last executing test programs: 1m19.408713272s ago: executing program 2 (id=177): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 1m19.35221105s ago: executing program 2 (id=178): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x40f, &(0x7f0000000000)={0x0, 0x0, 0x71, 0x2}) 1m19.237389055s ago: executing program 2 (id=180): r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 1m18.619171155s ago: executing program 2 (id=183): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0x80020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f}) 1m17.117483782s ago: executing program 2 (id=191): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) 1m13.312897496s ago: executing program 2 (id=228): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) 1m12.340125273s ago: executing program 32 (id=228): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) 6.001098919s ago: executing program 0 (id=661): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) 5.704755151s ago: executing program 5 (id=663): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)={0x0, 0x7ff, 0x0, 0x0, 0x9}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) open_by_handle_at(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\f'], 0x232040) 5.693442538s ago: executing program 0 (id=664): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.388926177s ago: executing program 5 (id=666): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14}, 0x8f) 5.173327774s ago: executing program 0 (id=667): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x2000000, @b}}) 5.12114617s ago: executing program 5 (id=668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0) 4.625051448s ago: executing program 5 (id=670): mount$fuse(0x0, 0x0, 0x0, 0x281063, &(0x7f00000001c0)=ANY=[@ANYBLOB="f0", @ANYRESDEC, @ANYBLOB=',rootmode=000000000000000000400', @ANYRESDEC]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0x11) 4.561135088s ago: executing program 0 (id=671): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0x7) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 4.309708869s ago: executing program 5 (id=673): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYRES64=0x0], 0x1, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 3.967679336s ago: executing program 4 (id=675): pselect6(0x0, 0x0, &(0x7f0000000000)={0x1c, 0x26d7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x9}, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 3.550107845s ago: executing program 1 (id=676): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') 3.385149932s ago: executing program 5 (id=677): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 3.301400356s ago: executing program 3 (id=678): syz_mount_image$erofs(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', 0x3808000, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 3.142772441s ago: executing program 1 (id=679): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 3.04045337s ago: executing program 1 (id=680): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f00000001c0)={[{@numtail}, {@shortname_win95}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@numtail}]}, 0x3, 0x350, &(0x7f0000000900)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.725103174s ago: executing program 3 (id=681): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e23, 0x1, 'lc\x00', 0x12, 0x6}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000000040)={0x20000000000084, @remote, 0x3, 0x1, 'none\x00', 0x20, 0x0, 0x1}, 0x2c) 2.548066718s ago: executing program 0 (id=682): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f00000009c0)=ANY=[], 0x1, 0x19b, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7) preadv2(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)=""/100, 0x64}], 0x2, 0x0, 0x4, 0x0) 2.504744052s ago: executing program 4 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000400000000000eb13000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) 2.275741742s ago: executing program 1 (id=684): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 2.098680058s ago: executing program 4 (id=685): r0 = epoll_create1(0x0) r1 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x90000000}) 1.973830056s ago: executing program 3 (id=686): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) tkill(0x0, 0x7) 1.921450257s ago: executing program 4 (id=687): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x18) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000280)) 1.312599167s ago: executing program 3 (id=688): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') unshare(0x22020400) fcntl$setflags(r0, 0x2, 0x0) 1.261679721s ago: executing program 1 (id=689): r0 = userfaultfd(0x801) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000009}) 1.075516103s ago: executing program 0 (id=690): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) 829.638175ms ago: executing program 3 (id=691): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)=[0x100000001], 0x0, 0x2, 0x1, 0x1}}, 0x40) 784.133063ms ago: executing program 1 (id=692): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpjquota}, {@i_version}, {@discard}, {@noload}, {@resuid}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 783.014374ms ago: executing program 4 (id=693): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', 0x34) mount$bpf(0x0, &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0), 0x10, &(0x7f00000019c0)={[{@mode={'mode', 0x3d, 0x8001}}]}) 309.526073ms ago: executing program 3 (id=694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 4 (id=695): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 86.364299][ T5805] cgroup: Unknown subsys name 'net' [ 86.604318][ T5805] cgroup: Unknown subsys name 'cpuset' [ 86.658714][ T5805] cgroup: Unknown subsys name 'rlimit' [ 86.968638][ T9] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 88.725562][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.135550][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.143117][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.173205][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.179962][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.182800][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.184777][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.186310][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.187912][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.219048][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.235289][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.245275][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.245735][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.247878][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.251572][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.253542][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.288940][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.322719][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.326969][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.344665][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.364266][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.375451][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.381506][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.389982][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.391859][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.409746][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.581651][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 92.595730][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 92.607636][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 92.685459][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 92.710779][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 93.044115][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.045330][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.045495][ T5826] bridge_slave_0: entered allmulticast mode [ 93.048709][ T5826] bridge_slave_0: entered promiscuous mode [ 93.062686][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.062957][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.063592][ T5825] bridge_slave_0: entered allmulticast mode [ 93.066770][ T5825] bridge_slave_0: entered promiscuous mode [ 93.097861][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.098867][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.099133][ T5823] bridge_slave_0: entered allmulticast mode [ 93.102526][ T5823] bridge_slave_0: entered promiscuous mode [ 93.134730][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.135007][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.135274][ T5826] bridge_slave_1: entered allmulticast mode [ 93.137304][ T5826] bridge_slave_1: entered promiscuous mode [ 93.169176][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.169367][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.169528][ T5825] bridge_slave_1: entered allmulticast mode [ 93.171503][ T5825] bridge_slave_1: entered promiscuous mode [ 93.198585][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.198952][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.199188][ T5823] bridge_slave_1: entered allmulticast mode [ 93.202393][ T5823] bridge_slave_1: entered promiscuous mode [ 93.262711][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.262902][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.263063][ T5824] bridge_slave_0: entered allmulticast mode [ 93.265063][ T5824] bridge_slave_0: entered promiscuous mode [ 93.293308][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.293495][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.293645][ T5827] bridge_slave_0: entered allmulticast mode [ 93.297328][ T5827] bridge_slave_0: entered promiscuous mode [ 93.320527][ T60] Bluetooth: hci3: command tx timeout [ 93.344947][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.345266][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.345541][ T5824] bridge_slave_1: entered allmulticast mode [ 93.347857][ T5824] bridge_slave_1: entered promiscuous mode [ 93.391848][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.392243][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.392508][ T5827] bridge_slave_1: entered allmulticast mode [ 93.394583][ T5827] bridge_slave_1: entered promiscuous mode [ 93.399556][ T60] Bluetooth: hci2: command tx timeout [ 93.399668][ T60] Bluetooth: hci0: command tx timeout [ 93.411314][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.453736][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.478266][ T5835] Bluetooth: hci1: command tx timeout [ 93.478406][ T5835] Bluetooth: hci4: command tx timeout [ 93.478644][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.513601][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.519905][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.552601][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.609319][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.632037][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.675895][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.697775][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.709903][ T5826] team0: Port device team_slave_0 added [ 93.713072][ T5825] team0: Port device team_slave_0 added [ 93.743425][ T5823] team0: Port device team_slave_0 added [ 93.762852][ T5826] team0: Port device team_slave_1 added [ 93.765604][ T5825] team0: Port device team_slave_1 added [ 93.796712][ T5823] team0: Port device team_slave_1 added [ 93.862789][ T5824] team0: Port device team_slave_0 added [ 93.883655][ T5827] team0: Port device team_slave_0 added [ 93.922024][ T5824] team0: Port device team_slave_1 added [ 93.941682][ T5827] team0: Port device team_slave_1 added [ 93.943130][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.943140][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.943154][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.945856][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.945865][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.945879][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.974344][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.974360][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.974383][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.002835][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.002850][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.002874][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.005304][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.005316][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.005337][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.037667][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.037683][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.037707][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.117213][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.117229][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.117251][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.124939][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.124955][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.124978][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.141975][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.141991][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.142013][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.145050][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.145063][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.145084][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.353246][ T5826] hsr_slave_0: entered promiscuous mode [ 94.355502][ T5826] hsr_slave_1: entered promiscuous mode [ 94.375410][ T5825] hsr_slave_0: entered promiscuous mode [ 94.377573][ T5825] hsr_slave_1: entered promiscuous mode [ 94.380194][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 94.380294][ T5825] Cannot create hsr debugfs directory [ 94.394501][ T5823] hsr_slave_0: entered promiscuous mode [ 94.396546][ T5823] hsr_slave_1: entered promiscuous mode [ 94.399569][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 94.399592][ T5823] Cannot create hsr debugfs directory [ 94.862802][ T5824] hsr_slave_0: entered promiscuous mode [ 94.864086][ T5824] hsr_slave_1: entered promiscuous mode [ 94.865104][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 94.865130][ T5824] Cannot create hsr debugfs directory [ 94.875954][ T5827] hsr_slave_0: entered promiscuous mode [ 94.877944][ T5827] hsr_slave_1: entered promiscuous mode [ 94.880743][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 94.880766][ T5827] Cannot create hsr debugfs directory [ 95.408302][ T60] Bluetooth: hci3: command tx timeout [ 95.478432][ T60] Bluetooth: hci0: command tx timeout [ 95.478467][ T60] Bluetooth: hci2: command tx timeout [ 95.558361][ T5835] Bluetooth: hci4: command tx timeout [ 95.558400][ T5835] Bluetooth: hci1: command tx timeout [ 95.775035][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.817573][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.822084][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.854073][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.856595][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.888975][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.909915][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.944094][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.077929][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.132413][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.143861][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.182869][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.185564][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.209805][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.236569][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.264261][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.401597][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.422426][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.427587][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.461997][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.467015][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.507431][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.544319][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.584193][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.739874][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.774031][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.795907][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.837153][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.863914][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.894295][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.927534][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.954612][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.994710][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.128541][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.173837][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.191474][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.233568][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.246110][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.271848][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.284794][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.294786][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.334265][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.397342][ T1567] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.400570][ T1567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.437213][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.478546][ T60] Bluetooth: hci3: command tx timeout [ 97.479253][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.479448][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.558328][ T60] Bluetooth: hci2: command tx timeout [ 97.558360][ T60] Bluetooth: hci0: command tx timeout [ 97.616834][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.639822][ T5835] Bluetooth: hci1: command tx timeout [ 97.639858][ T5835] Bluetooth: hci4: command tx timeout [ 97.707149][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.707325][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.767643][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.803034][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.803623][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.935140][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.035488][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.055979][ T1586] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.056164][ T1586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.101759][ T1586] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.101906][ T1586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.308628][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.351357][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.384739][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.384965][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.470802][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.470925][ T1565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.602513][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.639073][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.657456][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.657616][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.743143][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.743444][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.881387][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.200118][ T5826] veth0_vlan: entered promiscuous mode [ 99.345478][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.385796][ T5826] veth1_vlan: entered promiscuous mode [ 99.558345][ T60] Bluetooth: hci3: command tx timeout [ 99.638244][ T5835] Bluetooth: hci2: command tx timeout [ 99.638297][ T60] Bluetooth: hci0: command tx timeout [ 99.715943][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.718275][ T60] Bluetooth: hci4: command tx timeout [ 99.718308][ T60] Bluetooth: hci1: command tx timeout [ 99.775553][ T5826] veth0_macvtap: entered promiscuous mode [ 99.816154][ T5826] veth1_macvtap: entered promiscuous mode [ 99.865587][ T5825] veth0_vlan: entered promiscuous mode [ 99.885058][ T5823] veth0_vlan: entered promiscuous mode [ 99.894071][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.941925][ T5825] veth1_vlan: entered promiscuous mode [ 99.954606][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.956396][ T5823] veth1_vlan: entered promiscuous mode [ 100.003599][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.077338][ T1039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.105499][ T1039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.129745][ T1039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.134822][ T5824] veth0_vlan: entered promiscuous mode [ 100.155394][ T1039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.353034][ T5824] veth1_vlan: entered promiscuous mode [ 100.439988][ T5825] veth0_macvtap: entered promiscuous mode [ 100.510542][ T5823] veth0_macvtap: entered promiscuous mode [ 100.576336][ T5827] veth0_vlan: entered promiscuous mode [ 100.617231][ T5825] veth1_macvtap: entered promiscuous mode [ 100.625118][ T5823] veth1_macvtap: entered promiscuous mode [ 100.719517][ T5827] veth1_vlan: entered promiscuous mode [ 100.766462][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.766485][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.806415][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.827088][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.883991][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.886828][ T5824] veth0_macvtap: entered promiscuous mode [ 100.907861][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.941716][ T5824] veth1_macvtap: entered promiscuous mode [ 100.955911][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.957473][ T1565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.957490][ T1565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.997726][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.027500][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.043283][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.065136][ T44] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.093550][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.102748][ T44] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.123186][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.235000][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.236621][ T5827] veth0_macvtap: entered promiscuous mode [ 101.460341][ T5827] veth1_macvtap: entered promiscuous mode [ 101.474634][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.891468][ T1320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.941950][ T1320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.975850][ T1320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.015507][ T1320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.020197][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.020216][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.166011][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.236698][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.236717][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.449710][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.643871][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.643892][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.748566][ T1565] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.795367][ T1565] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.799883][ T1565] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.887715][ T1565] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.927527][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.927549][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.003721][ T5941] loop3: detected capacity change from 0 to 32768 [ 103.329884][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.329908][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.063439][ T5942] ialloc: diAlloc returned -5! [ 104.104671][ T38] audit: type=1800 audit(1776394285.033:2): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 104.104776][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.104791][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.447714][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.463240][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.583099][ T5948] loop0: detected capacity change from 0 to 2048 [ 104.723409][ T5948] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.723972][ T5948] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 104.723989][ T5948] UDF-fs: Scanning with blocksize 512 failed [ 104.845190][ T1291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.845211][ T1291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.968757][ T5948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.901858][ T5996] netlink: 'syz.2.27': attribute type 13 has an invalid length. [ 108.924076][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.098595][ T5996] gretap0: refused to change device tx_queue_len [ 109.099279][ T5996] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 109.227258][ T6004] netlink: 'syz.3.30': attribute type 2 has an invalid length. [ 109.258252][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 109.286642][ T6001] loop4: detected capacity change from 0 to 4096 [ 109.342525][ T5908] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.342555][ T5908] usb 2-1: config 0 has no interface number 0 [ 109.342608][ T5908] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.342633][ T5908] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.342675][ T5908] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 109.342698][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.358213][ T6001] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 109.699614][ T5908] usb 2-1: config 0 descriptor?? [ 110.018424][ T6008] loop3: detected capacity change from 0 to 1764 [ 110.816297][ T5908] uclogic 0003:28BD:0094.0001: failed retrieving string descriptor #100: -71 [ 110.816370][ T5908] uclogic 0003:28BD:0094.0001: failed retrieving pen parameters: -71 [ 110.816388][ T5908] uclogic 0003:28BD:0094.0001: pen probing failed: -71 [ 110.816406][ T5908] uclogic 0003:28BD:0094.0001: failed probing parameters: -71 [ 110.816529][ T5908] uclogic 0003:28BD:0094.0001: probe with driver uclogic failed with error -71 [ 110.845749][ T6008] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 111.281537][ T5908] usb 2-1: USB disconnect, device number 2 [ 112.102553][ T6014] loop0: detected capacity change from 0 to 32768 [ 112.221174][ T6039] loop3: detected capacity change from 0 to 512 [ 112.256206][ T6042] loop1: detected capacity change from 0 to 64 [ 112.684214][ T6039] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #11: comm syz.3.43: unexpected EA_INODE flag [ 112.685433][ T6039] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 112.708575][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 112.708600][ C1] EXT4-fs (loop3): initial error at time 1776394293: ext4_orphan_get:1397: inode 11 [ 112.708630][ C1] EXT4-fs (loop3): last error at time 1776394293: ext4_orphan_get:1397: inode 11 [ 112.837011][ T6039] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.43: couldn't read orphan inode 11 (err -117) [ 112.840714][ T6039] loop3: lost filesystem error report for type 5 error -117 [ 112.952378][ T6039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.738820][ T6058] loop4: detected capacity change from 0 to 512 [ 113.742303][ T6058] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.742325][ T6058] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.771948][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.080455][ T6058] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 114.080588][ T6058] EXT4-fs (loop4): 1 truncate cleaned up [ 114.116289][ T6058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.595843][ T6069] loop0: detected capacity change from 0 to 512 [ 114.622899][ T6069] EXT4-fs: Ignoring removed orlov option [ 114.703279][ T6069] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.834753][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.972570][ T6069] EXT4-fs (loop0): 1 orphan inode deleted [ 114.972598][ T6069] EXT4-fs (loop0): 1 truncate cleaned up [ 115.052043][ T6069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.079088][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.114768][ T6081] loop2: detected capacity change from 0 to 1024 [ 115.117279][ T6081] EXT4-fs: Ignoring removed i_version option [ 115.117312][ T6081] EXT4-fs: inline encryption not supported [ 115.291664][ T32] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 115.291695][ T32] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 115.291713][ T32] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 115.291732][ T32] usb 4-1: config 220 has no interface number 2 [ 115.291811][ T32] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 115.291838][ T32] usb 4-1: config 220 interface 0 has no altsetting 0 [ 115.291855][ T32] usb 4-1: config 220 interface 76 has no altsetting 0 [ 115.291871][ T32] usb 4-1: config 220 interface 1 has no altsetting 0 [ 115.341669][ T32] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 115.341718][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.341738][ T32] usb 4-1: Product: syz [ 115.341751][ T32] usb 4-1: Manufacturer: syz [ 115.341765][ T32] usb 4-1: SerialNumber: syz [ 115.473302][ T6081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.613230][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.027941][ T32] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 116.027979][ T32] uvcvideo 4-1:220.0: No valid video chain found. [ 116.071576][ T32] usb 4-1: selecting invalid altsetting 0 [ 116.180339][ T32] usb 4-1: selecting invalid altsetting 0 [ 116.180381][ T32] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 116.236843][ T6081] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 116.263298][ T32] usb 4-1: USB disconnect, device number 2 [ 116.470105][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.014353][ T6108] vlan2: entered allmulticast mode [ 117.014378][ T6108] bond0: entered allmulticast mode [ 117.014391][ T6108] bond_slave_0: entered allmulticast mode [ 117.014411][ T6108] bond_slave_1: entered allmulticast mode [ 117.145204][ T6115] netlink: 'syz.3.73': attribute type 13 has an invalid length. [ 117.145380][ T6115] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.73'. [ 117.626725][ T6131] loop2: detected capacity change from 0 to 256 [ 117.721710][ T6135] loop0: detected capacity change from 0 to 64 [ 117.723707][ T6135] ======================================================= [ 117.723707][ T6135] WARNING: The mand mount option has been deprecated and [ 117.723707][ T6135] and is ignored by this kernel. Remove the mand [ 117.723707][ T6135] option from the mount to silence this warning. [ 117.723707][ T6135] ======================================================= [ 117.941768][ T6131] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 118.334892][ T6147] sg_write: data in/out 327646/48 bytes for SCSI command 0x0-- guessing data in; [ 118.334892][ T6147] program syz.0.85 not setting count and/or reply_len properly [ 118.415692][ T6148] vivid-002: disconnect [ 119.077347][ T6145] vivid-002: reconnect [ 119.111489][ T6152] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 119.111528][ T6152] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 119.111567][ T6152] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 119.275354][ T6152] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.518546][ T6152] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 119.923697][ T6150] loop3: detected capacity change from 0 to 32768 [ 120.271061][ T6155] loop2: detected capacity change from 0 to 32768 [ 120.294789][ T6150] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 120.480170][ T6155] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.600288][ T6159] loop1: detected capacity change from 0 to 32768 [ 120.678245][ T6150] XFS (loop3): Ending clean mount [ 120.681292][ T6155] XFS (loop2): Ending clean mount [ 120.796458][ T6159] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.957566][ T5826] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 120.963322][ T5824] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.004410][ T6159] XFS (loop1): Ending clean mount [ 121.407739][ T5827] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.683230][ T6163] loop4: detected capacity change from 0 to 32768 [ 121.892426][ T6163] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.095424][ T6163] XFS (loop4): Ending clean mount [ 122.436850][ T5823] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.984561][ T6217] netlink: 'syz.3.105': attribute type 6 has an invalid length. [ 123.160776][ T6218] loop0: detected capacity change from 0 to 4096 [ 124.008266][ T6238] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.412488][ T6218] NILFS (loop0): unable to set label with more than 80 bytes [ 124.533746][ T6246] loop4: detected capacity change from 0 to 512 [ 124.919961][ T5893] IPVS: starting estimator thread 0... [ 125.065256][ T6251] IPVS: using max 7 ests per chain, 16800 per kthread [ 125.073660][ T6246] FAT-fs (loop4): Directory bread(block 199916) failed [ 125.073695][ T6246] FAT-fs (loop4): Directory bread(block 199917) failed [ 125.073717][ T6246] FAT-fs (loop4): Directory bread(block 199918) failed [ 125.073737][ T6246] FAT-fs (loop4): Directory bread(block 199919) failed [ 125.073758][ T6246] FAT-fs (loop4): Directory bread(block 199920) failed [ 125.073778][ T6246] FAT-fs (loop4): Directory bread(block 199921) failed [ 125.073797][ T6246] FAT-fs (loop4): Directory bread(block 199922) failed [ 125.073817][ T6246] FAT-fs (loop4): Directory bread(block 199923) failed [ 125.287404][ T6246] FAT-fs (loop4): Directory bread(block 199916) failed [ 125.287426][ T6246] FAT-fs (loop4): Directory bread(block 199917) failed [ 126.006498][ T6242] loop1: detected capacity change from 0 to 32768 [ 126.418714][ T6250] loop3: detected capacity change from 0 to 32768 [ 126.870465][ T6277] netlink: 'syz.1.125': attribute type 21 has an invalid length. [ 126.870490][ T6277] netlink: 128 bytes leftover after parsing attributes in process `syz.1.125'. [ 126.870581][ T6277] netlink: 'syz.1.125': attribute type 4 has an invalid length. [ 126.870594][ T6277] netlink: 'syz.1.125': attribute type 3 has an invalid length. [ 126.870607][ T6277] netlink: 3 bytes leftover after parsing attributes in process `syz.1.125'. [ 127.034654][ T6281] loop2: detected capacity change from 0 to 2048 [ 127.188919][ T6281] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.546876][ T6289] netlink: 56 bytes leftover after parsing attributes in process `syz.3.132'. [ 128.668216][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.820862][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.820897][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.820938][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 128.820961][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.909516][ T9] usb 1-1: config 0 descriptor?? [ 129.273284][ T6331] loop2: detected capacity change from 0 to 128 [ 129.516457][ T6337] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.572621][ T6331] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.578200][ T9] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 129.578241][ T9] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 129.578267][ T9] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 129.578293][ T9] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 129.578317][ T9] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 129.578342][ T9] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 129.578367][ T9] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 129.636773][ T6331] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.769350][ T9] usb 1-1: USB disconnect, device number 2 [ 130.048871][ T5824] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.792153][ T6365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.165'. [ 130.826929][ T6366] loop3: detected capacity change from 0 to 256 [ 130.924547][ T6372] netlink: 'syz.4.169': attribute type 12 has an invalid length. [ 130.924570][ T6372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.169'. [ 131.242767][ T6377] loop0: detected capacity change from 0 to 256 [ 131.285962][ T6366] FAT-fs (loop3): Directory bread(block 64) failed [ 131.285999][ T6366] FAT-fs (loop3): Directory bread(block 65) failed [ 131.286110][ T6366] FAT-fs (loop3): Directory bread(block 66) failed [ 131.286134][ T6366] FAT-fs (loop3): Directory bread(block 67) failed [ 131.290096][ T6366] FAT-fs (loop3): Directory bread(block 68) failed [ 131.290131][ T6366] FAT-fs (loop3): Directory bread(block 69) failed [ 131.290232][ T6366] FAT-fs (loop3): Directory bread(block 70) failed [ 131.290253][ T6366] FAT-fs (loop3): Directory bread(block 71) failed [ 131.290344][ T6366] FAT-fs (loop3): Directory bread(block 72) failed [ 131.290365][ T6366] FAT-fs (loop3): Directory bread(block 73) failed [ 131.640111][ T37] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 131.813177][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 131.831366][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.831401][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.831424][ T37] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.831465][ T37] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.831488][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.124437][ T37] usb 5-1: config 0 descriptor?? [ 132.895221][ T6403] loop2: detected capacity change from 0 to 512 [ 133.003011][ T6403] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.028900][ T37] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 133.028935][ T37] microsoft 0003:045E:07DA.0003: no inputs found [ 133.028948][ T37] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 133.063713][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.063850][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.190570][ T37] usb 5-1: USB disconnect, device number 2 [ 133.425150][ T6404] fido_id[6404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 133.752314][ T6403] EXT4-fs (loop2): 1 truncate cleaned up [ 133.821104][ T6415] loop3: detected capacity change from 0 to 64 [ 133.846300][ T6403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.496908][ T5824] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 134.905785][ T5824] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 134.947916][ T6435] ip6tnl1: entered allmulticast mode [ 134.967610][ T5824] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 134.972041][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 135.131456][ T6443] loop1: detected capacity change from 0 to 4096 [ 135.477848][ T6451] tipc: Started in network mode [ 135.477877][ T6451] tipc: Node identity ac14140f, cluster identity 4711 [ 135.502922][ T6451] tipc: New replicast peer: 10.1.1.2 [ 135.540358][ T6451] tipc: Enabled bearer , priority 10 [ 135.746992][ T6455] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.332959][ T6467] loop0: detected capacity change from 0 to 164 [ 136.381482][ T6467] rock: directory entry would overflow storage [ 136.381499][ T6467] rock: sig=0x66, size=4, remaining=3 [ 136.498938][ T6467] rock: directory entry would overflow storage [ 136.498955][ T6467] rock: sig=0x66, size=4, remaining=3 [ 136.499264][ T6467] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 136.860472][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 136.860501][ T6476] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 136.931763][ T6478] netlink: 256 bytes leftover after parsing attributes in process `syz.3.217'. [ 136.931788][ T6478] netlink: 64 bytes leftover after parsing attributes in process `syz.3.217'. [ 137.304902][ T37] tipc: Node number set to 2886997007 [ 137.728715][ T6494] loop4: detected capacity change from 0 to 2048 [ 137.824093][ T6494] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.866972][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.703248][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.769596][ T6492] loop0: detected capacity change from 0 to 32768 [ 138.950115][ T6492] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.060260][ T6492] XFS (loop0): Ending clean mount [ 139.242247][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 139.268326][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 139.354231][ T6523] input: syz0 as /devices/virtual/input/input7 [ 139.376953][ T5825] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.844301][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.902869][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.924409][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.931559][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.932436][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.272515][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.328792][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 140.328825][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 140.848286][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.973421][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.018236][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 141.033751][ T9] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 141.033781][ T9] usb 5-1: config 1 has no interface number 0 [ 141.033830][ T9] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 141.033856][ T9] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 141.033880][ T9] usb 5-1: config 1 interface 105 has no altsetting 0 [ 141.085250][ T9] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 141.085281][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 141.085302][ T9] usb 5-1: Product: syz [ 141.085315][ T9] usb 5-1: Manufacturer: syz [ 141.085328][ T9] usb 5-1: SerialNumber: syz [ 141.211369][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 141.211479][ T6532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.211641][ T6532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.291659][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 141.515243][ T6547] mmap: syz.1.243 (6547) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.593860][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.620928][ T6550] loop3: detected capacity change from 0 to 2048 [ 141.657623][ T6550] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 141.657667][ T6550] NILFS (loop3): mounting unchecked fs [ 141.661340][ T6532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.661461][ T6532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.864512][ T9] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 141.887509][ T9] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 141.905904][ T6089] udevd[6089]: incorrect nilfs2 checksum on /dev/loop3 [ 142.059357][ T9] usb 5-1: USB disconnect, device number 3 [ 142.118633][ T5835] Bluetooth: hci1: command tx timeout [ 142.145153][ T6555] capability: warning: `syz.0.245' uses 32-bit capabilities (legacy support in use) [ 142.323490][ T6559] loop1: detected capacity change from 0 to 16 [ 142.355675][ T6559] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 142.381215][ T6550] NILFS (loop3): recovery complete [ 142.407278][ T6560] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.730481][ T6559] cramfs: Error -3 while decompressing! [ 142.730501][ T6559] cramfs: ffffffff999a31b8(42)->ffff888037ab7000(4096) [ 142.745453][ T6096] udevd[6096]: incorrect cramfs checksum on /dev/loop1 [ 142.929294][ T6011] udevd[6011]: incorrect cramfs checksum on /dev/loop1 [ 143.094174][ T6011] udevd[6011]: incorrect cramfs checksum on /dev/loop1 [ 143.282838][ T6571] capability: warning: `syz.1.251' uses deprecated v2 capabilities in a way that may be insecure [ 144.198184][ T5835] Bluetooth: hci1: command tx timeout [ 144.823156][ T6606] loop4: detected capacity change from 0 to 512 [ 144.997220][ T6614] syz.1.271 uses obsolete (PF_INET,SOCK_PACKET) [ 145.130914][ T6606] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.269: iget: bad extra_isize 58 (inode size 256) [ 145.130954][ T6606] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.186833][ C0] EXT4-fs (loop4): initial error at time 1776394326: ext4_xattr_inode_iget:441: inode 11 [ 145.186880][ C0] EXT4-fs (loop4): last error at time 1776394326: ext4_xattr_inode_iget:441: inode 11 [ 145.226357][ T6606] EXT4-fs (loop4): Remounting filesystem read-only [ 145.226585][ T6606] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 145.226672][ T6606] EXT4-fs (loop4): 1 orphan inode deleted [ 145.242400][ T6606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.443331][ T6622] loop3: detected capacity change from 0 to 256 [ 145.444931][ T6622] exfat: Deprecated parameter 'namecase' [ 145.445059][ T6622] exfat: Deprecated parameter 'namecase' [ 145.473690][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.610433][ T6622] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 145.752057][ T13] bridge_slave_1: left allmulticast mode [ 145.791395][ T6626] process 'syz.4.273' launched './file2' with NULL argv: empty string added [ 145.826189][ T13] bridge_slave_1: left promiscuous mode [ 145.903592][ T38] audit: type=1800 audit(1776394326.923:3): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.275" name="file2" dev="loop3" ino=1048627 res=0 errno=0 [ 145.948197][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.138270][ T5908] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.278226][ T5835] Bluetooth: hci1: command tx timeout [ 146.293629][ T13] bridge_slave_0: left allmulticast mode [ 146.293657][ T13] bridge_slave_0: left promiscuous mode [ 146.293926][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.312904][ T6631] vivid-000: disconnect [ 146.313335][ T6630] vivid-000: reconnect [ 146.318166][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 146.320259][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.320311][ T5908] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 146.320334][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.384662][ T5908] usb 5-1: config 0 descriptor?? [ 146.417877][ T5908] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 146.652167][ T5807] usb 5-1: USB disconnect, device number 4 [ 147.312430][ T6646] Bluetooth: MGMT ver 1.23 [ 147.393162][ T6648] loop4: detected capacity change from 0 to 256 [ 147.416049][ T6648] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 147.422587][ T6648] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 147.422621][ T6648] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 147.422633][ T6648] UDF-fs: Scanning with blocksize 512 failed [ 147.484818][ T6648] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 147.489468][ T6650] loop0: detected capacity change from 0 to 256 [ 147.490803][ T6648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.492587][ T6650] exfat: Deprecated parameter 'utf8' [ 147.492605][ T6650] exfat: Deprecated parameter 'utf8' [ 147.623982][ T6650] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 148.358456][ T5835] Bluetooth: hci1: command tx timeout [ 148.609129][ T6665] loop4: detected capacity change from 0 to 1024 [ 148.886662][ T6665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.886814][ T6665] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.039283][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.139153][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.165715][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 149.185011][ T13] bond0 (unregistering): Released all slaves [ 149.329193][ T6674] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.297'. [ 149.329496][ T6674] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 149.641905][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 149.641940][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 149.829499][ T6678] geneve2: entered promiscuous mode [ 149.829526][ T6678] geneve2: entered allmulticast mode [ 150.081471][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 49980 - 0 [ 150.247157][ T6689] loop4: detected capacity change from 0 to 512 [ 150.275996][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 49980 - 0 [ 150.276483][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 49980 - 0 [ 150.276528][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 49980 - 0 [ 150.352248][ T6689] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.579910][ T6689] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.305: Invalid block bitmap block 0 in block_group 0 [ 150.579948][ T6689] loop4: lost filesystem error report for type 5 error -117 [ 150.593015][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 150.593042][ C1] EXT4-fs (loop4): initial error at time 1776394331: ext4_read_block_bitmap_nowait:483 [ 150.593065][ C1] EXT4-fs (loop4): last error at time 1776394331: ext4_read_block_bitmap_nowait:483 [ 150.694926][ T6676] loop0: detected capacity change from 0 to 32768 [ 150.749963][ T6689] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 150.749991][ T6689] loop4: lost filesystem error report for type 5 error -117 [ 150.769725][ T6689] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.305: attempt to clear invalid blocks 983261 len 1 [ 150.769768][ T6689] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 150.844976][ T6689] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.305: Invalid inode table block 0 in block_group 0 [ 150.845014][ T6689] loop4: lost filesystem error report for type 5 error -117 [ 151.085334][ T6689] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 151.085362][ T6689] loop4: lost filesystem error report for type 5 error -117 [ 151.087989][ T6689] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 151.088014][ T6689] loop4: lost filesystem error report for type 5 error -117 [ 151.148359][ T6689] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.305: Invalid inode table block 0 in block_group 0 [ 151.148399][ T6689] loop4: lost filesystem error report for type 5 error -117 [ 151.257288][ T6705] loop3: detected capacity change from 0 to 512 [ 151.274542][ T6689] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 151.274569][ T6689] loop4: lost filesystem error report for type 5 error -117 [ 151.299599][ T6689] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.305: mark_inode_dirty error [ 151.299634][ T6689] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.307073][ T6689] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 151.307097][ T6689] loop4: lost filesystem error report for type 5 error -117 [ 151.342288][ T6689] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.305: Invalid inode table block 0 in block_group 0 [ 151.342327][ T6689] loop4: lost filesystem error report for type 5 error -117 [ 151.343121][ T6689] EXT4-fs (loop4): 1 truncate cleaned up [ 151.365774][ T6689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.481536][ T6705] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.307: couldn't read orphan inode 26 (err -116) [ 151.481576][ T6705] loop3: lost filesystem error report for type 5 error -116 [ 151.490904][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 151.490928][ C0] EXT4-fs (loop3): initial error at time 1776394332: ext4_orphan_get:1402 [ 151.490945][ C0] EXT4-fs (loop3): last error at time 1776394332: ext4_orphan_get:1402 [ 151.595108][ T6705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.595256][ T6705] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.754747][ T6705] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #3: comm syz.3.307: corrupted inode contents [ 151.862861][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.907535][ T6705] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #3: comm syz.3.307: mark_inode_dirty error [ 152.150468][ T6705] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.307: bg 0: block 64: padding at end of block bitmap is not set [ 152.279205][ T6705] Quota error (device loop3): write_blk: dquota write failed [ 152.279360][ T6705] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 152.279438][ T6705] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.307: Failed to acquire dquot type 0 [ 152.425907][ T6715] Quota error (device loop3): write_blk: dquota write failed [ 152.426053][ T6715] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 152.426113][ T6715] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.307: Failed to acquire dquot type 0 [ 152.591098][ T6690] loop1: detected capacity change from 0 to 32768 [ 152.642347][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 152.698373][ T6690] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 152.800164][ T6734] loop0: detected capacity change from 0 to 2048 [ 152.865434][ T6736] loop4: detected capacity change from 0 to 512 [ 152.866109][ T6690] XFS (loop1): Ending clean mount [ 152.880925][ T6736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.981021][ T6736] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 152.981046][ T6736] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 152.981369][ T6736] EXT4-fs (loop4): orphan cleanup on readonly fs [ 152.981532][ T6736] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 152.981630][ T6736] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 152.981657][ T6736] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 153.027948][ T6734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.028187][ T6734] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.192962][ T6736] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.313: bg 0: block 40: padding at end of block bitmap is not set [ 153.260804][ C1] EXT4-fs (loop4): initial error at time 1776394334: ext4_validate_block_bitmap:441 [ 153.260836][ C1] EXT4-fs (loop4): last error at time 1776394334: ext4_validate_block_bitmap:441 [ 153.267392][ T5827] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 153.290534][ T6736] EXT4-fs (loop4): Remounting filesystem read-only [ 153.290767][ T6736] EXT4-fs (loop4): 1 truncate cleaned up [ 153.467050][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.508515][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.554627][ T6736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.779434][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.060758][ T5807] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 154.069166][ T5485] 8021q: adding VLAN 0 to HW filter on device eth1 [ 154.137974][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 154.174591][ T6746] loop4: detected capacity change from 0 to 512 [ 154.201263][ T6746] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.239765][ T6746] EXT4-fs (loop4): orphan cleanup on readonly fs [ 154.272064][ T6746] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.317: Bad quota inum: 2, type: 2 [ 154.273203][ T6746] EXT4-fs (loop4): Remounting filesystem read-only [ 154.273223][ T6746] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 154.274594][ T6746] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 154.285471][ T6746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.374463][ T5807] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 154.424183][ T5807] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 154.424216][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.424235][ T5807] usb 4-1: Product: syz [ 154.424250][ T5807] usb 4-1: Manufacturer: syz [ 154.424264][ T5807] usb 4-1: SerialNumber: syz [ 154.680517][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.917298][ T5807] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 155.647651][ T6754] loop0: detected capacity change from 0 to 256 [ 155.663189][ T5807] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 155.862695][ T5807] usb 4-1: USB disconnect, device number 3 [ 155.973951][ T6754] FAT-fs (loop0): Directory bread(block 64) failed [ 155.973987][ T6754] FAT-fs (loop0): Directory bread(block 65) failed [ 155.974148][ T6754] FAT-fs (loop0): Directory bread(block 66) failed [ 155.974168][ T6754] FAT-fs (loop0): Directory bread(block 67) failed [ 155.974257][ T6754] FAT-fs (loop0): Directory bread(block 68) failed [ 155.974278][ T6754] FAT-fs (loop0): Directory bread(block 69) failed [ 155.974368][ T6754] FAT-fs (loop0): Directory bread(block 70) failed [ 155.974389][ T6754] FAT-fs (loop0): Directory bread(block 71) failed [ 155.974480][ T6754] FAT-fs (loop0): Directory bread(block 72) failed [ 155.974502][ T6754] FAT-fs (loop0): Directory bread(block 73) failed [ 156.538686][ T6768] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 157.510601][ T13] hsr_slave_0: left promiscuous mode [ 157.556027][ T13] hsr_slave_1: left promiscuous mode [ 157.682368][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.710273][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.863467][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.863520][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.629000][ T13] veth1_macvtap: left promiscuous mode [ 158.629371][ T13] veth0_macvtap: left promiscuous mode [ 158.675913][ T6813] loop1: detected capacity change from 0 to 8192 [ 158.679337][ T13] veth1_vlan: left promiscuous mode [ 158.702777][ T13] veth0_vlan: left promiscuous mode [ 158.943515][ T6819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.342'. [ 159.235753][ T6820] loop0: detected capacity change from 0 to 4096 [ 159.494403][ T6823] loop4: detected capacity change from 0 to 4096 [ 159.765586][ T6826] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.090074][ T6828] loop1: detected capacity change from 0 to 256 [ 160.810931][ T6840] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 160.955000][ T6823] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 161.022923][ T6823] Remounting filesystem read-only [ 161.727244][ T5823] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 161.863740][ T6844] Bluetooth: MGMT ver 1.23 [ 162.159667][ T6851] loop0: detected capacity change from 0 to 4096 [ 162.167047][ T6851] EXT4-fs: Ignoring removed orlov option [ 162.172090][ T6851] EXT4-fs (loop0): Test dummy encryption mode enabled [ 162.268805][ T13] team0 (unregistering): Port device team_slave_1 removed [ 162.273150][ T6851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.307127][ T38] audit: type=1800 audit(1776394343.323:4): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.355" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 162.329507][ T13] team0 (unregistering): Port device team_slave_0 removed [ 162.332220][ T6851] fs-verity (loop0, inode 15): Unknown hash algorithm number: 0 [ 162.415861][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.056566][ T5485] 8021q: adding VLAN 0 to HW filter on device eth2 [ 163.059639][ T6842] netlink: 'syz.1.351': attribute type 11 has an invalid length. [ 163.290009][ T6867] loop0: detected capacity change from 0 to 256 [ 163.454707][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.455096][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.455420][ T6526] bridge_slave_0: entered allmulticast mode [ 163.474034][ T6526] bridge_slave_0: entered promiscuous mode [ 163.547285][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.547601][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.547916][ T6526] bridge_slave_1: entered allmulticast mode [ 163.566636][ T6526] bridge_slave_1: entered promiscuous mode [ 163.922749][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.079432][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.673934][ T6891] ptrace attach of "./syz-executor exec"[5825] was attempted by "\x22"[6891] [ 164.696478][ T6526] team0: Port device team_slave_0 added [ 164.726124][ T6526] team0: Port device team_slave_1 added [ 165.003727][ T6899] [U] M٭Q& K4 [ 165.213501][ T6892] loop3: detected capacity change from 0 to 8192 [ 165.233855][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.233873][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.233900][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.287735][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.287753][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.287777][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.378298][ T6892] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.001085][ T6881] loop1: detected capacity change from 0 to 32768 [ 166.166191][ T6918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.378'. [ 166.302969][ T6881] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 166.355123][ T6526] hsr_slave_0: entered promiscuous mode [ 166.493260][ T6526] hsr_slave_1: entered promiscuous mode [ 166.512416][ T6526] debugfs: 'hsr0' already exists in 'hsr' [ 166.512444][ T6526] Cannot create hsr debugfs directory [ 166.589027][ T6881] XFS (loop1): Ending clean mount [ 166.764299][ T13] IPVS: stop unused estimator thread 0... [ 167.019443][ T5485] 8021q: adding VLAN 0 to HW filter on device eth3 [ 167.049674][ T38] audit: type=1326 audit(1776394348.023:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b61f4c819 code=0x7ffc0000 [ 167.049734][ T38] audit: type=1326 audit(1776394348.043:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b61f4c819 code=0x7ffc0000 [ 167.104755][ T38] audit: type=1326 audit(1776394348.073:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b61f4c819 code=0x7ffc0000 [ 167.104809][ T38] audit: type=1326 audit(1776394348.093:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f7b61f4c819 code=0x7ffc0000 [ 167.106307][ T38] audit: type=1326 audit(1776394348.123:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b61f4c819 code=0x7ffc0000 [ 167.106838][ T38] audit: type=1326 audit(1776394348.123:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b61f4c819 code=0x7ffc0000 [ 167.106996][ T38] audit: type=1326 audit(1776394348.123:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b61f4c819 code=0x7ffc0000 [ 167.107416][ T38] audit: type=1326 audit(1776394348.123:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7b61f4c819 code=0x7ffc0000 [ 167.107763][ T38] audit: type=1326 audit(1776394348.123:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7b61f4c819 code=0x7ffc0000 [ 167.720900][ T5827] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 168.666753][ T6936] loop4: detected capacity change from 0 to 32768 [ 169.040635][ T38] audit: type=1800 audit(1776394350.053:14): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.382" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 169.164249][ T6940] loop0: detected capacity change from 0 to 32768 [ 169.302762][ T6936] read_mapping_page failed! [ 169.482546][ T6940] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 169.869734][ T6940] XFS (loop0): Ending clean mount [ 170.106226][ T5825] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 170.637446][ T6526] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.665583][ T6992] netlink: 'syz.1.400': attribute type 11 has an invalid length. [ 170.665606][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'. [ 170.931374][ T6526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.961278][ T5485] 8021q: adding VLAN 0 to HW filter on device eth4 [ 170.967717][ T6526] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.344307][ T6526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.355457][ T6526] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 171.468885][ T6526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.516754][ T6526] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.603080][ T6526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.148392][ T7025] loop3: detected capacity change from 0 to 1024 [ 172.157663][ T7027] loop1: detected capacity change from 0 to 256 [ 172.358746][ T7028] loop4: detected capacity change from 0 to 4096 [ 172.361235][ T7027] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 172.449963][ T7028] NILFS (loop4): invalid segment: Checksum error in segment payload [ 172.449992][ T7028] NILFS (loop4): trying rollback from an earlier position [ 172.469950][ T7030] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 172.469978][ T7030] CIFS: Unable to determine destination address [ 172.602457][ T7028] NILFS (loop4): recovery complete [ 172.625882][ T7031] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.692257][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.725461][ T7043] loop1: detected capacity change from 0 to 512 [ 173.784451][ T7043] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 174.226924][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.384923][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.427802][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.494225][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.494610][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.833165][ T7048] syz.0.419 (7048) used greatest stack depth: 19096 bytes left [ 175.391189][ T7068] tmpfs: Bad value for 'mpol' [ 175.949997][ T5908] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 175.985336][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.098234][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 176.126490][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.126524][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.126566][ T5908] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 176.126589][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.195409][ T5908] usb 2-1: config 0 descriptor?? [ 176.937693][ T7099] loop0: detected capacity change from 0 to 512 [ 176.953350][ T5908] ntrig 0003:1B96:0008.0004: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.1-1/input0 [ 176.954813][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 177.039783][ T5908] usb 2-1: USB disconnect, device number 3 [ 177.186020][ T7099] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 177.186472][ T7099] EXT4-fs (loop0): orphan cleanup on readonly fs [ 177.383660][ T7106] fido_id[7106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 177.427091][ T7074] loop4: detected capacity change from 0 to 32768 [ 177.435662][ T7074] xfs: Unknown parameter 'func' [ 177.699252][ T7099] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.435: corrupted inode contents [ 177.699289][ T7099] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 177.713323][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 177.713348][ C1] EXT4-fs (loop0): initial error at time 1776394358: ext4_do_update_inode:5690: inode 16 [ 177.713487][ C1] EXT4-fs (loop0): last error at time 1776394358: ext4_do_update_inode:5690: inode 16 [ 177.791969][ T7099] EXT4-fs (loop0): Remounting filesystem read-only [ 177.875962][ T7099] EXT4-fs (loop0): 1 truncate cleaned up [ 178.042380][ T69] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 178.042410][ T69] Quota error (device loop0): write_blk: dquota write failed [ 178.042425][ T69] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 178.042441][ T69] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 178.042460][ T69] Quota error (device loop0): write_blk: dquota write failed [ 178.042473][ T69] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 178.042592][ T69] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 178.042620][ T69] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 178.042898][ T69] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 178.072469][ T7099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.190767][ T7114] batadv0: entered promiscuous mode [ 178.193350][ T7114] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 178.256532][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.368705][ T7114] batadv0: left promiscuous mode [ 178.853859][ T7126] netlink: 165 bytes leftover after parsing attributes in process `syz.0.445'. [ 179.005900][ T7121] netlink: 224 bytes leftover after parsing attributes in process `syz.4.443'. [ 179.059880][ T7121] tipc: Enabling of bearer rejected, failed to enable media [ 179.097750][ T6526] veth0_vlan: entered promiscuous mode [ 179.335674][ T6526] veth1_vlan: entered promiscuous mode [ 179.459614][ T7143] openvswitch: netlink: Duplicate or invalid key (type 1). [ 179.459661][ T7143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.691382][ T7151] loop0: detected capacity change from 0 to 256 [ 179.859206][ T7151] FAT-fs (loop0): Directory bread(block 64) failed [ 179.859259][ T7151] FAT-fs (loop0): Directory bread(block 65) failed [ 179.859369][ T7151] FAT-fs (loop0): Directory bread(block 66) failed [ 179.859391][ T7151] FAT-fs (loop0): Directory bread(block 67) failed [ 179.859505][ T7151] FAT-fs (loop0): Directory bread(block 68) failed [ 179.859527][ T7151] FAT-fs (loop0): Directory bread(block 69) failed [ 179.859631][ T7151] FAT-fs (loop0): Directory bread(block 70) failed [ 179.859653][ T7151] FAT-fs (loop0): Directory bread(block 71) failed [ 179.859768][ T7151] FAT-fs (loop0): Directory bread(block 72) failed [ 179.859790][ T7151] FAT-fs (loop0): Directory bread(block 73) failed [ 179.987158][ T6526] veth0_macvtap: entered promiscuous mode [ 180.065917][ T6526] veth1_macvtap: entered promiscuous mode [ 180.372167][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.465430][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.630472][ T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.639719][ T1018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.661688][ T1018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.675837][ T1018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.047074][ T7169] loop1: detected capacity change from 0 to 4096 [ 181.061031][ T7169] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 182.808701][ T7169] ntfs3(loop1): ino=19, mi_enum_attr [ 182.808924][ T7169] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 183.138527][ T7182] netlink: set zone limit has 4 unknown bytes [ 183.248894][ T7195] loop4: detected capacity change from 0 to 64 [ 183.304613][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.304644][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.774231][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.774255][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.970257][ T7209] loop4: detected capacity change from 0 to 256 [ 184.014656][ T7209] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 185.876001][ T7251] rdma_op ffff888067aa1a70 conn xmit_rdma 0000000000000000 [ 186.347332][ T7267] loop4: detected capacity change from 0 to 128 [ 188.163045][ T7293] macsec1: entered promiscuous mode [ 188.163067][ T7293] macvlan0: entered promiscuous mode [ 188.231721][ T7293] macvlan0: left promiscuous mode [ 189.578303][ T5900] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 189.799830][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.799866][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.821988][ T5900] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 189.822018][ T5900] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 189.822037][ T5900] usb 2-1: Manufacturer: syz [ 189.857876][ T5900] usb 2-1: config 0 descriptor?? [ 190.539662][ T5900] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 190.539733][ T5900] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 190.539852][ T5900] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 190.601209][ T5900] usb 2-1: USB disconnect, device number 4 [ 191.094627][ T7350] loop4: detected capacity change from 0 to 4096 [ 191.136937][ T7350] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 191.319239][ T7350] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 191.400298][ T7350] ntfs3(loop4): ino=19, mi_enum_attr [ 191.499504][ T7358] Invalid ELF header magic: != ELF [ 192.519228][ T5900] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 192.601983][ T7386] Zero length message leads to an empty skb [ 192.720763][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 192.720801][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 195, changing to 11 [ 192.720829][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 42410, setting to 1024 [ 192.720872][ T5900] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 192.720896][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.837798][ T5900] usb 4-1: config 0 descriptor?? [ 192.887695][ T7377] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 193.229576][ T5900] ath6kl: Failed to submit usb control message: -71 [ 193.229636][ T5900] ath6kl: unable to send the bmi data to the device: -71 [ 193.229652][ T5900] ath6kl: Unable to send get target info: -71 [ 193.232130][ T5900] ath6kl: Failed to init ath6kl core: -71 [ 193.363200][ T5900] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 193.420543][ T5900] usb 4-1: USB disconnect, device number 4 [ 194.463472][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.488466][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.081426][ T5893] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 195.306264][ T5893] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 195.306295][ T5893] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 195.306311][ T5893] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 195.306328][ T5893] usb 5-1: config 220 has no interface number 2 [ 195.306413][ T5893] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 195.306442][ T5893] usb 5-1: config 220 interface 0 has no altsetting 0 [ 195.306457][ T5893] usb 5-1: config 220 interface 76 has no altsetting 0 [ 195.306475][ T5893] usb 5-1: config 220 interface 1 has no altsetting 0 [ 195.311474][ T5893] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 195.311501][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.311519][ T5893] usb 5-1: Product: syz [ 195.311620][ T5893] usb 5-1: Manufacturer: syz [ 195.311633][ T5893] usb 5-1: SerialNumber: syz [ 195.600613][ T7462] loop0: detected capacity change from 0 to 128 [ 195.725201][ T7462] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 195.725437][ T7462] hpfs: filesystem error: improperly stopped [ 195.725456][ T7462] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 195.725471][ T7462] hpfs: You really don't want any checks? You are crazy... [ 195.726091][ T7462] hpfs: hpfs_map_sector(): read error [ 195.726103][ T7462] hpfs: code page support is disabled [ 195.727951][ T7462] hpfs: hpfs_map_4sectors(): unaligned read [ 195.788370][ T7462] hpfs: hpfs_map_4sectors(): unaligned read [ 195.788389][ T7462] hpfs: filesystem error: unable to find root dir [ 195.957467][ T5893] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 195.957504][ T5893] uvcvideo 5-1:220.0: No valid video chain found. [ 195.957568][ T5893] usb 5-1: selecting invalid altsetting 0 [ 196.183320][ T7471] loop5: detected capacity change from 0 to 128 [ 196.248985][ T5893] usb 5-1: selecting invalid altsetting 0 [ 196.249027][ T5893] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 196.422106][ T5893] usb 5-1: USB disconnect, device number 5 [ 196.507659][ T7471] EXT4-fs (loop5): Test dummy encryption mode enabled [ 196.756680][ T7471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 196.756930][ T7471] System zones: 1-3, 19-19, 35-36 [ 196.782333][ T7477] warning: `syz.4.576' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 196.884018][ T7471] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 196.972353][ T7471] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.107896][ T7471] EXT4-fs: Ignoring removed orlov option [ 197.117127][ T7471] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 197.148357][ T7471] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.327309][ T6526] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.393857][ T7487] loop1: detected capacity change from 0 to 64 [ 197.414257][ T7472] loop0: detected capacity change from 0 to 32768 [ 197.482234][ T7472] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 197.634352][ T7503] loop3: detected capacity change from 0 to 256 [ 197.635792][ T7503] exfat: Deprecated parameter 'namecase' [ 197.635836][ T7503] exfat: Deprecated parameter 'namecase' [ 197.752286][ T7472] XFS (loop0): Ending clean mount [ 197.754282][ T7507] [U] zw,lML}|%p,H?) [ 197.754316][ T7507] [U] QΝZ!vvr" Y [ 197.754334][ T7507] [U] 2eO [ 197.754346][ T7507] [U] س׿GVu$FV9c~SΦmH;5kg zYYTRtӰ;[ [ 197.754359][ T7507] [U] UIE(HyGPbϠKS̜mjt/Y [ 197.754369][ T7507] [U] 1i-f>CV=ȯ!^&9r+LMGYB." [ 197.754395][ T7507] [U] !T (TKt@q|"}~ҘoRx8oԍMxf+v,$=stE\g&5ޠˇEQA o9Ԅz`M*owg=H;j|HGp@6livT4^a{wf2,EMi`gUI-A7:^WPl^vqc}2 8R HU?Vk;785N! 4 C~#G_U: Ln*4QvO9Ōuf{]}- -I [cM [ 197.845806][ T7507] [U] ]ОӤ 8rs􈩊yp~Q_YT|vP Y:!"pRJZ4Xdsw]1ϟӦ1'<J ?iw1U #-zj;¼{Oakr{Ӥ6ëLvS4x1bx2idwܶmr,h%j`o7Q΅8$2HbU85f %& ,_gWƔDv@9ĨM% nfoMoPsϝHӵ#^\Vj; [ 197.853309][ T7503] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 197.978844][ T7506] [U] 5]i#R-yYW.(*S%b}J3k]薂FɿlNmǷ_E’E=@f%_D=Kqm'rRP1Mtp'~/]r}T&=S77 [ 198.186256][ T5825] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.552660][ T7516] trusted_key: encrypted_key: insufficient parameters specified [ 198.767583][ T7518] gfs2: path_lookup on Rwj65g C7a returned error -2 [ 199.095846][ T7528] loop3: detected capacity change from 0 to 2048 [ 199.179389][ T7531] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.440493][ T7535] loop5: detected capacity change from 0 to 512 [ 199.603419][ T7535] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 199.603894][ T7535] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.599: corrupted in-inode xattr: invalid ea_ino [ 199.603924][ T7535] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 199.606578][ T7535] EXT4-fs (loop5): Remounting filesystem read-only [ 199.669715][ T7538] loop4: detected capacity change from 0 to 4096 [ 199.694899][ T7535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.743253][ T7535] EXT4-fs warning (device loop5): ext4_empty_dir:3085: inode #2: lblock 0: comm syz.5.599: error -117 reading directory block [ 199.802846][ T7538] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.823207][ T7545] loop1: detected capacity change from 0 to 4096 [ 199.867875][ T7538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.920070][ T6526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.961853][ T7538] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 200.021810][ T7545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.281691][ T7557] loop0: detected capacity change from 0 to 256 [ 200.284961][ T7557] exfat: Deprecated parameter 'utf8' [ 200.465567][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.474175][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.015927][ T7568] netlink: 36 bytes leftover after parsing attributes in process `syz.3.612'. [ 201.137504][ T7570] loop1: detected capacity change from 0 to 128 [ 201.277626][ T7570] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 201.277663][ T7570] hpfs: filesystem error: improperly stopped [ 201.277676][ T7570] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 201.277690][ T7570] hpfs: You really don't want any checks? You are crazy... [ 201.277703][ T7570] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 201.277715][ T7570] hpfs: code page support is disabled [ 201.381924][ T7570] hpfs: hpfs_map_4sectors(): unaligned read [ 201.382033][ T7570] hpfs: hpfs_map_4sectors(): unaligned read [ 201.382043][ T7570] hpfs: filesystem error: unable to find root dir [ 201.448638][ T7570] hpfs: hpfs_map_4sectors(): unaligned read [ 201.464422][ T7570] hpfs: hpfs_map_4sectors(): unaligned read [ 202.968340][ T7608] loop4: detected capacity change from 0 to 512 [ 202.976381][ T7608] EXT4-fs: Ignoring removed nobh option [ 203.023518][ T7608] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.075437][ T7607] tmpfs: Bad value for 'nr_inodes' [ 203.201034][ T7608] EXT4-fs (loop4): 1 truncate cleaned up [ 203.230383][ T7608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.403027][ T7617] cifs: Bad value for 'port' [ 203.530022][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.829286][ T7629] gretap0: entered promiscuous mode [ 203.829756][ T7629] vlan2: entered promiscuous mode [ 204.968193][ T5893] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 204.978362][ T6041] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 205.131873][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 205.151161][ T6041] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.151190][ T6041] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 205.151211][ T6041] usb 2-1: config 1 has no interface number 0 [ 205.151254][ T6041] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.151280][ T6041] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 205.151306][ T6041] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 205.151336][ T6041] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 205.151358][ T6041] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.192365][ T5893] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 205.192392][ T5893] usb 4-1: config 0 has no interface number 0 [ 205.197807][ T5893] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 205.197830][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.197849][ T5893] usb 4-1: Product: syz [ 205.197862][ T5893] usb 4-1: Manufacturer: syz [ 205.197874][ T5893] usb 4-1: SerialNumber: syz [ 205.252731][ T6041] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.252762][ T6041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.252781][ T6041] usb 2-1: Product: syz [ 205.252795][ T6041] usb 2-1: Manufacturer: syz [ 205.252810][ T6041] usb 2-1: SerialNumber: syz [ 205.397054][ T7659] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 205.464091][ T5893] usb 4-1: config 0 descriptor?? [ 205.895605][ T7659] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 206.115550][ T6041] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 206.115605][ T6041] cdc_ncm 2-1:1.1: bind() failure [ 206.268909][ T6041] usb 2-1: USB disconnect, device number 5 [ 206.324187][ T7690] loop0: detected capacity change from 0 to 512 [ 206.367247][ T7690] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.491959][ T7690] EXT4-fs (loop0): 1 truncate cleaned up [ 206.532494][ T7690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.607487][ T7690] EXT4-fs (loop0): Online resizing not supported with sparse_super2 [ 206.939460][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.105262][ T7700] loop5: detected capacity change from 0 to 128 [ 207.118422][ T7700] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.339223][ T7700] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 207.490570][ T7705] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 207.896445][ T5893] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 207.896486][ T5893] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 207.928574][ T5893] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 207.928876][ T5893] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 207.997549][ T5893] usb 4-1: USB disconnect, device number 5 [ 208.165369][ T7718] loop3: detected capacity change from 0 to 16 [ 208.366206][ T7723] loop1: detected capacity change from 0 to 256 [ 208.471360][ T7718] erofs (device loop3): mounted with root inode @ nid 36. [ 208.490734][ T6041] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 208.523518][ T7723] FAT-fs (loop1): Directory bread(block 64) failed [ 208.523564][ T7723] FAT-fs (loop1): Directory bread(block 65) failed [ 208.523673][ T7723] FAT-fs (loop1): Directory bread(block 66) failed [ 208.523697][ T7723] FAT-fs (loop1): Directory bread(block 67) failed [ 208.523811][ T7723] FAT-fs (loop1): Directory bread(block 68) failed [ 208.523835][ T7723] FAT-fs (loop1): Directory bread(block 69) failed [ 208.564452][ T7723] FAT-fs (loop1): Directory bread(block 70) failed [ 208.564484][ T7723] FAT-fs (loop1): Directory bread(block 71) failed [ 208.564591][ T7723] FAT-fs (loop1): Directory bread(block 72) failed [ 208.564610][ T7723] FAT-fs (loop1): Directory bread(block 73) failed [ 208.688380][ T6041] usb 6-1: Using ep0 maxpacket: 32 [ 208.696137][ T6041] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 208.696171][ T6041] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.696205][ T6041] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 208.696227][ T6041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.743651][ T6041] usb 6-1: config 0 descriptor?? [ 209.154847][ T7729] loop0: detected capacity change from 0 to 16 [ 209.223603][ T5807] IPVS: starting estimator thread 0... [ 209.340945][ T7730] IPVS: using max 8 ests per chain, 19200 per kthread [ 209.600449][ T7729] erofs (device loop0): mounted with root inode @ nid 36. [ 210.113719][ T38] audit: type=1800 audit(1776394391.133:15): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.682" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 210.784730][ T7753] loop1: detected capacity change from 0 to 512 [ 210.789075][ T7753] EXT4-fs: Ignoring removed i_version option [ 210.795760][ T7753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.875903][ T7753] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.692: invalid block [ 210.875941][ T7753] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 210.880333][ C1] EXT4-fs (loop1): initial error at time 1776394391: ext4_get_branch:178: inode 11: block 4294967295 [ 210.880384][ C1] EXT4-fs (loop1): last error at time 1776394391: ext4_get_branch:178: inode 11: block 4294967295 [ 210.893062][ T7753] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.692: invalid indirect mapped block 4294967295 (level 1) [ 210.893098][ T7753] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 210.894394][ T7753] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.692: invalid indirect mapped block 4294967295 (level 1) [ 210.894426][ T7753] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 210.950027][ T7753] EXT4-fs (loop1): 2 truncates cleaned up [ 211.016990][ T7753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.324388][ T7753] [ 211.324402][ T7753] ====================================================== [ 211.324410][ T7753] WARNING: possible circular locking dependency detected [ 211.324420][ T7753] syzkaller #0 Not tainted [ 211.324430][ T7753] ------------------------------------------------------ [ 211.324438][ T7753] syz.1.692/7753 is trying to acquire lock: [ 211.324449][ T7753] ffff88802abb2770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10e0 [ 211.324520][ T7753] [ 211.324520][ T7753] but task is already holding lock: [ 211.324526][ T7753] ffff88805d774cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130 [ 211.324573][ T7753] [ 211.324573][ T7753] which lock already depends on the new lock. [ 211.324573][ T7753] [ 211.324580][ T7753] [ 211.324580][ T7753] the existing dependency chain (in reverse order) is: [ 211.324587][ T7753] [ 211.324587][ T7753] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 211.324615][ T7753] percpu_down_read_internal+0x48/0x1d0 [ 211.324637][ T7753] ext4_writepages+0x205/0x3b0 [ 211.324658][ T7753] do_writepages+0x32e/0x550 [ 211.324682][ T7753] __writeback_single_inode+0x133/0x10e0 [ 211.324703][ T7753] writeback_single_inode+0x488/0xd60 [ 211.324720][ T7753] write_inode_now+0x1c2/0x290 [ 211.324735][ T7753] iput+0x8c1/0xe80 [ 211.324756][ T7753] ext4_xattr_block_set+0x2359/0x2ad0 [ 211.324775][ T7753] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 211.324795][ T7753] __ext4_expand_extra_isize+0x30d/0x400 [ 211.324814][ T7753] __ext4_mark_inode_dirty+0x45c/0x710 [ 211.324838][ T7753] ext4_evict_inode+0x986/0x10e0 [ 211.324859][ T7753] evict+0x61e/0xb10 [ 211.324884][ T7753] ext4_orphan_cleanup+0xc38/0x1470 [ 211.324907][ T7753] ext4_fill_super+0x59bb/0x62d0 [ 211.324929][ T7753] get_tree_bdev_flags+0x431/0x4f0 [ 211.324953][ T7753] vfs_get_tree+0x92/0x2a0 [ 211.324984][ T7753] do_new_mount+0x341/0xd30 [ 211.325003][ T7753] __se_sys_mount+0x31d/0x420 [ 211.325023][ T7753] do_syscall_64+0x15f/0xf80 [ 211.325042][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.325061][ T7753] [ 211.325061][ T7753] -> #0 (sb_internal){.+.+}-{0:0}: [ 211.325086][ T7753] __lock_acquire+0x15a5/0x2cf0 [ 211.325110][ T7753] lock_acquire+0x106/0x350 [ 211.325132][ T7753] percpu_down_read_internal+0x48/0x1d0 [ 211.325152][ T7753] ext4_evict_inode+0x426/0x10e0 [ 211.325176][ T7753] evict+0x61e/0xb10 [ 211.325202][ T7753] ext4_ext_migrate+0xe11/0x1130 [ 211.325222][ T7753] ext4_fileattr_set+0xf33/0x16d0 [ 211.325246][ T7753] vfs_fileattr_set+0x9f6/0xc90 [ 211.325267][ T7753] ioctl_setflags+0x189/0x1f0 [ 211.325289][ T7753] do_vfs_ioctl+0x9f4/0x1540 [ 211.325316][ T7753] __se_sys_ioctl+0x82/0x170 [ 211.325342][ T7753] do_syscall_64+0x15f/0xf80 [ 211.325359][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.325377][ T7753] [ 211.325377][ T7753] other info that might help us debug this: [ 211.325377][ T7753] [ 211.325383][ T7753] Possible unsafe locking scenario: [ 211.325383][ T7753] [ 211.325389][ T7753] CPU0 CPU1 [ 211.325395][ T7753] ---- ---- [ 211.325401][ T7753] lock(&sbi->s_writepages_rwsem); [ 211.325415][ T7753] lock(sb_internal); [ 211.325429][ T7753] lock(&sbi->s_writepages_rwsem); [ 211.325443][ T7753] rlock(sb_internal); [ 211.325456][ T7753] [ 211.325456][ T7753] *** DEADLOCK *** [ 211.325456][ T7753] [ 211.325461][ T7753] 3 locks held by syz.1.692/7753: [ 211.325472][ T7753] #0: ffff88802abb2480 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x210 [ 211.325541][ T7753] #1: ffff888060234b00 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: vfs_fileattr_set+0x161/0xc90 [ 211.325602][ T7753] #2: ffff88805d774cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130 [ 211.325654][ T7753] [ 211.325654][ T7753] stack backtrace: [ 211.325666][ T7753] CPU: 0 UID: 0 PID: 7753 Comm: syz.1.692 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 211.325689][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 211.325702][ T7753] Call Trace: [ 211.325710][ T7753] [ 211.325719][ T7753] dump_stack_lvl+0xe8/0x150 [ 211.325742][ T7753] print_circular_bug+0x2e1/0x300 [ 211.325776][ T7753] check_noncircular+0x12e/0x150 [ 211.325809][ T7753] __lock_acquire+0x15a5/0x2cf0 [ 211.325838][ T7753] ? __lock_acquire+0x6b5/0x2cf0 [ 211.325865][ T7753] ? __asan_memset+0x22/0x50 [ 211.325891][ T7753] ? ext4_evict_inode+0x426/0x10e0 [ 211.325915][ T7753] lock_acquire+0x106/0x350 [ 211.325938][ T7753] ? ext4_evict_inode+0x426/0x10e0 [ 211.325972][ T7753] percpu_down_read_internal+0x48/0x1d0 [ 211.325995][ T7753] ? ext4_evict_inode+0x426/0x10e0 [ 211.326023][ T7753] ext4_evict_inode+0x426/0x10e0 [ 211.326049][ T7753] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 211.326069][ T7753] ? reacquire_held_locks+0x104/0x190 [ 211.326099][ T7753] ? rt_spin_lock+0x1e0/0x400 [ 211.326130][ T7753] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 211.326159][ T7753] ? __pfx_ext4_evict_inode+0x10/0x10 [ 211.326186][ T7753] ? rt_spin_unlock+0x14f/0x200 [ 211.326216][ T7753] ? rt_spin_unlock+0x160/0x200 [ 211.326243][ T7753] ? __pfx_ext4_evict_inode+0x10/0x10 [ 211.326269][ T7753] evict+0x61e/0xb10 [ 211.326303][ T7753] ? __pfx_evict+0x10/0x10 [ 211.326332][ T7753] ? rt_spin_unlock+0x160/0x200 [ 211.326361][ T7753] ? iput+0xb25/0xe80 [ 211.326389][ T7753] ext4_ext_migrate+0xe11/0x1130 [ 211.326419][ T7753] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 211.326446][ T7753] ? ext4_change_inode_journal_flag+0x213/0xa10 [ 211.326471][ T7753] ? __ext4_journal_stop+0x34/0x1a0 [ 211.326494][ T7753] ext4_fileattr_set+0xf33/0x16d0 [ 211.326537][ T7753] ? __pfx_ext4_fileattr_set+0x10/0x10 [ 211.326566][ T7753] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 211.326588][ T7753] ? lockdep_hardirqs_on+0x7a/0x110 [ 211.326611][ T7753] ? __asan_memset+0x22/0x50 [ 211.326634][ T7753] ? fileattr_fill_flags+0x229/0x380 [ 211.326659][ T7753] ? fscrypt_prepare_setflags+0x62/0x3c0 [ 211.326689][ T7753] vfs_fileattr_set+0x9f6/0xc90 [ 211.326712][ T7753] ? mnt_get_write_access+0x66/0x2d0 [ 211.326744][ T7753] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 211.326773][ T7753] ? __asan_memset+0x22/0x50 [ 211.326797][ T7753] ioctl_setflags+0x189/0x1f0 [ 211.326824][ T7753] ? __pfx_ioctl_setflags+0x10/0x10 [ 211.326853][ T7753] ? tomoyo_path_number_perm+0x219/0x630 [ 211.326876][ T7753] ? tomoyo_path_number_perm+0x219/0x630 [ 211.326899][ T7753] do_vfs_ioctl+0x9f4/0x1540 [ 211.326932][ T7753] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 211.326970][ T7753] ? do_futex+0x333/0x420 [ 211.327009][ T7753] ? __fget_files+0x2a/0x420 [ 211.327035][ T7753] ? __fget_files+0x2a/0x420 [ 211.327059][ T7753] ? __fget_files+0x3a6/0x420 [ 211.327083][ T7753] ? __fget_files+0x2a/0x420 [ 211.327109][ T7753] ? bpf_lsm_file_ioctl+0x9/0x20 [ 211.327135][ T7753] __se_sys_ioctl+0x82/0x170 [ 211.327166][ T7753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.327189][ T7753] do_syscall_64+0x15f/0xf80 [ 211.327209][ T7753] ? trace_irq_disable+0x3b/0x140 [ 211.327233][ T7753] ? clear_bhb_loop+0x40/0x90 [ 211.327257][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.327276][ T7753] RIP: 0033:0x7f17c75cc819 [ 211.327296][ T7753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.327314][ T7753] RSP: 002b:00007f17c581e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.327336][ T7753] RAX: ffffffffffffffda RBX: 00007f17c7845fa0 RCX: 00007f17c75cc819 [ 211.327352][ T7753] RDX: 0000200000000080 RSI: 0000000040086602 RDI: 0000000000000004 [ 211.327366][ T7753] RBP: 00007f17c7662c91 R08: 0000000000000000 R09: 0000000000000000 [ 211.327380][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.327393][ T7753] R13: 00007f17c7846038 R14: 00007f17c7845fa0 R15: 00007ffefd27b638 [ 211.327417][ T7753] [ 211.703193][ T6041] usbhid 6-1:0.0: can't add hid device: -71 [ 211.703291][ T6041] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 211.803946][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.972111][ T6041] usb 6-1: USB disconnect, device number 2 [ 217.000206][ T5140] Bluetooth: hci3: command 0x0406 tx timeout [ 217.000237][ T5140] Bluetooth: hci4: command 0x0406 tx timeout [ 217.000166][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 217.000257][ T5140] Bluetooth: hci0: command 0x0406 tx timeout