436]: symlink '../../loop5' '/dev/disk/by-diskseq/284.tmp-b7:5' failed: Read-only file system [ 523.287272][ T6672] udevd[6672]: symlink '../../loop7' '/dev/disk/by-diskseq/283.tmp-b7:7' failed: Read-only file system [ 523.484558][ T6436] udevd[6436]: symlink '../../loop5' '/dev/disk/by-diskseq/284.tmp-b7:5' failed: Read-only file system [ 524.764309][ T7492] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 525.313199][ T6672] udevd[6672]: symlink '../../loop7' '/dev/disk/by-diskseq/283.tmp-b7:7' failed: Read-only file system [ 525.483020][ T7633] FAULT_INJECTION: forcing a failure. [ 525.483020][ T7633] name failslab, interval 1, probability 0, space 0, times 1 [ 525.538735][ T6571] udevd[6571]: symlink '../../loop5' '/dev/disk/by-diskseq/285.tmp-b7:5' failed: Read-only file system [ 525.583720][ T6672] udevd[6672]: symlink '../../loop7' '/dev/disk/by-diskseq/283.tmp-b7:7' failed: Read-only file system [ 525.614315][ T5944] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 525.662965][ T7633] CPU: 0 PID: 7633 Comm: syz.1.777 Not tainted syzkaller #0 [ 525.670274][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.680330][ T7633] Call Trace: [ 525.683664][ T7633] [ 525.686701][ T7633] dump_stack_lvl+0x188/0x24e [ 525.691485][ T7633] ? show_regs_print_info+0x12/0x12 [ 525.696733][ T7633] ? load_image+0x410/0x410 [ 525.701278][ T7633] ? __might_sleep+0xd0/0xd0 [ 525.705896][ T7633] ? __lock_acquire+0x7c40/0x7c40 [ 525.710946][ T7633] should_fail_ex+0x390/0x4c0 [ 525.715670][ T7633] should_failslab+0x5/0x20 [ 525.720197][ T7633] slab_pre_alloc_hook+0x59/0x300 [ 525.725265][ T7633] ? vfs_write+0x777/0x9a0 [ 525.729721][ T7633] kmem_cache_alloc+0x56/0x2f0 [ 525.734490][ T7633] ? getname_flags+0xb7/0x500 [ 525.739172][ T7633] getname_flags+0xb7/0x500 [ 525.743672][ T7633] do_sys_openat2+0xdd/0x4f0 [ 525.748284][ T7633] ? do_sys_open+0xe0/0xe0 [ 525.752754][ T7633] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 525.758757][ T7633] ? lock_chain_count+0x20/0x20 [ 525.763617][ T7633] __x64_sys_openat+0x135/0x160 [ 525.768482][ T7633] do_syscall_64+0x4c/0xa0 [ 525.772911][ T7633] ? clear_bhb_loop+0x60/0xb0 [ 525.777637][ T7633] ? clear_bhb_loop+0x60/0xb0 [ 525.782311][ T7633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.788244][ T7633] RIP: 0033:0x7f0da8d5e98e [ 525.792698][ T7633] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 525.812423][ T7633] RSP: 002b:00007f0da9ccbec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 525.820851][ T7633] RAX: ffffffffffffffda RBX: 00007f0da9ccc6c0 RCX: 00007f0da8d5e98e [ 525.828818][ T7633] RDX: 0000000000000002 RSI: 00007f0da9ccbf90 RDI: ffffffffffffff9c [ 525.836792][ T7633] RBP: 00007f0da8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 525.844763][ T7633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.852735][ T7633] R13: 00007f0da9026038 R14: 00007f0da9025fa0 R15: 00007ffef264a8b8 [ 525.860722][ T7633] [ 526.108219][ T5944] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 527.486224][ T5944] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 527.576782][ T5944] usb 3-1: string descriptor 0 read error: -71 [ 527.617743][ T5944] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 527.676558][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.700974][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'. [ 527.757185][ T5944] usb 3-1: can't set config #1, error -71 [ 527.811078][ T5944] usb 3-1: USB disconnect, device number 20 [ 527.855715][ T7650] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 528.091106][ T7653] Config c/1 of g1 needs at least one function. [ 528.129841][ T7653] udc dummy_udc.0: failed to start g1: -22 [ 528.188684][ T7656] md: array md0 already has disks! [ 528.194494][ T7653] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 528.247658][ T7653] UDC core: g1: couldn't find an available UDC or it's busy [ 531.780160][ T7686] loop7: detected capacity change from 0 to 1024 [ 531.885659][ T7686] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 531.944375][ T5947] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 532.148449][ T5947] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 532.198723][ T5947] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 532.252753][ T5947] usb 7-1: config 4 has no interface number 0 [ 532.299414][ T5947] usb 7-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 532.378428][ T5947] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 532.393252][ T6126] EXT4-fs (loop7): unmounting filesystem. [ 532.416463][ T7702] Config c/1 of g1 needs at least one function. [ 532.459876][ T7702] udc dummy_udc.0: failed to start g1: -22 [ 532.483366][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.517078][ T7702] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 532.552430][ T5947] usb 7-1: Product: syz [ 532.567065][ T5947] usb 7-1: Manufacturer: syz [ 532.571683][ T5947] usb 7-1: SerialNumber: syz [ 532.584526][ T7702] UDC core: g1: couldn't find an available UDC or it's busy [ 533.061957][ T5947] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 533.109935][ T5947] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 533.159961][ T5947] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 533.220664][ T5947] usb 7-1: media controller created [ 533.274826][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.536420][ T7723] loop5: detected capacity change from 0 to 164 [ 533.657559][ T5947] DVB: Unable to find symbol dib7000p_attach() [ 533.701232][ T5947] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 533.771258][ T7727] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 534.728527][ T4291] Bluetooth: hci0: command 0x0c1a tx timeout [ 534.734728][ T49] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 535.127911][ T7739] Config c/1 of g1 needs at least one function. [ 535.145681][ T5947] rc_core: IR keymap rc-dib0700-rc5 not found [ 535.174144][ T7743] FAULT_INJECTION: forcing a failure. [ 535.174144][ T7743] name failslab, interval 1, probability 0, space 0, times 0 [ 535.193847][ T5947] Registered IR keymap rc-empty [ 535.211525][ T7739] udc dummy_udc.0: failed to start g1: -22 [ 535.232250][ T5947] dvb-usb: could not initialize remote control. [ 535.258649][ T7739] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 535.291323][ T5947] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 535.299703][ T7743] CPU: 0 PID: 7743 Comm: syz.6.810 Not tainted syzkaller #0 [ 535.307003][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.317063][ T7743] Call Trace: [ 535.320349][ T7743] [ 535.323282][ T7743] dump_stack_lvl+0x188/0x24e [ 535.327989][ T7743] ? show_regs_print_info+0x12/0x12 [ 535.333190][ T7743] ? load_image+0x410/0x410 [ 535.337708][ T7743] ? __lock_acquire+0x7c40/0x7c40 [ 535.342748][ T7743] should_fail_ex+0x390/0x4c0 [ 535.347436][ T7743] should_failslab+0x5/0x20 [ 535.351946][ T7743] slab_pre_alloc_hook+0x59/0x300 [ 535.356975][ T7743] ? ceph_alloc_options+0xae/0x1c0 [ 535.362193][ T7743] __kmem_cache_alloc_node+0x4f/0x270 [ 535.367568][ T7743] ? ceph_alloc_options+0xae/0x1c0 [ 535.372700][ T7743] kmalloc_trace+0x26/0xe0 [ 535.377114][ T7743] ceph_alloc_options+0xae/0x1c0 [ 535.382064][ T7743] ceph_init_fs_context+0x64/0x4a0 [ 535.387214][ T7743] ? destroy_caches+0x80/0x80 [ 535.391908][ T7743] alloc_fs_context+0x628/0x7d0 [ 535.396828][ T7743] __se_sys_fsopen+0xa0/0x2c0 [ 535.401516][ T7743] do_syscall_64+0x4c/0xa0 [ 535.405935][ T7743] ? clear_bhb_loop+0x60/0xb0 [ 535.410634][ T7743] ? clear_bhb_loop+0x60/0xb0 [ 535.415329][ T7743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.421238][ T7743] RIP: 0033:0x7fb38bd9e159 [ 535.425653][ T7743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.445273][ T7743] RSP: 002b:00007fb38cd1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 535.453720][ T7743] RAX: ffffffffffffffda RBX: 00007fb38c025fa0 RCX: 00007fb38bd9e159 [ 535.461724][ T7743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 535.469713][ T7743] RBP: 00007fb38be3506b R08: 0000000000000000 R09: 0000000000000000 [ 535.477712][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.485689][ T7743] R13: 00007fb38c026038 R14: 00007fb38c025fa0 R15: 00007fff982246d8 [ 535.493682][ T7743] [ 535.525034][ T7739] UDC core: g1: couldn't find an available UDC or it's busy [ 535.602835][ T5947] usb 7-1: USB disconnect, device number 7 [ 535.694205][ T5947] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 536.209078][ T7758] serio: Serial port ptm0 [ 538.053300][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.335604][ T4291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 538.345182][ T4291] CPU: 0 PID: 4291 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 538.352767][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 538.362825][ T4291] Workqueue: hci1 hci_rx_work [ 538.367601][ T4291] Call Trace: [ 538.370898][ T4291] [ 538.373844][ T4291] dump_stack_lvl+0x188/0x24e [ 538.378529][ T4291] ? show_regs_print_info+0x12/0x12 [ 538.383757][ T4291] ? load_image+0x410/0x410 [ 538.388302][ T4291] sysfs_create_dir_ns+0x26a/0x290 [ 538.393488][ T4291] ? __lock_acquire+0x7c40/0x7c40 [ 538.398518][ T4291] ? sysfs_warn_dup+0xa0/0xa0 [ 538.403214][ T4291] ? do_raw_spin_unlock+0x11d/0x230 [ 538.408444][ T4291] kobject_add_internal+0x617/0xca0 [ 538.413683][ T4291] kobject_add+0x160/0x230 [ 538.418113][ T4291] ? kobject_init+0x1c0/0x1c0 [ 538.422814][ T4291] ? __raw_spin_lock_init+0x41/0x100 [ 538.428102][ T4291] ? klist_children_get+0x50/0x50 [ 538.433189][ T4291] ? get_device_parent+0x121/0x3e0 [ 538.438361][ T4291] device_add+0x470/0x1050 [ 538.442798][ T4291] hci_conn_add_sysfs+0xd1/0x1e0 [ 538.447905][ T4291] le_conn_complete_evt+0xf93/0x15c0 [ 538.453210][ T4291] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 538.459469][ T4291] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 538.465106][ T4291] ? mutex_unlock+0x10/0x10 [ 538.469615][ T4291] ? skb_pull_data+0xec/0x1f0 [ 538.474337][ T4291] hci_le_conn_complete_evt+0x183/0x440 [ 538.479932][ T4291] ? hci_remote_host_features_evt+0x230/0x230 [ 538.486011][ T4291] hci_event_packet+0x7b3/0x1290 [ 538.490973][ T4291] ? lock_chain_count+0x20/0x20 [ 538.495852][ T4291] ? bis_list+0x280/0x280 [ 538.500189][ T4291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 538.506093][ T4291] ? kcov_remote_start+0x50f/0x810 [ 538.511280][ T4291] ? lockdep_hardirqs_on+0x94/0x140 [ 538.516491][ T4291] ? hci_send_to_monitor+0x9c/0x4a0 [ 538.521713][ T4291] hci_rx_work+0x3eb/0xd40 [ 538.526144][ T4291] ? _raw_spin_unlock+0x40/0x40 [ 538.531007][ T4291] ? process_one_work+0x7b4/0x1160 [ 538.536176][ T4291] process_one_work+0x8ab/0x1160 [ 538.541124][ T4291] ? worker_detach_from_pool+0x240/0x240 [ 538.546759][ T4291] ? _raw_spin_lock_irq+0xb7/0xf0 [ 538.551785][ T4291] ? _raw_spin_lock_irqsave+0x100/0x100 [ 538.557345][ T4291] ? wq_worker_running+0x97/0x190 [ 538.562374][ T4291] worker_thread+0xaf5/0x12a0 [ 538.567098][ T4291] kthread+0x29d/0x330 [ 538.571218][ T4291] ? worker_clr_flags+0x1a0/0x1a0 [ 538.576263][ T4291] ? kthread_blkcg+0xd0/0xd0 [ 538.580858][ T4291] ret_from_fork+0x1f/0x30 [ 538.585320][ T4291] [ 538.601245][ T4291] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 538.618497][ T4291] Bluetooth: hci1: failed to register connection device [ 539.795048][ T7786] Config c/1 of g1 needs at least one function. [ 539.841525][ T7786] udc dummy_udc.0: failed to start g1: -22 [ 539.905592][ T7786] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 539.983941][ T7786] UDC core: g1: couldn't find an available UDC or it's busy [ 540.377837][ T7795] Config c/1 of g1 needs at least one function. [ 540.422844][ T7795] udc dummy_udc.0: failed to start g1: -22 [ 540.463153][ T7795] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 540.518235][ T7795] UDC core: g1: couldn't find an available UDC or it's busy [ 541.212099][ T7817] Config c/1 of g1 needs at least one function. [ 541.261788][ T7817] udc dummy_udc.0: failed to start g1: -22 [ 541.287522][ T7817] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 541.319176][ T7819] loop5: detected capacity change from 0 to 512 [ 541.340464][ T7817] UDC core: g1: couldn't find an available UDC or it's busy [ 541.444474][ T5947] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 541.591177][ T7792] loop6: detected capacity change from 0 to 40427 [ 541.648051][ T7792] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 541.656250][ T5947] usb 8-1: config index 0 descriptor too short (expected 164, got 36) [ 541.696393][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 541.723379][ T7792] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 541.783600][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.812961][ T7792] F2FS-fs (loop6): Found nat_bits in checkpoint [ 541.870172][ T5947] usb 8-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 541.930567][ T5947] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.966955][ T7832] Config c/1 of g1 needs at least one function. [ 541.999301][ T5947] usb 8-1: config 0 descriptor?? [ 542.020431][ T7832] udc dummy_udc.0: failed to start g1: -22 [ 542.049162][ T7792] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 542.098285][ T7832] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 542.158012][ T7792] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 542.186685][ T7832] UDC core: g1: couldn't find an available UDC or it's busy [ 542.441553][ T5947] logitech 0003:046D:C29C.000D: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.7-1/input0 [ 542.594523][ T4291] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 542.638990][ T5947] logitech 0003:046D:C29C.000D: no inputs found [ 542.695725][ T5947] usb 8-1: USB disconnect, device number 10 [ 542.889671][ T5832] syz-executor: attempt to access beyond end of device [ 542.889671][ T5832] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 543.116969][ T7843] fido_id[7843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 543.393035][ T7849] loop5: detected capacity change from 0 to 8192 [ 543.941239][ T7864] Config c/1 of g1 needs at least one function. [ 543.991376][ T7864] udc dummy_udc.0: failed to start g1: -22 [ 544.974639][ T7864] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 545.040224][ T7864] UDC core: g1: couldn't find an available UDC or it's busy [ 545.371053][ T7875] Config c/1 of g1 needs at least one function. [ 545.436236][ T7875] udc dummy_udc.0: failed to start g1: -22 [ 545.486225][ T7875] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 545.529997][ T7875] UDC core: g1: couldn't find an available UDC or it's busy [ 545.579674][ T7877] Config c/1 of g1 needs at least one function. [ 545.618259][ T7877] udc dummy_udc.0: failed to start g1: -22 [ 545.697953][ T7877] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 545.714323][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 545.765183][ T7877] UDC core: g1: couldn't find an available UDC or it's busy [ 549.560256][ T7900] loop7: detected capacity change from 0 to 512 [ 549.711425][ T7900] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 549.804411][ T7900] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.039372][ T6126] EXT4-fs (loop7): unmounting filesystem. [ 551.106375][ T5942] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 551.263501][ T7917] Config c/1 of g1 needs at least one function. [ 551.318017][ T7917] udc dummy_udc.0: failed to start g1: -22 [ 551.345668][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 551.383159][ T7917] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 551.417409][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.445382][ T7917] UDC core: g1: couldn't find an available UDC or it's busy [ 551.473859][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.126523][ T5942] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.214790][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.256038][ T5942] usb 3-1: config 0 descriptor?? [ 553.302923][ T5942] usb 3-1: can't set config #0, error -71 [ 553.370129][ T5942] usb 3-1: USB disconnect, device number 21 [ 553.416722][ T7924] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 553.542899][ T7930] Config c/1 of g1 needs at least one function. [ 553.597912][ T7930] udc dummy_udc.0: failed to start g1: -22 [ 555.256479][ T7930] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 556.341977][ T7930] UDC core: g1: couldn't find an available UDC or it's busy [ 557.148851][ T7939] netlink: 'syz.2.863': attribute type 29 has an invalid length. [ 557.206769][ T7939] netlink: 'syz.2.863': attribute type 29 has an invalid length. [ 557.292928][ T7942] netlink: 'syz.2.863': attribute type 29 has an invalid length. [ 557.397174][ T7951] netlink: 'syz.2.863': attribute type 29 has an invalid length. [ 557.459159][ T7944] netlink: 'syz.2.863': attribute type 29 has an invalid length. [ 558.125762][ T7965] Config c/1 of g1 needs at least one function. [ 558.231309][ T7965] udc dummy_udc.0: failed to start g1: -22 [ 558.274129][ T7965] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 558.321947][ T7965] UDC core: g1: couldn't find an available UDC or it's busy [ 558.334930][ T7966] Set syz1 is full, maxelem 2076 reached [ 560.467857][ T7982] Config c/1 of g1 needs at least one function. [ 560.474187][ T7982] udc dummy_udc.0: failed to start g1: -22 [ 560.511585][ T7985] loop7: detected capacity change from 0 to 512 [ 560.582439][ T7982] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 560.615056][ T7985] EXT4-fs: Ignoring removed nomblk_io_submit option [ 560.689872][ T7985] EXT4-fs: Ignoring removed nomblk_io_submit option [ 560.702902][ T7982] UDC core: g1: couldn't find an available UDC or it's busy [ 560.790651][ T7985] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 561.024200][ T7985] EXT4-fs (loop7): 1 truncate cleaned up [ 561.081345][ T7985] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 561.512064][ T6126] EXT4-fs (loop7): unmounting filesystem. [ 561.852791][ T8028] Config c/1 of g1 needs at least one function. [ 561.911928][ T8024] loop6: detected capacity change from 0 to 4096 [ 561.926845][ T8028] udc dummy_udc.0: failed to start g1: -22 [ 561.972489][ T8028] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 562.049107][ T8024] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 562.073243][ T8028] UDC core: g1: couldn't find an available UDC or it's busy [ 562.494962][ T8041] Config c/1 of g1 needs at least one function. [ 562.550635][ T8041] udc dummy_udc.0: failed to start g1: -22 [ 562.648956][ T8041] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 562.724947][ T8041] UDC core: g1: couldn't find an available UDC or it's busy [ 562.760020][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.766395][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.807641][ T8051] "syz.1.894" (8051) uses obsolete ecb(arc4) skcipher [ 562.883841][ T8051] syz.1.894 sent an empty control message without MSG_MORE. [ 563.226184][ T8059] loop6: detected capacity change from 0 to 128 [ 563.330426][ T8059] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 563.436616][ T8059] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.832148][ T8078] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 563.903987][ T5832] EXT4-fs (loop6): unmounting filesystem. [ 563.919179][ T8080] Config c/1 of g1 needs at least one function. [ 563.994565][ T8080] udc dummy_udc.0: failed to start g1: -22 [ 564.863675][ T8080] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 564.944797][ T8080] UDC core: g1: couldn't find an available UDC or it's busy [ 567.156600][ T8098] Config c/1 of g1 needs at least one function. [ 567.221467][ T8098] udc dummy_udc.0: failed to start g1: -22 [ 567.258046][ T8098] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 567.294340][ T5947] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 567.329223][ T8098] UDC core: g1: couldn't find an available UDC or it's busy [ 567.528532][ T5947] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 567.614312][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 567.698391][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.759072][ T5947] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 567.824695][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.889177][ T5947] usb 2-1: config 0 descriptor?? [ 568.349215][ T5947] logitech 0003:046D:C29C.000E: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 568.549811][ T5947] logitech 0003:046D:C29C.000E: no inputs found [ 568.597062][ T5947] usb 2-1: USB disconnect, device number 11 [ 568.875714][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.6.915'. [ 568.946166][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.915'. [ 569.019040][ T8124] fido_id[8124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 572.362252][ T8157] xt_limit: Overflow, try lower: 167772/2147483648 [ 574.419441][ T8167] FAULT_INJECTION: forcing a failure. [ 574.419441][ T8167] name failslab, interval 1, probability 0, space 0, times 0 [ 574.525428][ T8167] CPU: 0 PID: 8167 Comm: syz.6.924 Not tainted syzkaller #0 [ 574.532756][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.542813][ T8167] Call Trace: [ 574.546105][ T8167] [ 574.549039][ T8167] dump_stack_lvl+0x188/0x24e [ 574.553722][ T8167] ? show_regs_print_info+0x12/0x12 [ 574.558923][ T8167] ? load_image+0x410/0x410 [ 574.563430][ T8167] ? __might_sleep+0xd0/0xd0 [ 574.568032][ T8167] ? __lock_acquire+0x7c40/0x7c40 [ 574.573063][ T8167] should_fail_ex+0x390/0x4c0 [ 574.577756][ T8167] should_failslab+0x5/0x20 [ 574.582286][ T8167] slab_pre_alloc_hook+0x59/0x300 [ 574.587328][ T8167] ? vfs_write+0x777/0x9a0 [ 574.591772][ T8167] kmem_cache_alloc+0x56/0x2f0 [ 574.596543][ T8167] ? getname_flags+0xb7/0x500 [ 574.601231][ T8167] getname_flags+0xb7/0x500 [ 574.605740][ T8167] do_sys_openat2+0xdd/0x4f0 [ 574.610343][ T8167] ? do_sys_open+0xe0/0xe0 [ 574.614777][ T8167] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 574.620767][ T8167] ? lock_chain_count+0x20/0x20 [ 574.625635][ T8167] __x64_sys_openat+0x135/0x160 [ 574.630502][ T8167] do_syscall_64+0x4c/0xa0 [ 574.634924][ T8167] ? clear_bhb_loop+0x60/0xb0 [ 574.639613][ T8167] ? clear_bhb_loop+0x60/0xb0 [ 574.644319][ T8167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.650241][ T8167] RIP: 0033:0x7fb38bd5e98e [ 574.654663][ T8167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 574.674268][ T8167] RSP: 002b:00007fb38cd1eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 574.682696][ T8167] RAX: ffffffffffffffda RBX: 00007fb38cd1f6c0 RCX: 00007fb38bd5e98e [ 574.690676][ T8167] RDX: 0000000000000002 RSI: 00007fb38cd1ef90 RDI: ffffffffffffff9c [ 574.698672][ T8167] RBP: 00007fb38be3506b R08: 0000000000000000 R09: 0000000000000000 [ 574.706663][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.714648][ T8167] R13: 00007fb38c026038 R14: 00007fb38c025fa0 R15: 00007fff982246d8 [ 574.722632][ T8167] [ 576.103661][ T8176] FAULT_INJECTION: forcing a failure. [ 576.103661][ T8176] name failslab, interval 1, probability 0, space 0, times 0 [ 576.187815][ T8176] CPU: 0 PID: 8176 Comm: syz.2.928 Not tainted syzkaller #0 [ 576.195234][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 576.205370][ T8176] Call Trace: [ 576.208651][ T8176] [ 576.211583][ T8176] dump_stack_lvl+0x188/0x24e [ 576.216293][ T8176] ? show_regs_print_info+0x12/0x12 [ 576.221488][ T8176] ? load_image+0x410/0x410 [ 576.225999][ T8176] ? __lock_acquire+0x7c40/0x7c40 [ 576.231076][ T8176] should_fail_ex+0x390/0x4c0 [ 576.235765][ T8176] should_failslab+0x5/0x20 [ 576.240268][ T8176] slab_pre_alloc_hook+0x59/0x300 [ 576.245308][ T8176] ? ceph_alloc_options+0x4a/0x1c0 [ 576.250435][ T8176] __kmem_cache_alloc_node+0x4f/0x270 [ 576.255820][ T8176] ? ceph_alloc_options+0x4a/0x1c0 [ 576.260958][ T8176] kmalloc_trace+0x26/0xe0 [ 576.265391][ T8176] ceph_alloc_options+0x4a/0x1c0 [ 576.270344][ T8176] ceph_init_fs_context+0x64/0x4a0 [ 576.275489][ T8176] ? destroy_caches+0x80/0x80 [ 576.280186][ T8176] alloc_fs_context+0x628/0x7d0 [ 576.285057][ T8176] __se_sys_fsopen+0xa0/0x2c0 [ 576.289742][ T8176] do_syscall_64+0x4c/0xa0 [ 576.294180][ T8176] ? clear_bhb_loop+0x60/0xb0 [ 576.298904][ T8176] ? clear_bhb_loop+0x60/0xb0 [ 576.303582][ T8176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.309493][ T8176] RIP: 0033:0x7f7b4279e159 [ 576.313915][ T8176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.333530][ T8176] RSP: 002b:00007f7b435ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 576.341967][ T8176] RAX: ffffffffffffffda RBX: 00007f7b42a25fa0 RCX: 00007f7b4279e159 [ 576.349961][ T8176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 576.357954][ T8176] RBP: 00007f7b4283506b R08: 0000000000000000 R09: 0000000000000000 [ 576.365928][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.373906][ T8176] R13: 00007f7b42a26038 R14: 00007f7b42a25fa0 R15: 00007ffe13fb25f8 [ 576.381888][ T8176] [ 576.982413][ T8185] Config c/1 of g1 needs at least one function. [ 577.023375][ T8185] udc dummy_udc.0: failed to start g1: -22 [ 577.034644][ T8185] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 577.087861][ T8185] UDC core: g1: couldn't find an available UDC or it's busy [ 579.155529][ T8213] x86/PAT: syz.5.935:8213 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 580.629805][ T8227] Config c/1 of g1 needs at least one function. [ 580.731184][ T8227] udc dummy_udc.0: failed to start g1: -22 [ 580.767971][ T8227] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 580.832935][ T8227] UDC core: g1: couldn't find an available UDC or it's busy [ 585.779002][ T8286] Config c/1 of g1 needs at least one function. [ 585.809187][ T8286] udc dummy_udc.0: failed to start g1: -22 [ 586.789715][ T8286] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 586.840997][ T8286] UDC core: g1: couldn't find an available UDC or it's busy [ 587.206817][ T26] audit: type=1326 audit(1790127495.652:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.5.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4d8f9e159 code=0x0 [ 591.432508][ T8316] Set syz1 is full, maxelem 2076 reached [ 591.862799][ T8334] device lo entered promiscuous mode [ 591.944648][ T8334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.910109][ T8352] Config c/1 of g1 needs at least one function. [ 594.223675][ T8352] udc dummy_udc.0: failed to start g1: -22 [ 594.275922][ T8352] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 594.419830][ T8352] UDC core: g1: couldn't find an available UDC or it's busy [ 595.870925][ T8378] Config c/1 of g1 needs at least one function. [ 595.939751][ T8378] udc dummy_udc.0: failed to start g1: -22 [ 595.990398][ T8378] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 596.030287][ T8378] UDC core: g1: couldn't find an available UDC or it's busy [ 596.096955][ T8380] Config c/1 of g1 needs at least one function. [ 596.152545][ T8380] udc dummy_udc.0: failed to start g1: -22 [ 596.190688][ T8380] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 596.256931][ T8380] UDC core: g1: couldn't find an available UDC or it's busy [ 597.919424][ T8415] Config c/1 of g1 needs at least one function. [ 597.980363][ T8415] udc dummy_udc.0: failed to start g1: -22 [ 598.073725][ T8415] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 598.140842][ T8415] UDC core: g1: couldn't find an available UDC or it's busy [ 600.205834][ T8435] Config c/1 of g1 needs at least one function. [ 600.390376][ T8435] udc dummy_udc.0: failed to start g1: -22 [ 601.199726][ T8435] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 601.309990][ T8435] UDC core: g1: couldn't find an available UDC or it's busy [ 601.431196][ T8446] Config c/1 of g1 needs at least one function. [ 601.495756][ T8446] udc dummy_udc.0: failed to start g1: -22 [ 601.567230][ T8446] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 603.193147][ T8446] UDC core: g1: couldn't find an available UDC or it's busy [ 603.900436][ T8455] loop7: detected capacity change from 0 to 131072 [ 603.933153][ T8455] F2FS-fs (loop7): invalid crc value [ 604.021383][ T8455] F2FS-fs (loop7): Found nat_bits in checkpoint [ 604.077219][ T8455] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 605.482287][ T8472] bonding: unable to delete non-existent bo [ 605.746372][ T8475] Config c/1 of g1 needs at least one function. [ 605.752703][ T8475] udc dummy_udc.0: failed to start g1: -22 [ 605.894613][ T8475] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 605.976554][ T8475] UDC core: g1: couldn't find an available UDC or it's busy [ 607.967889][ T8493] loop7: detected capacity change from 0 to 128 [ 608.102735][ T8493] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 608.215255][ T8493] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.279391][ T8500] loop2: detected capacity change from 0 to 2048 [ 608.438490][ T8500] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.819608][ T6126] EXT4-fs (loop7): unmounting filesystem. [ 608.963296][ T8499] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 110592 lbcount: 114688 extent 129+78848 [ 614.176796][ T8541] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 616.820676][ T26] audit: type=1804 audit(1790127525.262:10): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1025" name="/newroot/248/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=27529 res=1 errno=0 [ 616.892703][ T8586] 9pnet_fd: Insufficient options for proto=fd [ 617.056031][ T8590] md: md0 stopped. [ 617.107430][ T8588] input: syz1 as /devices/virtual/input/input13 [ 617.375807][ T8598] Config c/1 of g1 needs at least one function. [ 617.382134][ T8598] udc dummy_udc.0: failed to start g1: -22 [ 617.520348][ T8598] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 618.909843][ T8598] UDC core: g1: couldn't find an available UDC or it's busy [ 619.312656][ T8601] Config c/1 of g1 needs at least one function. [ 619.347262][ T8601] udc dummy_udc.0: failed to start g1: -22 [ 619.401890][ T8601] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 619.474836][ T8601] UDC core: g1: couldn't find an available UDC or it's busy [ 619.891159][ T8622] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 624.200081][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.206423][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.835697][ T5944] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 628.088204][ T5944] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 628.150154][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.439185][ T5944] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 630.514464][ T4291] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 633.372788][ T8713] FAULT_INJECTION: forcing a failure. [ 633.372788][ T8713] name fail_futex, interval 1, probability 0, space 0, times 1 [ 633.483979][ T8713] CPU: 0 PID: 8713 Comm: syz.7.1057 Not tainted syzkaller #0 [ 633.491391][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 633.501443][ T8713] Call Trace: [ 633.504724][ T8713] [ 633.507657][ T8713] dump_stack_lvl+0x188/0x24e [ 633.512331][ T8713] ? unwind_get_return_address+0x49/0x80 [ 633.518047][ T8713] ? stack_trace_save+0xf0/0xf0 [ 633.522899][ T8713] ? show_regs_print_info+0x12/0x12 [ 633.528093][ T8713] ? load_image+0x410/0x410 [ 633.532609][ T8713] ? stack_trace_save+0xa6/0xf0 [ 633.537467][ T8713] should_fail_ex+0x390/0x4c0 [ 633.542174][ T8713] get_futex_key+0x1b1/0x1000 [ 633.546880][ T8713] ? kasan_set_track+0x4b/0x70 [ 633.551644][ T8713] ? kasan_save_free_info+0x27/0x40 [ 633.556880][ T8713] ? ____kasan_slab_free+0x126/0x1f0 [ 633.562176][ T8713] ? slab_free_freelist_hook+0x133/0x1b0 [ 633.567811][ T8713] ? futex_setup_timer+0xc0/0xc0 [ 633.572751][ T8713] futex_wake+0x123/0x4f0 [ 633.577074][ T8713] ? futex_wake_mark+0x150/0x150 [ 633.582004][ T8713] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 633.587992][ T8713] ? lock_chain_count+0x20/0x20 [ 633.592856][ T8713] do_futex+0x2e2/0x320 [ 633.597018][ T8713] ? __ia32_sys_get_robust_list+0x100/0x100 [ 633.602912][ T8713] ? slab_free_freelist_hook+0x133/0x1b0 [ 633.608555][ T8713] __se_sys_futex+0x381/0x410 [ 633.613240][ T8713] ? __x64_sys_futex+0xf0/0xf0 [ 633.617999][ T8713] ? __x64_sys_futex+0x1d/0xf0 [ 633.622755][ T8713] do_syscall_64+0x4c/0xa0 [ 633.627168][ T8713] ? clear_bhb_loop+0x60/0xb0 [ 633.631841][ T8713] ? clear_bhb_loop+0x60/0xb0 [ 633.636524][ T8713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.642424][ T8713] RIP: 0033:0x7f178679e159 [ 633.646852][ T8713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.666462][ T8713] RSP: 002b:00007f17876610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 633.674870][ T8713] RAX: ffffffffffffffda RBX: 00007f1786a25fa8 RCX: 00007f178679e159 [ 633.682838][ T8713] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1786a25fac [ 633.690805][ T8713] RBP: 00007f1786a25fa0 R08: 00128be0c9d1d7d8 R09: 0000000000000000 [ 633.698771][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.706742][ T8713] R13: 00007f1786a26038 R14: 00007ffc757bfca0 R15: 00007ffc757bfd88 [ 633.714753][ T8713] [ 635.509726][ T5944] usb 3-1: USB disconnect, device number 22 [ 635.820733][ T8735] bond0: (slave bond_slave_1): Releasing backup interface [ 645.140606][ T8799] loop2: detected capacity change from 0 to 256 [ 645.250757][ T8799] exfat: Deprecated parameter 'utf8' [ 645.320630][ T8799] exfat: Deprecated parameter 'namecase' [ 645.388234][ T8799] exfat: Deprecated parameter 'utf8' [ 646.524705][ T8799] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 649.059481][ T8814] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1077'. [ 653.049807][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 653.062060][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 653.070146][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 653.077669][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 653.085191][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 653.092327][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 654.004242][ T152] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 655.154374][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 656.320141][ T152] usb 3-1: unable to get BOS descriptor or descriptor too short [ 657.234305][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 657.276184][ T152] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 657.342706][ T8840] chnl_net:caif_netlink_parms(): no params data found [ 657.385597][ T152] usb 3-1: can't read configurations, error -71 [ 657.796301][ T8840] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.893947][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.972194][ T8840] device bridge_slave_0 entered promiscuous mode [ 658.050350][ T8840] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.144324][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.155712][ T8840] device bridge_slave_1 entered promiscuous mode [ 659.314288][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 660.998065][ T8840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.082879][ T8840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.052813][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 662.269920][ T8904] FAULT_INJECTION: forcing a failure. [ 662.269920][ T8904] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 662.323887][ T8840] team0: Port device team_slave_0 added [ 662.406976][ T8904] CPU: 0 PID: 8904 Comm: syz.1.1096 Not tainted syzkaller #0 [ 662.414393][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 662.424446][ T8904] Call Trace: [ 662.427722][ T8904] [ 662.430651][ T8904] dump_stack_lvl+0x188/0x24e [ 662.435448][ T8904] ? show_regs_print_info+0x12/0x12 [ 662.440663][ T8904] ? load_image+0x410/0x410 [ 662.445181][ T8904] ? __lock_acquire+0x7c40/0x7c40 [ 662.450213][ T8904] ? unwind_next_frame+0x1719/0x1fd0 [ 662.455502][ T8904] ? deref_stack_reg+0x18e/0x220 [ 662.460452][ T8904] should_fail_ex+0x390/0x4c0 [ 662.465141][ T8904] prepare_alloc_pages+0x1e1/0x5b0 [ 662.470362][ T8904] __alloc_pages+0x130/0x4f0 [ 662.474988][ T8904] ? zone_statistics+0x170/0x170 [ 662.480023][ T8904] ? stack_trace_save+0xa6/0xf0 [ 662.484882][ T8904] ? is_dynamic_key+0x260/0x260 [ 662.489834][ T8904] ? verify_lock_unused+0x140/0x140 [ 662.495046][ T8904] __folio_alloc+0xe/0x30 [ 662.499402][ T8904] vma_alloc_folio+0x499/0x900 [ 662.504192][ T8904] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 662.510008][ T8904] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 662.515821][ T8904] ? shmem_replace_folio+0xdc0/0xdc0 [ 662.521155][ T8904] ? xas_load+0x119/0x140 [ 662.525493][ T8904] ? __filemap_get_folio+0x10f/0xde0 [ 662.530836][ T8904] ? __filemap_get_folio+0xb43/0xde0 [ 662.536130][ T8904] ? __filemap_get_folio+0x10f/0xde0 [ 662.541436][ T8904] ? page_cache_prev_miss+0x380/0x380 [ 662.546809][ T8904] ? get_random_u32+0x538/0x930 [ 662.551699][ T8904] ? mpol_put+0x60/0x60 [ 662.555988][ T8904] ? memset+0x1e/0x40 [ 662.559976][ T8904] shmem_get_folio_gfp+0x1439/0x35e0 [ 662.565287][ T8904] shmem_symlink+0x252/0x680 [ 662.569893][ T8904] vfs_symlink+0x245/0x3d0 [ 662.574317][ T8904] do_symlinkat+0x1b6/0x400 [ 662.578840][ T8904] ? vfs_symlink+0x3d0/0x3d0 [ 662.583441][ T8904] __x64_sys_symlinkat+0x95/0xa0 [ 662.588388][ T8904] do_syscall_64+0x4c/0xa0 [ 662.592801][ T8904] ? clear_bhb_loop+0x60/0xb0 [ 662.597474][ T8904] ? clear_bhb_loop+0x60/0xb0 [ 662.602151][ T8904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.608066][ T8904] RIP: 0033:0x7f0da8d9e159 [ 662.612486][ T8904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.632093][ T8904] RSP: 002b:00007f0da9ccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 662.640536][ T8904] RAX: ffffffffffffffda RBX: 00007f0da9025fa0 RCX: 00007f0da8d9e159 [ 662.648523][ T8904] RDX: 0000200000000000 RSI: ffffffffffffff9c RDI: 0000200000000840 [ 662.656516][ T8904] RBP: 00007f0da8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 662.664499][ T8904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.672467][ T8904] R13: 00007f0da9026038 R14: 00007f0da9025fa0 R15: 00007ffef264a8b8 [ 662.680449][ T8904] [ 662.723297][ T8840] team0: Port device team_slave_1 added [ 663.719943][ T8840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.463870][ T8840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.692124][ T8840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.771918][ T8840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.828643][ T8840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.999348][ T8840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.218371][ T8840] device hsr_slave_0 entered promiscuous mode [ 665.318378][ T8840] device hsr_slave_1 entered promiscuous mode [ 665.387041][ T8840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.444279][ T8840] Cannot create hsr debugfs directory [ 667.696737][ T8840] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 669.433349][ T8840] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 669.706420][ T8840] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 670.871798][ T8840] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 671.313264][ T8716] tipc: Resetting bearer [ 671.338887][ T8973] loop7: detected capacity change from 0 to 512 [ 671.522200][ T8716] tipc: Disabling bearer [ 671.667060][ T8840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.909116][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.051481][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 672.104993][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 672.114646][ T7492] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 672.269238][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.357079][ T7492] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.414406][ T7492] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 672.488726][ T7492] usb 1-1: Dual-Role OTG device on HNP port [ 672.512693][ T8840] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.550594][ T7492] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 673.577962][ T7492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.627206][ T7492] usb 1-1: Product: HID Gadget [ 673.632014][ T7492] usb 1-1: Manufacturer: syzkaller [ 673.682757][ T7492] usb 1-1: SerialNumber: 0123456789 [ 673.739245][ C0] ------------[ cut here ]------------ [ 673.745059][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 673.752117][ C0] WARNING: CPU: 0 PID: 152 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x27c/0x4d0 [ 673.762080][ C0] Modules linked in: [ 673.765970][ C0] CPU: 0 PID: 152 Comm: kworker/0:3 Not tainted syzkaller #0 [ 673.773334][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.783392][ C0] Workqueue: events nsim_dev_hwstats_traffic_work [ 673.789862][ C0] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 673.795249][ C0] Code: 49 8b 0e 48 c7 c0 80 e4 3e 8b 49 c7 c0 a0 e4 3e 8b 4c 0f 44 c0 48 c7 c7 40 e4 3e 8b 48 c7 c6 0d f9 63 8c 89 ea e8 f4 09 ce fa <0f> 0b e9 c4 fe ff ff e8 08 83 02 fb 49 bc 00 00 00 00 00 fc ff df [ 673.814862][ C0] RSP: 0018:ffffc90000007768 EFLAGS: 00010046 [ 673.820947][ C0] RAX: dd46edf208215d00 RBX: ffff8881447740e0 RCX: ffff88801c730000 [ 673.828929][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 673.836892][ C0] RBP: 0000000000000081 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 673.844863][ C0] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 673.852863][ C0] R13: ffff88814477410d R14: ffff8881447740e8 R15: ffff888055d9d33a [ 673.860934][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 673.869868][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.876453][ C0] CR2: 00007f49ca4d9b2d CR3: 000000002f4e1000 CR4: 00000000003506f0 [ 673.884439][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 673.892420][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 673.900394][ C0] Call Trace: [ 673.903686][ C0] [ 673.906535][ C0] hidg_set_alt+0x126/0xa00 [ 673.911112][ C0] ? usb_gadget_set_state+0x142/0x310 [ 673.916507][ C0] set_config+0x6e8/0xf70 [ 673.920860][ C0] composite_setup+0x194c/0x2b00 [ 673.925827][ C0] configfs_composite_setup+0xc3/0x100 [ 673.931288][ C0] dummy_timer+0x1305/0x34e0 [ 673.935880][ C0] ? __lock_acquire+0x1465/0x7c40 [ 673.940952][ C0] ? mark_lock+0x94/0x320 [ 673.945300][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 673.950340][ C0] ? lock_chain_count+0x20/0x20 [ 673.955232][ C0] ? dummy_free_streams+0x520/0x520 [ 673.960443][ C0] __hrtimer_run_queues+0x522/0xc90 [ 673.965656][ C0] ? dummy_free_streams+0x520/0x520 [ 673.970894][ C0] ? hrtimer_interrupt+0x980/0x980 [ 673.976022][ C0] hrtimer_run_softirq+0x173/0x290 [ 673.981164][ C0] handle_softirqs+0x291/0x910 [ 673.985967][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 673.990854][ C0] ? do_softirq+0x210/0x210 [ 673.995366][ C0] ? hrtimer_interrupt+0x775/0x980 [ 674.000484][ C0] __irq_exit_rcu+0x13b/0x230 [ 674.005181][ C0] ? irq_exit_rcu+0x20/0x20 [ 674.009710][ C0] irq_exit_rcu+0x5/0x20 [ 674.013954][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 674.019601][ C0] [ 674.022537][ C0] [ 674.025484][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 674.031465][ C0] RIP: 0010:queue_delayed_work_on+0x1a7/0x1f0 [ 674.037535][ C0] Code: 4d 85 ed 75 16 e8 79 f9 2d 00 eb 15 e8 72 f9 2d 00 e8 ed 4e de 08 4d 85 ed 74 ea e8 63 f9 2d 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> b8 00 00 00 00 00 fc ff df 49 c7 04 06 00 00 00 00 41 c7 44 06 [ 674.057144][ C0] RSP: 0018:ffffc90002dd7b60 EFLAGS: 00000293 [ 674.063232][ C0] RAX: ffffffff8154397d RBX: 0000000000000000 RCX: ffff88801c730000 [ 674.071212][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.079181][ C0] RBP: ffffc90002dd7c30 R08: ffffffff90b0f32f R09: 1ffffffff2161e65 [ 674.087150][ C0] R10: dffffc0000000000 R11: fffffbfff2161e66 R12: ffffffff81557801 [ 674.095137][ C0] R13: 0000000000000200 R14: 1ffff920005baf70 R15: 0000000000000000 [ 674.103106][ C0] ? process_one_work+0x761/0x1160 [ 674.108234][ C0] ? queue_delayed_work_on+0x19d/0x1f0 [ 674.113700][ C0] ? delayed_work_timer_fn+0x80/0x80 [ 674.119005][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 674.124948][ C0] ? _raw_spin_unlock+0x40/0x40 [ 674.129822][ C0] ? nsim_dev_hwstats_traffic_work+0x155/0x1a0 [ 674.135992][ C0] ? process_one_work+0x7b4/0x1160 [ 674.141127][ C0] process_one_work+0x8ab/0x1160 [ 674.146094][ C0] ? worker_detach_from_pool+0x240/0x240 [ 674.151739][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 674.156774][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 674.162336][ C0] ? wq_worker_running+0x97/0x190 [ 674.167376][ C0] worker_thread+0xaf5/0x12a0 [ 674.172080][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 674.178017][ C0] kthread+0x29d/0x330 [ 674.182082][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 674.187105][ C0] ? kthread_blkcg+0xd0/0xd0 [ 674.191714][ C0] ret_from_fork+0x1f/0x30 [ 674.196145][ C0] [ 674.199180][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 674.206484][ C0] CPU: 0 PID: 152 Comm: kworker/0:3 Not tainted syzkaller #0 [ 674.213859][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 674.223915][ C0] Workqueue: events nsim_dev_hwstats_traffic_work [ 674.230367][ C0] Call Trace: [ 674.233647][ C0] [ 674.236493][ C0] dump_stack_lvl+0x188/0x24e [ 674.241197][ C0] ? memcpy+0x3c/0x60 [ 674.245201][ C0] ? show_regs_print_info+0x12/0x12 [ 674.250424][ C0] ? load_image+0x410/0x410 [ 674.254943][ C0] panic+0x2d3/0x710 [ 674.258858][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 674.263456][ C0] ? ret_from_fork+0x1f/0x30 [ 674.268150][ C0] __warn+0x2f8/0x4f0 [ 674.272140][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 674.276912][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 674.281690][ C0] report_bug+0x2ba/0x4f0 [ 674.286044][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 674.290823][ C0] handle_bug+0x3a/0x70 [ 674.294991][ C0] exc_invalid_op+0x16/0x40 [ 674.299586][ C0] asm_exc_invalid_op+0x16/0x20 [ 674.304438][ C0] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 674.309815][ C0] Code: 49 8b 0e 48 c7 c0 80 e4 3e 8b 49 c7 c0 a0 e4 3e 8b 4c 0f 44 c0 48 c7 c7 40 e4 3e 8b 48 c7 c6 0d f9 63 8c 89 ea e8 f4 09 ce fa <0f> 0b e9 c4 fe ff ff e8 08 83 02 fb 49 bc 00 00 00 00 00 fc ff df [ 674.329421][ C0] RSP: 0018:ffffc90000007768 EFLAGS: 00010046 [ 674.335491][ C0] RAX: dd46edf208215d00 RBX: ffff8881447740e0 RCX: ffff88801c730000 [ 674.343466][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 674.351434][ C0] RBP: 0000000000000081 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 674.359420][ C0] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 674.367400][ C0] R13: ffff88814477410d R14: ffff8881447740e8 R15: ffff888055d9d33a [ 674.375381][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 674.380151][ C0] hidg_set_alt+0x126/0xa00 [ 674.384671][ C0] ? usb_gadget_set_state+0x142/0x310 [ 674.390054][ C0] set_config+0x6e8/0xf70 [ 674.394397][ C0] composite_setup+0x194c/0x2b00 [ 674.399357][ C0] configfs_composite_setup+0xc3/0x100 [ 674.404863][ C0] dummy_timer+0x1305/0x34e0 [ 674.409472][ C0] ? __lock_acquire+0x1465/0x7c40 [ 674.414517][ C0] ? mark_lock+0x94/0x320 [ 674.418870][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 674.423899][ C0] ? lock_chain_count+0x20/0x20 [ 674.428759][ C0] ? dummy_free_streams+0x520/0x520 [ 674.433967][ C0] __hrtimer_run_queues+0x522/0xc90 [ 674.439175][ C0] ? dummy_free_streams+0x520/0x520 [ 674.444381][ C0] ? hrtimer_interrupt+0x980/0x980 [ 674.449503][ C0] hrtimer_run_softirq+0x173/0x290 [ 674.454624][ C0] handle_softirqs+0x291/0x910 [ 674.459393][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 674.464250][ C0] ? do_softirq+0x210/0x210 [ 674.468749][ C0] ? hrtimer_interrupt+0x775/0x980 [ 674.473864][ C0] __irq_exit_rcu+0x13b/0x230 [ 674.478535][ C0] ? irq_exit_rcu+0x20/0x20 [ 674.483048][ C0] irq_exit_rcu+0x5/0x20 [ 674.487322][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 674.492961][ C0] [ 674.495897][ C0] [ 674.498838][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 674.504840][ C0] RIP: 0010:queue_delayed_work_on+0x1a7/0x1f0 [ 674.510913][ C0] Code: 4d 85 ed 75 16 e8 79 f9 2d 00 eb 15 e8 72 f9 2d 00 e8 ed 4e de 08 4d 85 ed 74 ea e8 63 f9 2d 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> b8 00 00 00 00 00 fc ff df 49 c7 04 06 00 00 00 00 41 c7 44 06 [ 674.530522][ C0] RSP: 0018:ffffc90002dd7b60 EFLAGS: 00000293 [ 674.536593][ C0] RAX: ffffffff8154397d RBX: 0000000000000000 RCX: ffff88801c730000 [ 674.544582][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.552558][ C0] RBP: ffffc90002dd7c30 R08: ffffffff90b0f32f R09: 1ffffffff2161e65 [ 674.560538][ C0] R10: dffffc0000000000 R11: fffffbfff2161e66 R12: ffffffff81557801 [ 674.568538][ C0] R13: 0000000000000200 R14: 1ffff920005baf70 R15: 0000000000000000 [ 674.576516][ C0] ? process_one_work+0x761/0x1160 [ 674.581637][ C0] ? queue_delayed_work_on+0x19d/0x1f0 [ 674.587117][ C0] ? delayed_work_timer_fn+0x80/0x80 [ 674.592398][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 674.598293][ C0] ? _raw_spin_unlock+0x40/0x40 [ 674.603143][ C0] ? nsim_dev_hwstats_traffic_work+0x155/0x1a0 [ 674.609315][ C0] ? process_one_work+0x7b4/0x1160 [ 674.614425][ C0] process_one_work+0x8ab/0x1160 [ 674.619366][ C0] ? worker_detach_from_pool+0x240/0x240 [ 674.625006][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 674.630053][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 674.635639][ C0] ? wq_worker_running+0x97/0x190 [ 674.640672][ C0] worker_thread+0xaf5/0x12a0 [ 674.645358][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 674.651287][ C0] kthread+0x29d/0x330 [ 674.655370][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 674.660410][ C0] ? kthread_blkcg+0xd0/0xd0 [ 674.665013][ C0] ret_from_fork+0x1f/0x30 [ 674.669459][ C0] [ 674.672542][ C0] Kernel Offset: disabled [ 674.676973][ C0] Rebooting in 86400 seconds..