last executing test programs: 5.198611037s ago: executing program 5 (id=414): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000280)) 4.488980979s ago: executing program 1 (id=418): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c00028008"], 0x34}}, 0x0) 4.141932419s ago: executing program 1 (id=419): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "6f7f5e18"}]}}, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 2.96105198s ago: executing program 2 (id=424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0186129b23a7fd1e22ff6514000008000300", @ANYRES32=r3], 0x2c}}, 0x0) 2.847873047s ago: executing program 3 (id=427): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.520220363s ago: executing program 2 (id=429): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x20000000, 0x4, 0x0, 0x0, {0x2}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) set_mempolicy(0x0, &(0x7f0000000000), 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 2.450630998s ago: executing program 4 (id=430): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 2.298420637s ago: executing program 4 (id=431): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000240)="00214717a70704000004000600710a069d317ebb906c", 0x16}], 0x1, 0x0, 0x0) 2.161203268s ago: executing program 5 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 2.118677468s ago: executing program 3 (id=433): r0 = syz_io_uring_setup(0x2371, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000001780), &(0x7f0000000140)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x7056, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x147, 0x0, r0}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r2) 2.008234971s ago: executing program 2 (id=434): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 1.892494903s ago: executing program 4 (id=435): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 1.841852775s ago: executing program 5 (id=436): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x58}}, 0x0) 1.754519854s ago: executing program 3 (id=437): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x20008081) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 1.532120367s ago: executing program 5 (id=438): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0xb3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)) close_range(r0, 0xffffffffffffffff, 0x0) 1.499052121s ago: executing program 0 (id=439): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="c5", 0x1, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="4319e2aabc1e4a13e696a7f0d7557242d86bf77f9c16bad3035548f5cdb5bc12d17a90b4063934ce295fa65c2323953d5e52a3ff4c543f094d35b793ab9f722d816203247e4fb54ca97d0053f1606f9fe21d35d3b25e2c3a713579039c1ea1f53aaeabd7b902297b5fd3dccd0b11db742f0e5a832b3adef3a6eae7952cbf3874ef323373b5d03e736994b6eef1e78e566d8c26a21a5e0896bc5b515603985946e75f93f7bd54adfdb387b992d26814248b9a22e770160dcb9694b89abd64650a", 0xc0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="03", 0x1, r0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r2, r3}, &(0x7f00000002c0)=""/41, 0x29, &(0x7f0000000340)={&(0x7f00000004c0)={'crc32c-generic\x00'}}) 1.498315119s ago: executing program 3 (id=440): r0 = gettid() r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) tkill(r0, 0xb) 1.419232025s ago: executing program 4 (id=441): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x6}, 0x9c) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 1.396803083s ago: executing program 0 (id=442): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="0faf25478892142f1ca84bc8dd07cbe43b68031da2ac15f1bfc3ea78e9d37f4f1284906ef125e513bfbdef81ad4b05a7f6ac3443b4d6ebdaeaea088f46", 0x3d}], 0x1}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x8}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a800160020000140", 0x38}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) 1.294731767s ago: executing program 1 (id=443): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(0xee01, r1, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1.293623269s ago: executing program 5 (id=444): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfdef) 1.220547088s ago: executing program 2 (id=445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x9, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "804479", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 1.135068244s ago: executing program 3 (id=446): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06000d08"], 0x9) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.097990896s ago: executing program 0 (id=447): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000001840)=0x1, 0x4) 982.152461ms ago: executing program 1 (id=448): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 907.678502ms ago: executing program 0 (id=449): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x14, &(0x7f00000000c0)={r1, @empty, @remote}, 0xc) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 853.281414ms ago: executing program 2 (id=450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 779.027854ms ago: executing program 3 (id=451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x1000040, &(0x7f0000000540)={[{@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101}) getdents(r0, 0xfffffffffffffffd, 0x58) 760.278489ms ago: executing program 1 (id=452): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_io_uring_setup(0x231b, &(0x7f0000000440), &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000340)=@rc={0x1f, @fixed, 0x5}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 631.168673ms ago: executing program 4 (id=453): r0 = syz_open_dev$sndctrl(&(0x7f0000000480), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000002c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)) 565.287575ms ago: executing program 0 (id=454): r0 = io_uring_setup(0x1951, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x2, 0x2b2}) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0xdca6, 0x0) read$usbmon(r1, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x80089203, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 459.374949ms ago: executing program 4 (id=455): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x12, 0xa10, &(0x7f00000001c0)="$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") 424.802546ms ago: executing program 5 (id=456): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0x4004480d, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) 365.097403ms ago: executing program 2 (id=457): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd07000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 87.164607ms ago: executing program 0 (id=458): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) inotify_init1(0x0) syz_open_procfs(0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "cfda9ce9"}]}}, 0x0}, 0x0) 0s ago: executing program 1 (id=459): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): adv_slave_1 (retrying later): interface not active [ 83.897441][ T5229] hsr_slave_0: entered promiscuous mode [ 83.907979][ T5229] hsr_slave_1: entered promiscuous mode [ 83.914798][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.923626][ T5229] Cannot create hsr debugfs directory [ 83.999508][ T5232] hsr_slave_0: entered promiscuous mode [ 84.006172][ T5232] hsr_slave_1: entered promiscuous mode [ 84.013516][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.021100][ T5232] Cannot create hsr debugfs directory [ 84.030106][ T5227] hsr_slave_0: entered promiscuous mode [ 84.037731][ T5227] hsr_slave_1: entered promiscuous mode [ 84.044763][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.072602][ T5227] Cannot create hsr debugfs directory [ 84.159799][ T5226] hsr_slave_0: entered promiscuous mode [ 84.167467][ T5226] hsr_slave_1: entered promiscuous mode [ 84.174030][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.181709][ T5226] Cannot create hsr debugfs directory [ 84.235574][ T5231] hsr_slave_0: entered promiscuous mode [ 84.243214][ T5231] hsr_slave_1: entered promiscuous mode [ 84.249424][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.257731][ T5231] Cannot create hsr debugfs directory [ 84.746904][ T5228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.763452][ T5228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.797096][ T5228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.815694][ T5228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.840347][ T5227] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.859638][ T5227] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.872880][ T5227] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.893986][ T5227] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.966212][ T5232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.992105][ T5242] Bluetooth: hci1: command tx timeout [ 84.997775][ T5240] Bluetooth: hci4: command tx timeout [ 85.003418][ T5242] Bluetooth: hci0: command tx timeout [ 85.026016][ T5232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.049874][ T5232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.065473][ T5232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.073532][ T5240] Bluetooth: hci3: command tx timeout [ 85.081689][ T5242] Bluetooth: hci5: command tx timeout [ 85.087571][ T5240] Bluetooth: hci2: command tx timeout [ 85.116729][ T5229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.135710][ T5229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.174805][ T5229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.203967][ T5229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.250594][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.293030][ T5231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.306571][ T5231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.317597][ T5231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.355656][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.367358][ T5231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.441423][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.466230][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.479955][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.495670][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.503220][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.516085][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.523280][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.558895][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.590311][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.683892][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.766755][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.773928][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.796339][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.845423][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.857883][ T957] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.865142][ T957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.966128][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.987090][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.001243][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.008473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.034626][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.053060][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.060240][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.115051][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.131051][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.138296][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.168287][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.194405][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.201919][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.234791][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.242161][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.318417][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.340156][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.347434][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.395108][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.470908][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.478167][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.500109][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.507302][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.636099][ T5232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.815231][ T5228] veth0_vlan: entered promiscuous mode [ 86.927333][ T5228] veth1_vlan: entered promiscuous mode [ 86.995619][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.067412][ T5228] veth0_macvtap: entered promiscuous mode [ 87.071919][ T5240] Bluetooth: hci4: command tx timeout [ 87.078683][ T5240] Bluetooth: hci0: command tx timeout [ 87.086814][ T5240] Bluetooth: hci1: command tx timeout [ 87.116148][ T5228] veth1_macvtap: entered promiscuous mode [ 87.153144][ T5241] Bluetooth: hci5: command tx timeout [ 87.153205][ T5242] Bluetooth: hci3: command tx timeout [ 87.158695][ T5240] Bluetooth: hci2: command tx timeout [ 87.237846][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.342936][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.365211][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.403224][ T5228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.419826][ T5228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.429770][ T5228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.442798][ T5228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.459240][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.518343][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.704319][ T5229] veth0_vlan: entered promiscuous mode [ 87.725837][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.821474][ T5229] veth1_vlan: entered promiscuous mode [ 87.971037][ T5226] veth0_vlan: entered promiscuous mode [ 88.018600][ T5312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.020652][ T5229] veth0_macvtap: entered promiscuous mode [ 88.079347][ T5312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.136659][ T5229] veth1_macvtap: entered promiscuous mode [ 88.167324][ T5226] veth1_vlan: entered promiscuous mode [ 88.212598][ T5227] veth0_vlan: entered promiscuous mode [ 88.250017][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.255211][ T5227] veth1_vlan: entered promiscuous mode [ 88.262319][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.269957][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.282531][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.294487][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.337456][ T5231] veth0_vlan: entered promiscuous mode [ 88.370227][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.392771][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.405299][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.408106][ T5228] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.416862][ T5226] veth0_macvtap: entered promiscuous mode [ 88.455493][ T5229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.466327][ T5229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.475584][ T5229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.485597][ T5229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.506736][ T5226] veth1_macvtap: entered promiscuous mode [ 88.530881][ T5232] veth0_vlan: entered promiscuous mode [ 88.543204][ T5232] veth1_vlan: entered promiscuous mode [ 88.618825][ T5231] veth1_vlan: entered promiscuous mode [ 88.642174][ T5232] veth0_macvtap: entered promiscuous mode [ 88.670763][ T5227] veth0_macvtap: entered promiscuous mode [ 88.681441][ T5232] veth1_macvtap: entered promiscuous mode [ 88.706707][ T5227] veth1_macvtap: entered promiscuous mode [ 88.766471][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.779208][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.793474][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.805141][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.817442][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.855102][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.886147][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.900022][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.915892][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.940941][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.974541][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.986467][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.037461][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.052398][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.062745][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.076207][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.088986][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.117142][ T5231] veth0_macvtap: entered promiscuous mode [ 89.141483][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.150220][ T5346] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.160438][ T5240] Bluetooth: hci1: command tx timeout [ 89.171684][ T5242] Bluetooth: hci0: command tx timeout [ 89.176323][ T5241] Bluetooth: hci4: command tx timeout [ 89.188074][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.196910][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.205704][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.219278][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.231883][ T5240] Bluetooth: hci2: command tx timeout [ 89.237334][ T5240] Bluetooth: hci5: command tx timeout [ 89.239340][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.243931][ T5241] Bluetooth: hci3: command tx timeout [ 89.254157][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.277392][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.311686][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.331813][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.345059][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.358362][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.369197][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.379350][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.390567][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.402865][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.413504][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.423693][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.435817][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.447848][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.459404][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.472389][ T5232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.481162][ T5232] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.491270][ T5232] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.500853][ T5232] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.505274][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.514204][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.528763][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.539341][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.552342][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.574532][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.590613][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.601407][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.612440][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.642235][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.667218][ T5231] veth1_macvtap: entered promiscuous mode [ 89.699412][ T5227] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.708817][ T5227] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.718611][ T5227] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.727989][ T5227] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.828280][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.846899][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.940630][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.985002][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.007475][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.026945][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.047445][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.065044][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.080125][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.096193][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.113576][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.133605][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.151053][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.168887][ T5352] loop2: detected capacity change from 0 to 32768 [ 90.183077][ T5352] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12 (5352) [ 90.207025][ T5352] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.218707][ T5352] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 90.227669][ T5352] BTRFS info (device loop2): using free-space-tree [ 90.324837][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.337474][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.348571][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.360363][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.372166][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.385509][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.397957][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.409809][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.419728][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.430326][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.445363][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.475051][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.483107][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.614479][ T5231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.631674][ T5231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.661115][ T5231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.688477][ T5228] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.701589][ T5231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.731242][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.744847][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.868727][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.905697][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.108993][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.132321][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.251459][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.272167][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.350165][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.417074][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.427045][ T5374] loop2: detected capacity change from 0 to 256 [ 91.440274][ T5374] vfat: Bad value for 'fmask' [ 91.483197][ T9] cfg80211: failed to load regulatory.db [ 91.577947][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.617787][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.733537][ T5380] loop5: detected capacity change from 0 to 64 [ 91.773737][ T5312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.802342][ T5312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.000300][ T5383] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 92.073062][ T5380] Trying to free block not in datazone [ 92.078751][ T5380] Trying to free block not in datazone [ 92.167397][ T5380] Trying to free block not in datazone [ 92.817751][ T5372] loop1: detected capacity change from 0 to 40427 [ 92.901758][ T5372] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff [ 92.910639][ T5372] F2FS-fs (loop1): Image doesn't support compression [ 92.946471][ T5372] F2FS-fs (loop1): Image doesn't support compression [ 92.982815][ T5374] loop2: detected capacity change from 0 to 32768 [ 92.989906][ T5374] XFS: ikeep mount option is deprecated. [ 93.029917][ T5372] F2FS-fs (loop1): invalid crc value [ 93.096724][ T5409] loop5: detected capacity change from 0 to 256 [ 93.143178][ T5409] exfat: Deprecated parameter 'utf8' [ 93.203084][ T5372] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.222649][ T5409] exfat: Deprecated parameter 'utf8' [ 93.251756][ T5409] exfat: Deprecated parameter 'utf8' [ 93.522296][ T5374] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 93.631895][ T5409] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 93.740894][ T5418] loop0: detected capacity change from 0 to 32768 [ 93.756524][ T5418] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.22 (5418) [ 93.776164][ T5418] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.786509][ T5418] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 93.795198][ T5418] BTRFS info (device loop0): using free-space-tree [ 93.823822][ T5374] XFS (loop2): Ending clean mount [ 93.835685][ T5374] XFS (loop2): Quotacheck needed: Please wait. [ 93.948593][ T5372] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.310649][ T5374] XFS (loop2): Quotacheck: Done. [ 94.337137][ T5229] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x524/0x2030 [ 94.359636][ T5390] loop3: detected capacity change from 0 to 40427 [ 94.398092][ T5229] F2FS-fs (loop1): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 94.481905][ T5390] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 94.495800][ T5390] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 94.575304][ T5451] netlink: 104 bytes leftover after parsing attributes in process `syz.5.25'. [ 94.611809][ T5390] F2FS-fs (loop3): invalid crc value [ 94.641710][ T5390] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.823555][ T5228] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.913561][ T5226] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.016480][ T5390] F2FS-fs (loop3): Start checkpoint disabled! [ 95.046988][ T5390] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 95.062184][ T5390] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 95.231210][ T5460] loop5: detected capacity change from 0 to 2048 [ 95.619686][ T5227] UDF-fs: warning (device loop5): udf_evict_inode: Inode 1367 (mode 100000) has inode size 65546 different from extent length 66048. Filesystem need not be standards compliant. [ 95.820875][ T12] kworker/u8:1: attempt to access beyond end of device [ 95.820875][ T12] loop3: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 95.913060][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.950692][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.961949][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.971612][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.978571][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.016827][ T5475] loop5: detected capacity change from 0 to 256 [ 96.121271][ T5475] exFAT-fs (loop5): failed to load alloc-bitmap [ 96.136717][ T5475] exFAT-fs (loop5): failed to recognize exfat type [ 96.507827][ T5461] loop4: detected capacity change from 0 to 32768 [ 96.972233][ T5492] loop5: detected capacity change from 0 to 32768 [ 97.017077][ T5492] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.35 (5492) [ 97.045033][ T5481] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.102819][ T5492] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.113255][ T5492] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 97.122552][ T5492] BTRFS info (device loop5): using free-space-tree [ 97.131329][ T5461] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.264795][ T5508] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.278452][ T5508] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 97.639164][ T5481] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.692069][ T5461] XFS (loop4): Ending clean mount [ 97.718772][ T5461] XFS (loop4): Quotacheck needed: Please wait. [ 97.848581][ T5461] XFS (loop4): Quotacheck: Done. [ 97.964213][ T5531] loop3: detected capacity change from 0 to 2048 [ 98.022103][ T5481] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.040975][ T5227] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.239038][ T5531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.310765][ T5232] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.376222][ T5481] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.379821][ T5519] loop1: detected capacity change from 0 to 32768 [ 98.404918][ T5519] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.37 (5519) [ 98.475899][ T5519] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.487156][ T5519] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 98.496676][ T5519] BTRFS info (device loop1): using free-space-tree [ 98.806495][ T5489] loop0: detected capacity change from 0 to 32768 [ 98.915689][ T5541] loop4: detected capacity change from 0 to 256 [ 98.939140][ T5481] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.955875][ T5481] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.973130][ T5481] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.989259][ T5481] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.022165][ T63] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.051117][ T5541] vfat: Bad value for 'fmask' [ 99.161894][ T63] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 99.245136][ T5544] loop5: detected capacity change from 0 to 32768 [ 99.254011][ T5544] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.40 (5544) [ 99.269563][ T63] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.269563][ T63] [ 99.282998][ T5544] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.293440][ T5544] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 99.302037][ T5544] BTRFS info (device loop5): using free-space-tree [ 99.311201][ T63] EXT4-fs (loop3): Total free blocks count 0 [ 99.393997][ T63] EXT4-fs (loop3): Free/Dirty block details [ 99.400031][ T63] EXT4-fs (loop3): free_blocks=2415919104 [ 99.406964][ T63] EXT4-fs (loop3): dirty_blocks=16 [ 99.412449][ T63] EXT4-fs (loop3): Block reservation details [ 99.426357][ T5489] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop0": -EINTR [ 99.427321][ T63] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 99.544384][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.034070][ T5227] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.220224][ T5229] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.350697][ T5541] loop4: detected capacity change from 0 to 32768 [ 100.358440][ T5541] XFS: ikeep mount option is deprecated. [ 100.667837][ T5598] loop3: detected capacity change from 0 to 4096 [ 100.704353][ T5598] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 100.905431][ T5598] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 100.914571][ T5541] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.172532][ T5541] XFS (loop4): Ending clean mount [ 101.195029][ T5541] XFS (loop4): Quotacheck needed: Please wait. [ 101.309004][ T5541] XFS (loop4): Quotacheck: Done. [ 101.320294][ T5599] loop0: detected capacity change from 0 to 32768 [ 101.378538][ T5599] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.50 (5599) [ 101.541727][ T5599] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.604598][ T5599] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 101.654742][ T5599] BTRFS info (device loop0): disk space caching is enabled [ 101.700438][ T5599] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 101.731100][ T5232] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.794420][ T5590] loop2: detected capacity change from 0 to 32768 [ 101.825046][ T5606] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 101.891931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.903156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.903206][ T5590] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.48 (5590) [ 101.998884][ T5599] BTRFS info (device loop0): rebuilding free space tree [ 102.082025][ T5590] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.129594][ T5590] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 102.178669][ T5599] BTRFS info (device loop0): disabling free space tree [ 102.186671][ T5590] BTRFS info (device loop2): disk space caching is enabled [ 102.268139][ T5590] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 102.289690][ T5599] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.339666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.364460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.400031][ T5599] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.411104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.449695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 102.458763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.476808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 102.487375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 102.733330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.754689][ T5643] overlayfs: failed to resolve './file0': -2 [ 102.921093][ T5226] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.951840][ T5590] BTRFS info (device loop2): rebuilding free space tree [ 103.054406][ T5590] BTRFS info (device loop2): disabling free space tree [ 103.082134][ T5590] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.111749][ T5590] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.414468][ T5608] loop5: detected capacity change from 0 to 40427 [ 103.701249][ T5608] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1fffff [ 103.746628][ T5662] loop3: detected capacity change from 0 to 32768 [ 103.754195][ T5662] XFS: ikeep mount option is deprecated. [ 103.955591][ T5228] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.971754][ T5608] F2FS-fs (loop5): invalid crc value [ 104.067538][ T5662] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.076229][ T5608] F2FS-fs (loop5): Found nat_bits in checkpoint [ 104.145100][ T5608] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 104.418650][ T5227] syz-executor: attempt to access beyond end of device [ 104.418650][ T5227] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.471219][ T5662] XFS (loop3): Ending clean mount [ 104.495884][ T5662] XFS (loop3): Quotacheck needed: Please wait. [ 104.496120][ T5227] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 104.586492][ T5662] XFS (loop3): Quotacheck: Done. [ 104.662180][ T5293] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.848137][ T5293] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 104.910746][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.944488][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.954923][ T5293] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 104.971908][ T5293] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 104.981091][ T5293] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 105.054084][ T5293] usb 5-1: Manufacturer: syz [ 105.127875][ T5293] usb 5-1: config 0 descriptor?? [ 105.368159][ T5231] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.698098][ T5293] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 105.700394][ T5295] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.863332][ T5293] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 105.931736][ T5295] usb 2-1: Using ep0 maxpacket: 32 [ 105.954260][ T5295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.962210][ T5293] usb 5-1: USB disconnect, device number 2 [ 105.972733][ T5295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.007190][ T5295] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 106.051668][ T5295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.104066][ T5295] usb 2-1: config 0 descriptor?? [ 106.348068][ T5697] loop5: detected capacity change from 0 to 2048 [ 106.376251][ T5687] loop0: detected capacity change from 0 to 32768 [ 106.398257][ T5687] ======================================================= [ 106.398257][ T5687] WARNING: The mand mount option has been deprecated and [ 106.398257][ T5687] and is ignored by this kernel. Remove the mand [ 106.398257][ T5687] option from the mount to silence this warning. [ 106.398257][ T5687] ======================================================= [ 106.467623][ T5697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.540953][ T63] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.568671][ T5295] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 106.592087][ T63] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 106.609035][ T5687] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.647664][ T63] EXT4-fs (loop5): This should not happen!! Data will be lost [ 106.647664][ T63] [ 106.699321][ T63] EXT4-fs (loop5): Total free blocks count 0 [ 106.742884][ T63] EXT4-fs (loop5): Free/Dirty block details [ 106.749011][ T63] EXT4-fs (loop5): free_blocks=2415919104 [ 106.765395][ T5295] ft260 0003:0403:6030.0002: chip code: 5e81 abf2 [ 106.774767][ T63] EXT4-fs (loop5): dirty_blocks=16 [ 106.780065][ T63] EXT4-fs (loop5): Block reservation details [ 106.786427][ T63] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 106.805915][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.260815][ T5714] loop4: detected capacity change from 0 to 4096 [ 107.277394][ T5714] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 107.286690][ T5295] usb 2-1: USB disconnect, device number 2 [ 107.313255][ T5226] ocfs2: Unmounting device (7,0) on (node local) [ 107.547383][ T5720] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 107.590373][ T5714] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 108.029514][ T5716] loop5: detected capacity change from 0 to 32768 [ 108.126738][ T5716] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.293172][ T5735] siw: device registration error -23 [ 108.322616][ T1606] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.445807][ T5708] loop3: detected capacity change from 0 to 40427 [ 108.452900][ T5738] loop2: detected capacity change from 0 to 256 [ 108.497780][ T5708] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff [ 108.511763][ T1606] usb 1-1: Using ep0 maxpacket: 32 [ 108.527185][ T1606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.585710][ T1606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.599081][ T5708] F2FS-fs (loop3): invalid crc value [ 108.632062][ T1606] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 108.659204][ T5738] exFAT-fs (loop2): failed to load alloc-bitmap [ 108.684261][ T5724] loop1: detected capacity change from 0 to 32768 [ 108.694917][ T5724] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.74 (5724) [ 108.701008][ T5738] exFAT-fs (loop2): failed to recognize exfat type [ 108.727792][ T5724] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.730402][ T5708] F2FS-fs (loop3): Found nat_bits in checkpoint [ 108.738571][ T5724] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 108.755749][ T1606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.770560][ T5724] BTRFS info (device loop1): using free-space-tree [ 108.795301][ T1606] usb 1-1: config 0 descriptor?? [ 108.801496][ T5716] XFS (loop5): Ending clean mount [ 108.922753][ T5716] XFS (loop5): Quotacheck needed: Please wait. [ 109.061685][ T5708] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 109.228536][ T5716] XFS (loop5): Quotacheck: Done. [ 109.365522][ T1606] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 109.402496][ T5231] syz-executor: attempt to access beyond end of device [ 109.402496][ T5231] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.438981][ T5231] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 109.476102][ T1606] ft260 0003:0403:6030.0003: chip code: 5e81 abf2 [ 109.560218][ T5227] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.682191][ T5229] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.913028][ T5299] usb 1-1: USB disconnect, device number 2 [ 109.981054][ T5742] loop4: detected capacity change from 0 to 32768 [ 110.022271][ T5742] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.75 (5742) [ 110.429239][ T5761] loop2: detected capacity change from 0 to 32768 [ 110.437266][ T5761] XFS: ikeep mount option is deprecated. [ 110.489343][ T5742] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.500095][ T5279] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 110.519011][ T5742] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 110.589936][ T5742] BTRFS info (device loop4): using free-space-tree [ 110.631407][ T5761] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.663425][ T5279] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 110.685314][ T5279] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.733806][ T5777] loop3: detected capacity change from 0 to 256 [ 110.743886][ T5777] vfat: Bad value for 'fmask' [ 110.762020][ T5279] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.775862][ T5279] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.804641][ T5279] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 110.824718][ T5279] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 110.866832][ T5279] usb 6-1: Manufacturer: syz [ 110.914094][ T5279] usb 6-1: config 0 descriptor?? [ 111.035713][ T5761] XFS (loop2): Ending clean mount [ 111.102016][ T5761] XFS (loop2): Quotacheck needed: Please wait. [ 111.355445][ T5279] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 111.382675][ T5232] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.411682][ T5761] XFS (loop2): Quotacheck: Done. [ 111.505540][ T5228] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.531943][ T5279] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 111.629587][ T5777] loop3: detected capacity change from 0 to 32768 [ 111.638245][ T5777] XFS: ikeep mount option is deprecated. [ 111.674276][ T5777] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 111.700340][ T5279] usb 6-1: USB disconnect, device number 2 [ 111.715894][ T1606] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.904805][ T1606] usb 1-1: Using ep0 maxpacket: 8 [ 111.911655][ T5777] XFS (loop3): Ending clean mount [ 111.919718][ T1606] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 111.938415][ T1606] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.957278][ T5777] XFS (loop3): Quotacheck needed: Please wait. [ 111.990293][ T5777] XFS (loop3): Quotacheck: Done. [ 112.012363][ T1606] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.031600][ T1606] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.051639][ T1606] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.126419][ T1606] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.166238][ T1606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.289713][ T5231] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.379116][ T5815] loop1: detected capacity change from 0 to 4096 [ 112.406435][ T5815] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 112.487525][ T5815] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 112.544329][ T1606] usb 1-1: usb_control_msg returned -32 [ 112.586368][ T1606] usbtmc 1-1:16.0: can't read capabilities [ 112.721665][ T5818] siw: device registration error -23 [ 112.787610][ T5822] overlayfs: failed to resolve './file1': -2 [ 112.837995][ T5813] loop2: detected capacity change from 0 to 32768 [ 113.609788][ T5826] loop5: detected capacity change from 0 to 32768 [ 113.631478][ T5813] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 113.691361][ T5828] loop4: detected capacity change from 0 to 40427 [ 113.745238][ T5828] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 113.768025][ T5826] JBD2: Ignoring recovery information on journal [ 113.861147][ T5828] F2FS-fs (loop4): invalid crc value [ 113.868829][ T5826] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 113.890587][ T5828] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.013293][ T5228] ocfs2: Unmounting device (7,2) on (node local) [ 114.131426][ T5825] OCFS2: ERROR (device loop5): ocfs2_validate_gd_self: Group descriptor #32 has an invalid bg_blkno of 0 [ 114.197726][ T5825] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 114.235241][ T5828] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.243326][ T5825] OCFS2: File system is now read-only. [ 114.271818][ T5825] (syz.5.95,5825,0):ocfs2_search_chain:1814 ERROR: status = -30 [ 114.279919][ T5825] (syz.5.95,5825,0):ocfs2_search_chain:1926 ERROR: status = -30 [ 114.317518][ T5825] (syz.5.95,5825,0):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30 [ 114.350119][ T5825] (syz.5.95,5825,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 114.367350][ T5825] (syz.5.95,5825,0):__ocfs2_claim_clusters:2412 ERROR: status = -30 [ 114.390830][ T5825] (syz.5.95,5825,0):__ocfs2_claim_clusters:2420 ERROR: status = -30 [ 114.392329][ T46] usb 1-1: USB disconnect, device number 3 [ 114.423563][ T5825] (syz.5.95,5825,0):ocfs2_local_alloc_new_window:1216 ERROR: status = -30 [ 114.467477][ T5825] (syz.5.95,5825,0):ocfs2_local_alloc_new_window:1241 ERROR: status = -30 [ 114.492441][ T5232] syz-executor: attempt to access beyond end of device [ 114.492441][ T5232] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.505853][ T5825] (syz.5.95,5825,0):ocfs2_local_alloc_slide_window:1315 ERROR: status = -30 [ 114.525901][ T5232] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 114.542093][ T5825] (syz.5.95,5825,0):ocfs2_local_alloc_slide_window:1334 ERROR: status = -30 [ 114.551237][ T5825] (syz.5.95,5825,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 114.578746][ T5825] (syz.5.95,5825,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 114.588268][ T5825] (syz.5.95,5825,0):ocfs2_reserve_clusters_with_limit:1170 ERROR: status = -30 [ 114.597679][ T5825] (syz.5.95,5825,0):ocfs2_reserve_clusters_with_limit:1219 ERROR: status = -30 [ 114.606822][ T5825] (syz.5.95,5825,0):ocfs2_convert_inline_data_to_extents:7080 ERROR: status = -30 [ 114.616202][ T5825] (syz.5.95,5825,0):ocfs2_try_to_write_inline_data:1563 ERROR: status = -30 [ 114.625187][ T5825] (syz.5.95,5825,0):ocfs2_write_begin_nolock:1675 ERROR: status = -30 [ 114.634411][ T5825] (syz.5.95,5825,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 [ 114.660529][ T5826] OCFS2: ERROR (device loop5): ocfs2_validate_gd_self: Group descriptor #32 has an invalid bg_blkno of 0 [ 114.680076][ T5826] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 114.690265][ T5826] (syz.5.95,5826,0):ocfs2_search_chain:1814 ERROR: status = -30 [ 114.698397][ T5826] (syz.5.95,5826,0):ocfs2_search_chain:1926 ERROR: status = -30 [ 114.706401][ T5826] (syz.5.95,5826,0):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30 [ 114.714999][ T5826] (syz.5.95,5826,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 114.723569][ T5826] (syz.5.95,5826,0):__ocfs2_claim_clusters:2412 ERROR: status = -30 [ 114.732841][ T5826] (syz.5.95,5826,0):__ocfs2_claim_clusters:2420 ERROR: status = -30 [ 114.741970][ T5826] (syz.5.95,5826,0):ocfs2_local_alloc_new_window:1216 ERROR: status = -30 [ 114.750755][ T5826] (syz.5.95,5826,0):ocfs2_local_alloc_new_window:1241 ERROR: status = -30 [ 114.759698][ T5826] (syz.5.95,5826,0):ocfs2_local_alloc_slide_window:1315 ERROR: status = -30 [ 114.769120][ T5826] (syz.5.95,5826,0):ocfs2_local_alloc_slide_window:1334 ERROR: status = -30 [ 114.778053][ T5826] (syz.5.95,5826,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 114.786981][ T5826] (syz.5.95,5826,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 114.795871][ T5826] (syz.5.95,5826,0):ocfs2_reserve_clusters_with_limit:1170 ERROR: status = -30 [ 114.817983][ T5826] (syz.5.95,5826,0):ocfs2_reserve_clusters_with_limit:1219 ERROR: status = -30 [ 114.829075][ T5826] (syz.5.95,5826,0):ocfs2_convert_inline_data_to_extents:7080 ERROR: status = -30 [ 114.839279][ T5826] (syz.5.95,5826,0):ocfs2_try_to_write_inline_data:1563 ERROR: status = -30 [ 114.848941][ T5826] (syz.5.95,5826,0):ocfs2_write_begin_nolock:1675 ERROR: status = -30 [ 114.857334][ T5826] (syz.5.95,5826,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 [ 114.888637][ T5847] loop1: detected capacity change from 0 to 32768 [ 115.075525][ T5227] ocfs2: Unmounting device (7,5) on (node local) [ 115.309854][ T5847] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.894699][ T5851] loop2: detected capacity change from 0 to 32768 [ 115.935859][ T5851] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.97 (5851) [ 116.041716][ T5851] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.052345][ T5851] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 116.062473][ T5851] BTRFS info (device loop2): using free-space-tree [ 116.229411][ T5847] XFS (loop1): Ending clean mount [ 116.266807][ T5847] XFS (loop1): Quotacheck needed: Please wait. [ 116.331688][ T5299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.380829][ T5847] XFS (loop1): Quotacheck: Done. [ 116.491674][ T5299] usb 5-1: Using ep0 maxpacket: 32 [ 116.521952][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.537769][ T5849] loop3: detected capacity change from 0 to 32768 [ 116.564738][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.599914][ T5299] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 116.661630][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.689048][ T5299] usb 5-1: config 0 descriptor?? [ 116.712271][ T5868] loop5: detected capacity change from 0 to 32768 [ 116.781986][ T5228] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.843308][ T5849] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 116.857030][ T5229] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.894053][ T5868] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.100 (5868) [ 116.936532][ T5866] loop0: detected capacity change from 0 to 32768 [ 116.966286][ T5866] XFS: ikeep mount option is deprecated. [ 116.999916][ T5868] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.063567][ T5868] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 117.097750][ T5868] BTRFS info (device loop5): using free-space-tree [ 117.196210][ T5299] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 117.530253][ T5299] ft260 0003:0403:6030.0005: chip code: 5e81 abf2 [ 117.553596][ T5866] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.573148][ T5231] ocfs2: Unmounting device (7,3) on (node local) [ 117.918199][ T5866] XFS (loop0): Ending clean mount [ 117.966980][ T5279] usb 5-1: USB disconnect, device number 3 [ 117.976242][ T5866] XFS (loop0): Quotacheck needed: Please wait. [ 118.045233][ T5227] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.144220][ T5866] XFS (loop0): Quotacheck: Done. [ 118.362136][ T5226] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.480154][ T5924] loop5: detected capacity change from 0 to 256 [ 118.557612][ T5924] vfat: Bad value for 'fmask' [ 118.682254][ T5279] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.846533][ T5279] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 118.857657][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.879023][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.899582][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 118.929121][ T5279] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 118.941778][ T5279] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 118.960242][ T5279] usb 4-1: Manufacturer: syz [ 118.973258][ T5279] usb 4-1: config 0 descriptor?? [ 119.281907][ T5924] loop5: detected capacity change from 0 to 32768 [ 119.309088][ T5924] XFS: ikeep mount option is deprecated. [ 119.365039][ T5924] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.414550][ T5279] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 119.431409][ T5279] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 119.448001][ T5924] XFS (loop5): Ending clean mount [ 119.462527][ T5924] XFS (loop5): Quotacheck needed: Please wait. [ 119.524578][ T5924] XFS (loop5): Quotacheck: Done. [ 119.581883][ T5227] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.674972][ T5938] loop1: detected capacity change from 0 to 256 [ 119.682424][ T5938] vfat: Bad value for 'fmask' [ 119.799367][ T5941] loop0: detected capacity change from 0 to 4096 [ 119.820397][ T5941] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 119.838405][ T46] usb 4-1: USB disconnect, device number 2 [ 119.848511][ T5941] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 120.332257][ T5291] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.531663][ T5291] usb 3-1: Using ep0 maxpacket: 8 [ 120.541498][ T5291] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 120.550363][ T5291] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.560605][ T5291] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.600739][ T5291] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.670902][ T5291] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.704691][ T5291] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.745599][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.019139][ T5291] usb 3-1: usb_control_msg returned -32 [ 121.033952][ T5291] usbtmc 3-1:16.0: can't read capabilities [ 121.194056][ T5938] loop1: detected capacity change from 0 to 32768 [ 121.211396][ T5938] XFS: ikeep mount option is deprecated. [ 121.273311][ T5938] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.380874][ T5938] XFS (loop1): Ending clean mount [ 121.413944][ T5938] XFS (loop1): Quotacheck needed: Please wait. [ 121.461214][ T5972] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 121.498244][ T5938] XFS (loop1): Quotacheck: Done. [ 121.668364][ T46] usb 3-1: USB disconnect, device number 2 [ 121.680782][ T5963] loop5: detected capacity change from 0 to 32768 [ 121.824107][ T5963] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 121.824477][ T5229] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.072420][ T5961] loop0: detected capacity change from 0 to 32768 [ 122.151927][ T5961] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.488009][ T5227] ocfs2: Unmounting device (7,5) on (node local) [ 122.497592][ T5992] netlink: 'syz.3.121': attribute type 39 has an invalid length. [ 122.518077][ T5961] XFS (loop0): Ending clean mount [ 122.545119][ T5961] XFS (loop0): Quotacheck needed: Please wait. [ 122.608831][ T5961] XFS (loop0): Quotacheck: Done. [ 122.715162][ T5977] loop4: detected capacity change from 0 to 32768 [ 122.735096][ T5977] XFS: ikeep mount option is deprecated. [ 122.912184][ T5977] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.986381][ T6003] loop5: detected capacity change from 0 to 64 [ 123.099437][ T5226] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.311413][ T5977] XFS (loop4): Ending clean mount [ 123.339856][ T5977] XFS (loop4): Quotacheck needed: Please wait. [ 123.434749][ T5977] XFS (loop4): Quotacheck: Done. [ 123.686164][ T6016] loop2: detected capacity change from 0 to 2048 [ 123.787849][ T6014] loop5: detected capacity change from 0 to 4096 [ 123.835061][ T6014] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 123.859039][ T6022] loop0: detected capacity change from 0 to 256 [ 123.937478][ T6022] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 123.969290][ T6014] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 124.041700][ T5305] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.145954][ T6016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.175416][ T5232] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.189447][ T6012] loop3: detected capacity change from 0 to 32768 [ 124.212298][ T6016] EXT4-fs error (device loop2): ext4_ext_precache:631: inode #2: comm syz.2.132: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 124.218259][ T5305] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 124.253928][ T29] audit: type=1800 audit(1728357271.485:2): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.133" name="file1" dev="loop0" ino=1048606 res=0 errno=0 [ 124.277650][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.290234][ T29] audit: type=1800 audit(1728357271.495:3): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.133" name="file1" dev="loop0" ino=1048606 res=0 errno=0 [ 124.311309][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.323492][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.334149][ T5305] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 124.350393][ T5305] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 124.361820][ T5305] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 124.370240][ T5305] usb 2-1: Manufacturer: syz [ 124.416978][ T5305] usb 2-1: config 0 descriptor?? [ 124.446482][ T29] audit: type=1800 audit(1728357271.535:4): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.133" name="file1" dev="loop0" ino=1048606 res=0 errno=0 [ 124.486407][ T6012] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.547142][ T5228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.861974][ T1606] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 124.906821][ T6043] loop0: detected capacity change from 0 to 256 [ 124.925924][ T6043] vfat: Bad value for 'fmask' [ 124.934111][ T6012] XFS (loop3): Ending clean mount [ 124.964570][ T6012] XFS (loop3): Quotacheck needed: Please wait. [ 125.015477][ T5305] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 125.031776][ T1606] usb 6-1: Using ep0 maxpacket: 8 [ 125.040102][ T1606] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 125.064388][ T1606] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.070827][ T5305] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 125.078325][ T6012] XFS (loop3): Quotacheck: Done. [ 125.102065][ T1606] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.131626][ T1606] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.151604][ T1606] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.171638][ T1606] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.191494][ T1606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.344417][ T5231] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.370023][ T5305] usb 2-1: USB disconnect, device number 3 [ 125.466490][ T6043] loop0: detected capacity change from 0 to 32768 [ 125.473746][ T6043] XFS: ikeep mount option is deprecated. [ 125.600864][ T6043] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.751753][ T1606] usb 6-1: usb_control_msg returned -32 [ 125.757407][ T1606] usbtmc 6-1:16.0: can't read capabilities [ 125.774572][ T6043] XFS (loop0): Ending clean mount [ 125.791385][ T6043] XFS (loop0): Quotacheck needed: Please wait. [ 125.808449][ T6055] loop2: detected capacity change from 0 to 1024 [ 125.917590][ T6043] XFS (loop0): Quotacheck: Done. [ 125.972378][ T6055] hfsplus: request for non-existent node 3 in B*Tree [ 125.979642][ T6055] hfsplus: request for non-existent node 3 in B*Tree [ 126.156881][ T6055] hfsplus: catalog searching failed [ 126.171975][ T5226] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.191209][ T6063] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 126.347981][ T957] hfsplus: b-tree write err: -5, ino 3 [ 126.453803][ T5305] usb 6-1: USB disconnect, device number 3 [ 126.456434][ T6057] loop4: detected capacity change from 0 to 32768 [ 126.521840][ T6066] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.146'. [ 126.547585][ T6066] openvswitch: netlink: Multiple metadata blocks provided [ 126.559469][ T6068] loop2: detected capacity change from 0 to 1024 [ 126.585666][ T6057] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 126.679900][ T6068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.855666][ T6076] loop3: detected capacity change from 0 to 256 [ 126.873250][ T5232] ocfs2: Unmounting device (7,4) on (node local) [ 126.976484][ T5228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.473149][ T6089] warning: `syz.3.156' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.476114][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'. [ 127.752524][ T6093] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.923687][ T6098] Illegal XDP return value 1559207977 on prog (id 10) dev N/A, expect packet loss! [ 128.282385][ T5299] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.454639][ T5299] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 128.488760][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.517795][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.544018][ T1606] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.550081][ T5299] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 128.584240][ T5299] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 128.594576][ T5299] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 128.603440][ T5299] usb 1-1: Manufacturer: syz [ 128.620362][ T5299] usb 1-1: config 0 descriptor?? [ 128.731706][ T1606] usb 4-1: Using ep0 maxpacket: 8 [ 128.747400][ T1606] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 128.787892][ T1606] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.824675][ T1606] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.861280][ T1606] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.903835][ T1606] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.957649][ T6127] loop5: detected capacity change from 0 to 64 [ 128.961631][ T1606] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.003926][ T1606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.093961][ T5299] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 129.182483][ T5299] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 129.275907][ T1606] usb 4-1: usb_control_msg returned -32 [ 129.313925][ T1606] usbtmc 4-1:16.0: can't read capabilities [ 129.454011][ T1606] usb 1-1: USB disconnect, device number 4 [ 129.733741][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.177'. [ 129.768138][ T6140] program syz.2.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.768520][ T6110] loop1: detected capacity change from 0 to 32768 [ 129.826072][ T6110] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 129.926078][ T6145] loop5: detected capacity change from 0 to 1024 [ 129.985085][ T6145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.376573][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.649609][ T6152] loop2: detected capacity change from 0 to 32768 [ 130.670811][ T5229] ocfs2: Unmounting device (7,1) on (node local) [ 131.053475][ T6159] loop5: detected capacity change from 0 to 4096 [ 131.311288][ T6159] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 131.383407][ T6164] loop2: detected capacity change from 0 to 32768 [ 131.454399][ T6159] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 131.517125][ T6164] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 131.539532][ T1606] usb 4-1: USB disconnect, device number 3 [ 131.604577][ T6159] ntfs3: loop5: Failed to load $Extend (-22). [ 131.630163][ T6159] ntfs3: loop5: Failed to initialize $Extend. [ 132.019341][ T6169] loop0: detected capacity change from 0 to 32768 [ 132.107232][ T6164] XFS (loop2): Ending clean mount [ 132.139839][ T5299] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x26/0xe0, xfs_finobt block 0x20 [ 132.173241][ T5299] XFS (loop2): Unmount and run xfs_repair [ 132.199312][ T5299] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 132.259113][ T6169] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 132.291668][ T5299] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 132.300626][ T5299] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 132.331829][ T5299] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 132.340790][ T5299] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 132.371966][ T5299] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 132.380982][ T5299] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 132.411652][ T5299] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 132.420697][ T5299] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 132.482620][ T6164] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x20 len 8 error 74 [ 132.505200][ T6164] XFS (loop2): Failed to initialize disk quotas. [ 132.981739][ T5279] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.005895][ T6205] netlink: 'syz.5.200': attribute type 11 has an invalid length. [ 133.014662][ T6205] netlink: 211132 bytes leftover after parsing attributes in process `syz.5.200'. [ 133.048865][ T5228] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 133.063381][ T5228] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 133.082771][ T5226] ocfs2: Unmounting device (7,0) on (node local) [ 133.141942][ T5279] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 133.171825][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.192004][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.243770][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 133.278848][ T6209] loop5: detected capacity change from 0 to 128 [ 133.332169][ T6211] loop4: detected capacity change from 0 to 2048 [ 133.573290][ T6209] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.591812][ T5279] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 133.611164][ T5279] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 133.621393][ T6209] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.629875][ T5279] usb 4-1: Manufacturer: syz [ 133.675918][ T5279] usb 4-1: config 0 descriptor?? [ 133.793070][ T6211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.806378][ T6209] syz.5.202 (pid 6209) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 133.820139][ T6211] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.837249][ T6211] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 133.850500][ T6211] EXT4-fs (loop4): This should not happen!! Data will be lost [ 133.850500][ T6211] [ 133.861063][ T6211] EXT4-fs (loop4): Total free blocks count 0 [ 133.864076][ T6203] loop1: detected capacity change from 0 to 32768 [ 133.867450][ T6211] EXT4-fs (loop4): Free/Dirty block details [ 133.881899][ T6211] EXT4-fs (loop4): free_blocks=2415919104 [ 133.887709][ T6211] EXT4-fs (loop4): dirty_blocks=48 [ 133.893237][ T6211] EXT4-fs (loop4): Block reservation details [ 133.908076][ T6211] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 134.124108][ T5312] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 134.164745][ T5227] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.195610][ T6203] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 134.204413][ T5279] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 134.232630][ T5279] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 134.357261][ T6228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.207'. [ 134.536405][ T5291] usb 4-1: USB disconnect, device number 4 [ 134.562824][ T6232] netlink: 'syz.4.206': attribute type 2 has an invalid length. [ 134.614335][ T6232] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.206'. [ 134.654470][ T6238] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.209'. [ 134.659180][ T5229] ocfs2: Unmounting device (7,1) on (node local) [ 134.671587][ T6238] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.824076][ T5279] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.861340][ T6242] netlink: 64 bytes leftover after parsing attributes in process `syz.0.211'. [ 135.081706][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 135.096498][ T5279] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.105334][ T5279] usb 3-1: config 179 has no interface number 0 [ 135.122480][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.141396][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.153178][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.164600][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 135.176352][ T5279] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.190013][ T5279] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.199385][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.235190][ T6234] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 135.524921][ T5279] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 135.753772][ T46] usb 3-1: USB disconnect, device number 3 [ 135.753901][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 135.768331][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 135.777027][ T46] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 135.933945][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 135.953550][ T6263] loop5: detected capacity change from 0 to 4096 [ 136.056088][ T6263] ntfs3: loop5: ino=3, Correct links count -> 2. [ 136.544801][ T6284] loop1: detected capacity change from 0 to 128 [ 136.576520][ T6278] loop4: detected capacity change from 0 to 32768 [ 136.613468][ T6278] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.226 (6278) [ 136.647533][ T6278] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.674547][ T6263] overlayfs: upper fs does not support tmpfile. [ 136.684028][ T6292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.230'. [ 136.694156][ T6292] Zero length message leads to an empty skb [ 136.700278][ T6278] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 136.713677][ T6284] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.726384][ T6263] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 136.854001][ T5227] ntfs3: loop5: failed to convert "0080" to cp874 [ 136.871961][ T6284] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.898278][ T5227] ntfs3: loop5: failed to convert name for inode 1e. [ 137.039426][ T6284] process 'syz.1.228' launched './file0' with NULL argv: empty string added [ 137.130403][ T6278] BTRFS info (device loop4): rebuilding free space tree [ 137.170005][ T6278] BTRFS info (device loop4): disabling free space tree [ 137.177333][ T6278] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.187619][ T6278] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.311697][ T5305] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.425176][ T5229] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.490013][ T5305] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 137.521378][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.561013][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.568750][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.575425][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.587433][ T5305] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 137.625456][ T5305] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 137.637214][ T5305] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 137.651863][ T5232] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.671713][ T5305] usb 4-1: Manufacturer: syz [ 137.693005][ T5305] usb 4-1: config 0 descriptor?? [ 138.062547][ T6328] loop2: detected capacity change from 0 to 7 [ 138.070390][ T5312] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.129860][ T5305] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 138.142043][ T6328] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 138.171784][ T6328] loop2: partition table partially beyond EOD, truncated [ 138.210671][ T6328] loop2: p1 size 6333 extends beyond EOD, truncated [ 138.294143][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.310028][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.322032][ T5305] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 138.334614][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.445245][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 138.451625][ T5279] usb 4-1: USB disconnect, device number 5 [ 138.463364][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.474754][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.513560][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.527939][ T5312] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.760513][ T6334] loop1: detected capacity change from 0 to 256 [ 138.844376][ T5312] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.070530][ T5312] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.233823][ T6341] loop2: detected capacity change from 0 to 4096 [ 139.254922][ T6341] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 139.291658][ T5305] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.340553][ T6345] loop3: detected capacity change from 0 to 4096 [ 139.348755][ T6345] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 139.442389][ T5312] bridge_slave_1: left allmulticast mode [ 139.456037][ T6341] ntfs3: loop2: Inode r=19 is not in use! [ 139.468968][ T5312] bridge_slave_1: left promiscuous mode [ 139.477328][ T6345] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 139.491660][ T6341] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 139.493582][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.536393][ T6341] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 139.550618][ T5305] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 139.590001][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.642080][ T29] audit: type=1800 audit(1728357286.925:5): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.247" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 139.672131][ T6341] ntfs3: loop2: ino=1b, "file0" failed to parse mft record [ 139.676034][ T5305] usb 2-1: Product: syz [ 139.679799][ T6341] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 139.691587][ T5305] usb 2-1: Manufacturer: syz [ 139.700298][ T6345] ntfs3: loop3: ino=1e, "file1" failed to parse mft record [ 139.703341][ T5305] usb 2-1: SerialNumber: syz [ 139.726021][ T5312] bridge_slave_0: left allmulticast mode [ 139.745787][ T5305] usb 2-1: config 0 descriptor?? [ 139.758496][ T5312] bridge_slave_0: left promiscuous mode [ 139.764569][ T6345] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 139.768992][ T5305] ch341 2-1:0.0: ch341-uart converter detected [ 139.779781][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.209257][ T6351] loop4: detected capacity change from 0 to 32768 [ 140.712836][ T5240] Bluetooth: hci1: command tx timeout [ 140.723515][ T6375] loop3: detected capacity change from 0 to 4096 [ 140.806453][ T5305] ch341-uart ttyUSB0: failed to read break control: -71 [ 140.814089][ T5305] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 140.829478][ T5305] usb 2-1: USB disconnect, device number 4 [ 140.838479][ T5305] ch341 2-1:0.0: device disconnected [ 140.851908][ T6351] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.332381][ T6351] XFS (loop4): Ending clean mount [ 141.355242][ T29] audit: type=1800 audit(1728357288.645:6): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.255" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 141.368544][ T6351] XFS (loop4): Quotacheck needed: Please wait. [ 141.491430][ T6351] XFS (loop4): Quotacheck: Done. [ 142.101878][ T5232] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.118052][ T6395] loop3: detected capacity change from 0 to 32768 [ 142.222107][ T6395] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 142.446778][ T6395] XFS (loop3): Ending clean mount [ 142.484686][ T6395] XFS (loop3): Quotacheck needed: Please wait. [ 142.487540][ T6392] loop0: detected capacity change from 0 to 40427 [ 142.531897][ T6369] loop2: detected capacity change from 0 to 40427 [ 142.583425][ T6369] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 142.608112][ T6392] F2FS-fs (loop0): invalid crc value [ 142.625937][ T6369] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 142.659667][ T6392] F2FS-fs (loop0): Found nat_bits in checkpoint [ 142.683368][ T6369] F2FS-fs (loop2): invalid crc value [ 142.685975][ T5312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.710793][ T6395] XFS (loop3): Quotacheck: Done. [ 142.725965][ T6369] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.751656][ T5240] Bluetooth: hci1: command tx timeout [ 142.802253][ T5312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.933973][ T5312] bond0 (unregistering): Released all slaves [ 142.948795][ T5231] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 143.006646][ T6392] F2FS-fs (loop0): Start checkpoint disabled! [ 143.018707][ T6330] chnl_net:caif_netlink_parms(): no params data found [ 143.071997][ T6369] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 143.089802][ T6392] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 143.119189][ T6369] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.142009][ T29] audit: type=1800 audit(1728357290.425:7): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.257" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 143.164733][ T29] audit: type=1800 audit(1728357290.455:8): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.257" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 143.253443][ T6369] syz.2.251: attempt to access beyond end of device [ 143.253443][ T6369] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.277411][ T6417] syz.0.257: attempt to access beyond end of device [ 143.277411][ T6417] loop0: rw=2049, sector=77824, nr_sectors = 848 limit=40427 [ 143.567071][ T6397] loop1: detected capacity change from 0 to 32768 [ 143.673689][ T5228] syz-executor: attempt to access beyond end of device [ 143.673689][ T5228] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 143.727726][ T5228] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 143.743897][ T63] kworker/u8:4: attempt to access beyond end of device [ 143.743897][ T63] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 143.744790][ T6397] ERROR: (device loop1): dbAllocAny: unable to allocate blocks [ 143.744790][ T6397] [ 143.787262][ T6397] ERROR: (device loop1): remounting filesystem as read-only [ 143.817622][ T63] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 143.831942][ T63] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 143.865384][ T6397] jfs_mkdir: dtInsert returned -EIO [ 143.870932][ T6397] ERROR: (device loop1): txAbort: [ 143.870932][ T6397] [ 144.376142][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.381194][ T6433] loop0: detected capacity change from 0 to 1024 [ 144.392115][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.439375][ T6330] bridge_slave_0: entered allmulticast mode [ 144.471394][ T6330] bridge_slave_0: entered promiscuous mode [ 144.509910][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.538665][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.572072][ T6330] bridge_slave_1: entered allmulticast mode [ 144.579379][ T6330] bridge_slave_1: entered promiscuous mode [ 144.831737][ T5240] Bluetooth: hci1: command tx timeout [ 145.031682][ T5279] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.053021][ T6330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.096336][ T6330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.210763][ T5279] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 145.248363][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.270886][ T5279] usb 4-1: config 0 descriptor?? [ 145.313901][ T5279] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 145.471297][ T6452] bond0: option arp_interval: invalid value (18446744073709551615) [ 145.491697][ T6452] bond0: option arp_interval: allowed values 0 - 2147483647 [ 145.495638][ T5279] gspca_sn9c2028: read1 error -71 [ 145.532705][ T6330] team0: Port device team_slave_0 added [ 145.541043][ T5279] gspca_sn9c2028: read1 error -71 [ 145.558414][ T5279] gspca_sn9c2028: read1 error -71 [ 145.581855][ T6330] team0: Port device team_slave_1 added [ 145.588978][ T5279] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 145.629622][ T5279] usb 4-1: USB disconnect, device number 6 [ 145.643184][ T5312] hsr_slave_0: left promiscuous mode [ 145.686898][ T5312] hsr_slave_1: left promiscuous mode [ 145.727240][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.747582][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.788986][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.811771][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.950274][ T5312] veth1_macvtap: left promiscuous mode [ 145.958804][ T5312] veth0_macvtap: left promiscuous mode [ 146.001763][ T5312] veth1_vlan: left promiscuous mode [ 146.007491][ T5312] veth0_vlan: left promiscuous mode [ 146.024705][ T6464] syz.2.271 uses obsolete (PF_INET,SOCK_PACKET) [ 146.218565][ T6471] loop0: detected capacity change from 0 to 256 [ 146.257071][ T6463] loop1: detected capacity change from 0 to 4096 [ 146.437857][ T29] audit: type=1800 audit(1728357293.725:9): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.270" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 146.911716][ T5240] Bluetooth: hci1: command tx timeout [ 146.973540][ T6487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.276'. [ 147.070261][ T6489] loop1: detected capacity change from 0 to 256 [ 147.445827][ T6495] loop0: detected capacity change from 0 to 1024 [ 147.768448][ T5312] team0 (unregistering): Port device team_slave_1 removed [ 147.973720][ T5312] team0 (unregistering): Port device team_slave_0 removed [ 148.066805][ T6500] loop1: detected capacity change from 0 to 16 [ 148.106491][ T6500] erofs: (device loop1): mounted with root inode @ nid 36. [ 148.251807][ T29] audit: type=1800 audit(1728357295.515:10): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.281" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 148.888255][ T6499] loop0: detected capacity change from 0 to 32768 [ 149.039329][ T6499] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 149.202381][ T5226] ocfs2: Unmounting device (7,0) on (node local) [ 149.625154][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.681885][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.774886][ T6330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.878098][ T6516] loop0: detected capacity change from 0 to 4096 [ 149.920551][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.931824][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.032525][ T6330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.090010][ T6523] loop2: detected capacity change from 0 to 1024 [ 150.214215][ T29] audit: type=1800 audit(1728357297.505:11): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.287" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 150.251131][ T6523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.367720][ T6330] hsr_slave_0: entered promiscuous mode [ 150.385537][ T6523] overlayfs: failed to clone upperpath [ 150.413137][ T6330] hsr_slave_1: entered promiscuous mode [ 150.439512][ T6330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.467291][ T6330] Cannot create hsr debugfs directory [ 150.542758][ T6531] trusted_key: syz.1.291 sent an empty control message without MSG_MORE. [ 150.703082][ T5228] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11 [ 150.785903][ T5228] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11 [ 151.284112][ T6513] loop3: detected capacity change from 0 to 32768 [ 151.319983][ T6513] XFS: attr2 mount option is deprecated. [ 151.332088][ T6513] XFS: ikeep mount option is deprecated. [ 151.348661][ T6513] XFS: noikeep mount option is deprecated. [ 151.393013][ T6513] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 151.460132][ T6513] XFS (loop3): Ending clean mount [ 151.492760][ T6513] XFS (loop3): Quotacheck needed: Please wait. [ 151.604328][ T6513] XFS (loop3): Quotacheck: Done. [ 151.657219][ T6561] loop4: detected capacity change from 0 to 1024 [ 151.770589][ T29] audit: type=1800 audit(1728357299.045:12): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.296" name="bus" dev="loop4" ino=25 res=0 errno=0 [ 151.842108][ T5231] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 151.851998][ T6563] netlink: 36 bytes leftover after parsing attributes in process `syz.1.298'. [ 151.866012][ T29] audit: type=1800 audit(1728357299.055:13): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.296" name="bus" dev="loop4" ino=25 res=0 errno=0 [ 151.907462][ T5228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.011395][ T6565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.367441][ T5312] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.955097][ T5312] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.033007][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.304'. [ 153.224647][ T5312] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.343113][ T5305] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.579651][ T5305] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 153.607549][ T5305] usb 4-1: config 0 has no interface number 0 [ 153.654584][ T5305] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.705348][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.759373][ T5305] usb 4-1: config 0 descriptor?? [ 153.792929][ T5305] cp210x 4-1:0.108: cp210x converter detected [ 153.997226][ T5312] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.013956][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.024669][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.034731][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.044654][ T6576] loop4: detected capacity change from 0 to 131072 [ 154.045180][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.062091][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.070954][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.085986][ T6576] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.218115][ T6576] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.223288][ T5305] cp210x 4-1:0.108: failed to get vendor val 0x000e size 3: -71 [ 154.229247][ T5305] usb 4-1: cp210x converter now attached to ttyUSB0 [ 154.244003][ T5305] usb 4-1: USB disconnect, device number 7 [ 154.329614][ T5305] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 154.330141][ T5305] cp210x 4-1:0.108: device disconnected [ 154.498630][ T6330] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.555426][ T6330] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.578450][ T6330] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.626415][ T6330] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.990748][ T5312] bridge_slave_1: left allmulticast mode [ 155.006837][ T5312] bridge_slave_1: left promiscuous mode [ 155.082451][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.214902][ T5312] bridge_slave_0: left allmulticast mode [ 155.251239][ T5312] bridge_slave_0: left promiscuous mode [ 155.260694][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.518696][ T5305] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.729241][ T5305] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.750777][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 155.805785][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 155.834174][ T5305] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.891793][ T5305] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.905964][ T6631] loop4: detected capacity change from 0 to 8 [ 155.920215][ T5305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.940820][ T5305] usb 2-1: config 0 descriptor?? [ 155.952601][ T6617] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.191809][ T5241] Bluetooth: hci2: command tx timeout [ 156.384054][ T5305] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 156.420730][ T5305] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 156.442540][ T5305] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 156.664605][ T5305] usb 2-1: USB disconnect, device number 5 [ 156.957372][ T5312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.979566][ T5312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.012457][ T5312] bond0 (unregistering): Released all slaves [ 157.064246][ T6642] netlink: 'syz.0.324': attribute type 9 has an invalid length. [ 157.081882][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 157.475045][ T6665] ubi0: attaching mtd0 [ 157.489077][ T6665] ubi0: scanning is finished [ 157.501045][ T6665] ubi0: empty MTD device detected [ 157.703805][ T6665] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 157.716795][ T6673] loop0: detected capacity change from 0 to 1024 [ 157.723421][ T6665] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 157.764182][ T6665] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 157.801234][ T6586] chnl_net:caif_netlink_parms(): no params data found [ 157.809079][ T6665] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 157.820445][ T6665] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 157.860044][ T6665] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 157.877502][ T6665] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1490469410 [ 157.950736][ T63] hfsplus: b-tree write err: -5, ino 4 [ 157.970736][ T6665] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 157.982214][ T5312] hsr_slave_0: left promiscuous mode [ 158.010371][ T6675] ubi0: background thread "ubi_bgt0d" started, PID 6675 [ 158.019291][ T6669] ubi0: detaching mtd0 [ 158.053087][ T5312] hsr_slave_1: left promiscuous mode [ 158.103112][ T6669] ubi0: mtd0 is detached [ 158.108886][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.116867][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.182512][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.190022][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.272104][ T5241] Bluetooth: hci2: command tx timeout [ 158.314701][ T5312] veth1_macvtap: left promiscuous mode [ 158.360489][ T5312] veth0_macvtap: left promiscuous mode [ 158.407697][ T5312] veth1_vlan: left promiscuous mode [ 158.417143][ T5312] veth0_vlan: left promiscuous mode [ 158.613485][ T6699] loop3: detected capacity change from 0 to 512 [ 158.641704][ T6699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.722902][ T6699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.756300][ T6699] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.985752][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.183496][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.346'. [ 159.203315][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 159.397482][ T6684] loop0: detected capacity change from 0 to 40427 [ 159.425931][ T6684] F2FS-fs (loop0): build fault injection attr: rate: 694, type: 0x1fffff [ 159.447194][ T6684] F2FS-fs (loop0): invalid crc value [ 159.492478][ T6684] F2FS-fs (loop0): Found nat_bits in checkpoint [ 159.630278][ T6684] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.810533][ T5312] team0 (unregistering): Port device team_slave_1 removed [ 159.810540][ T6684] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_mpage_readpages+0xfc9/0x1600 [ 159.843328][ T6684] syz.0.339: attempt to access beyond end of device [ 159.843328][ T6684] loop0: rw=524288, sector=45072, nr_sectors = 8 limit=40427 [ 159.875033][ T6684] syz.0.339: attempt to access beyond end of device [ 159.875033][ T6684] loop0: rw=524288, sector=45088, nr_sectors = 8 limit=40427 [ 159.890323][ T6684] syz.0.339: attempt to access beyond end of device [ 159.890323][ T6684] loop0: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 159.906155][ T29] audit: type=1800 audit(1728357307.195:14): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.339" name="/" dev="loop0" ino=8 res=0 errno=0 [ 159.932512][ T5312] team0 (unregistering): Port device team_slave_0 removed [ 159.990207][ T5226] syz-executor: attempt to access beyond end of device [ 159.990207][ T5226] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 160.015597][ T5226] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 160.024318][ T5226] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 160.354364][ T5241] Bluetooth: hci2: command tx timeout [ 160.526612][ T6717] netlink: 165 bytes leftover after parsing attributes in process `syz.0.348'. [ 160.835409][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.346'. [ 160.887935][ T6330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.074709][ T6730] loop1: detected capacity change from 0 to 1024 [ 161.103830][ T6730] EXT4-fs: Ignoring removed orlov option [ 161.193656][ T6730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.233763][ T6330] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.462084][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.469299][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.478258][ T6586] bridge_slave_0: entered allmulticast mode [ 161.485672][ T6586] bridge_slave_0: entered promiscuous mode [ 161.492796][ T6730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.494566][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.512806][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.520091][ T6586] bridge_slave_1: entered allmulticast mode [ 161.528589][ T6586] bridge_slave_1: entered promiscuous mode [ 161.788058][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.796722][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.107813][ T6769] loop4: detected capacity change from 0 to 256 [ 162.123002][ T6769] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.196392][ T6769] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.229532][ T5229] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.245439][ T6586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.356521][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.363823][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.431708][ T5241] Bluetooth: hci2: command tx timeout [ 162.519731][ T6771] loop0: detected capacity change from 0 to 40427 [ 162.584667][ T6771] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 162.599086][ T6771] F2FS-fs (loop0): Image doesn't support compression [ 162.606192][ T6771] F2FS-fs (loop0): Image doesn't support compression [ 162.620326][ T6586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.638632][ T6771] F2FS-fs (loop0): invalid crc value [ 162.745162][ T6771] F2FS-fs (loop0): Found nat_bits in checkpoint [ 162.776837][ T6586] team0: Port device team_slave_0 added [ 162.897801][ T6586] team0: Port device team_slave_1 added [ 163.043385][ T6771] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 163.099544][ T6771] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_xattr_generic_get+0x138/0x170 [ 163.150021][ T29] audit: type=1800 audit(1728357310.435:15): pid=6771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.361" name="bus" dev="loop0" ino=17 res=0 errno=0 [ 163.226858][ T6790] loop4: detected capacity change from 0 to 256 [ 163.248927][ T6787] loop3: detected capacity change from 0 to 4096 [ 163.278652][ T6790] exfat: Deprecated parameter 'namecase' [ 163.293050][ T6790] exfat: Deprecated parameter 'utf8' [ 163.349661][ T6790] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 163.483502][ T5226] syz-executor: attempt to access beyond end of device [ 163.483502][ T5226] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 163.498329][ T5226] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 163.543304][ T5226] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 163.652565][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.659629][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.761653][ T6586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.789857][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.800029][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.826120][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.835404][ T6586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.730554][ T6586] hsr_slave_0: entered promiscuous mode [ 164.758769][ T6586] hsr_slave_1: entered promiscuous mode [ 164.981950][ T6820] syzkaller1: entered promiscuous mode [ 164.987533][ T6820] syzkaller1: entered allmulticast mode [ 164.992100][ T6826] loop3: detected capacity change from 0 to 128 [ 165.174824][ T29] audit: type=1800 audit(1728357312.465:16): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.374" name="file1" dev="loop3" ino=1048611 res=0 errno=0 [ 165.180694][ T6826] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 165.256533][ T6330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.271623][ T29] audit: type=1800 audit(1728357312.465:17): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.374" name="file1" dev="loop3" ino=1048611 res=0 errno=0 [ 165.293229][ T6826] FAT-fs (loop3): Filesystem has been set read-only [ 165.300062][ T6826] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 165.361116][ T29] audit: type=1800 audit(1728357312.465:18): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.374" name="file1" dev="loop3" ino=1048611 res=0 errno=0 [ 165.806436][ T6842] loop3: detected capacity change from 0 to 512 [ 165.880304][ T6842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.912200][ T6842] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.984241][ T6842] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 166.187829][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.201037][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.219047][ T6810] loop4: detected capacity change from 0 to 32768 [ 166.261119][ T6810] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.371 (6810) [ 166.401980][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 166.410159][ T6810] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.444538][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.462861][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.472620][ T6810] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 166.499296][ T6810] BTRFS info (device loop4): using free-space-tree [ 166.506659][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.528285][ T9] usb 1-1: config 0 descriptor?? [ 166.629205][ T6330] veth0_vlan: entered promiscuous mode [ 166.672496][ T6810] BTRFS info (device loop4): rebuilding free space tree [ 166.733198][ T6330] veth1_vlan: entered promiscuous mode [ 166.784673][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 167.058170][ T6330] veth0_macvtap: entered promiscuous mode [ 167.092135][ T6890] loop1: detected capacity change from 0 to 128 [ 167.128402][ T5232] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.134861][ T6890] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.157973][ T6890] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.233666][ T6330] veth1_macvtap: entered promiscuous mode [ 167.255284][ T6586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 167.306158][ T6586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 167.321997][ T5293] usb 1-1: USB disconnect, device number 5 [ 167.331369][ T6586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 167.342320][ T5293] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 167.382960][ T6586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.446094][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.457712][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.471815][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.498518][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.522377][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.538689][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.549986][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.563375][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.585733][ T5229] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.596325][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.720631][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.760534][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.770539][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.781431][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.791811][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.802422][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.812378][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.823089][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.834795][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.847494][ T6330] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.856423][ T6330] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.868181][ T6330] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.883166][ T6330] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.324190][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.361600][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.385861][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.396344][ T6915] netlink: 'syz.1.391': attribute type 9 has an invalid length. [ 168.450293][ T6915] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.391'. [ 168.487466][ T6586] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.536902][ T6435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.546613][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.553789][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.564789][ T6919] capability: warning: `syz.4.392' uses 32-bit capabilities (legacy support in use) [ 168.569190][ T6435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.670509][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.677728][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.094705][ T6930] netlink: 'syz.4.395': attribute type 3 has an invalid length. [ 169.137013][ T6930] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.395'. [ 169.184510][ T6934] Bluetooth: MGMT ver 1.23 [ 169.665726][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.902637][ T6586] veth0_vlan: entered promiscuous mode [ 169.912496][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 169.939384][ T6586] veth1_vlan: entered promiscuous mode [ 170.050759][ T6909] loop0: detected capacity change from 0 to 32768 [ 170.072798][ T6586] veth0_macvtap: entered promiscuous mode [ 170.130489][ T6586] veth1_macvtap: entered promiscuous mode [ 170.177277][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.187891][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.197946][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.209313][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.219383][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.230473][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.240398][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.250939][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.261324][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.272198][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.284081][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.298230][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.309338][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.332562][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.368594][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.381594][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.400746][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.445425][ T6970] loop3: detected capacity change from 0 to 64 [ 170.469513][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.524600][ T6970] hfs: unable to locate alternate MDB [ 170.535808][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.538308][ T6970] hfs: continuing without an alternate MDB [ 170.611654][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.659255][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.678974][ T29] audit: type=1800 audit(1728357317.965:19): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.405" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 170.728155][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.851805][ T29] audit: type=1800 audit(1728357317.975:20): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.405" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 170.875619][ T6586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.887031][ T6980] loop5: detected capacity change from 0 to 2048 [ 170.951801][ T6586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.001434][ T6586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.031704][ T6586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.190189][ T6980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.463935][ T6330] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.480373][ T5312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.509079][ T5312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.592246][ T5291] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.664820][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.673024][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.701779][ T5369] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 171.771716][ T5291] usb 5-1: Using ep0 maxpacket: 16 [ 171.779851][ T5291] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 171.793348][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.836154][ T5291] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 171.854373][ T5369] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.873786][ T5291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.882149][ T5369] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.908792][ T5291] usb 5-1: Product: syz [ 171.923094][ T5369] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 171.932392][ T5291] usb 5-1: Manufacturer: syz [ 171.941805][ T5369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.949986][ T5291] usb 5-1: SerialNumber: syz [ 171.991785][ T5291] usb 5-1: config 0 descriptor?? [ 171.997025][ T5369] usb 4-1: SerialNumber: syz [ 172.015752][ T5291] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 172.061214][ T5291] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 172.254747][ T5369] usb 4-1: 0:2 : does not exist [ 172.306604][ T5369] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 172.462117][ T5369] usb 4-1: USB disconnect, device number 8 [ 172.556131][ T7012] loop2: detected capacity change from 0 to 4096 [ 172.663655][ T5291] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 172.683556][ T5291] em28xx 5-1:0.0: Config register raw data: 0x56 [ 172.739895][ T7015] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.888183][ T7012] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 172.895171][ T5291] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 172.927641][ T6998] loop0: detected capacity change from 0 to 32768 [ 172.949791][ T6998] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.413 (6998) [ 172.950441][ T5293] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 172.984671][ T5291] em28xx 5-1:0.0: No AC97 audio processor [ 173.023514][ T5291] usb 5-1: USB disconnect, device number 4 [ 173.030336][ T5291] em28xx 5-1:0.0: Disconnecting em28xx [ 173.037804][ T6998] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.077911][ T5291] em28xx 5-1:0.0: Freeing device [ 173.087528][ T6998] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 173.139769][ T6998] BTRFS info (device loop0): using free-space-tree [ 173.197153][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.242905][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.295713][ T5293] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 173.319128][ T7036] Dead loop on virtual device ip6_vti0, fix it urgently! [ 173.330042][ T7036] Dead loop on virtual device ip6_vti0, fix it urgently! [ 173.338566][ T7036] Dead loop on virtual device ip6_vti0, fix it urgently! [ 173.346115][ T7036] Dead loop on virtual device ip6_vti0, fix it urgently! [ 173.355320][ T7036] Dead loop on virtual device ip6_vti0, fix it urgently! [ 173.363702][ T7036] Dead loop on virtual device ip6_vti0, fix it urgently! [ 173.364437][ T5293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.504671][ T5293] usb 2-1: config 0 descriptor?? [ 173.825570][ T5226] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.830421][ T29] audit: type=1326 audit(1728357321.075:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42617dff9 code=0x7ffc0000 [ 173.892604][ T29] audit: type=1326 audit(1728357321.085:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc42617dff9 code=0x7ffc0000 [ 173.988079][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.424'. [ 174.003500][ T29] audit: type=1326 audit(1728357321.085:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42617dff9 code=0x7ffc0000 [ 174.078737][ T5293] hid-led 0003:1D34:000A.000C: unknown main item tag 0x0 [ 174.137358][ T29] audit: type=1326 audit(1728357321.085:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42617dff9 code=0x7ffc0000 [ 174.288425][ T5293] hid-led 0003:1D34:000A.000C: probe with driver hid-led failed with error -71 [ 174.321960][ T5293] usb 2-1: USB disconnect, device number 6 [ 174.682563][ T7062] could not open pipe file descriptor [ 175.843046][ T5293] kernel write not supported for file /cpuinfo (pid: 5293 comm: kworker/1:4) [ 175.968218][ T7110] loop3: detected capacity change from 0 to 512 [ 175.987104][ T7110] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 176.001187][ T7110] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.077570][ T7110] EXT4-fs (loop3): 1 truncate cleaned up [ 176.174441][ T7110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.378095][ T7110] EXT4-fs (loop3): shut down requested (0) [ 176.475529][ T7119] loop4: detected capacity change from 0 to 1764 [ 176.552947][ T7119] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 176.614109][ T7119] ISOFS: unable to read i-node block [ 176.668847][ T5291] [ 176.671243][ T5291] ====================================================== [ 176.678318][ T5291] WARNING: possible circular locking dependency detected [ 176.685354][ T5291] 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 Not tainted [ 176.692588][ T5291] ------------------------------------------------------ [ 176.699635][ T5291] kworker/1:3/5291 is trying to acquire lock: [ 176.705720][ T5291] ffff888026ceb258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x6d/0x3b0 [ 176.707922][ T7119] isofs_fill_super: get root inode failed [ 176.717278][ T5291] [ 176.717278][ T5291] but task is already holding lock: [ 176.717292][ T5291] ffff88802deb9928 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x235/0x700 [ 176.717391][ T5291] [ 176.717391][ T5291] which lock already depends on the new lock. [ 176.717391][ T5291] [ 176.717403][ T5291] [ 176.717403][ T5291] the existing dependency chain (in reverse order) is: [ 176.717417][ T5291] [ 176.717417][ T5291] -> #3 (&d->lock){+.+.}-{3:3}: [ 176.717477][ T5291] __mutex_lock+0x175/0x9c0 [ 176.717536][ T5291] __rfcomm_dlc_close+0x235/0x700 [ 176.776938][ T5291] rfcomm_dlc_close+0x1eb/0x240 [ 176.782524][ T5291] __rfcomm_sock_close+0xa7/0x230 [ 176.788411][ T5291] rfcomm_sock_shutdown+0xd5/0x230 [ 176.794116][ T5291] rfcomm_sock_release+0x5d/0x140 [ 176.799693][ T5291] __sock_release+0xb3/0x270 [ 176.804833][ T5291] sock_close+0x1c/0x30 [ 176.809536][ T5291] __fput+0x3f9/0xb60 [ 176.814066][ T5291] delayed_fput+0x72/0x90 [ 176.819029][ T5291] process_one_work+0x9c8/0x1ba0 [ 176.824514][ T5291] worker_thread+0x6c8/0xf00 [ 176.829650][ T5291] kthread+0x2c4/0x3a0 [ 176.834273][ T5291] ret_from_fork+0x48/0x80 [ 176.839237][ T5291] ret_from_fork_asm+0x1a/0x30 [ 176.844565][ T5291] [ 176.844565][ T5291] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 176.852082][ T5291] __mutex_lock+0x175/0x9c0 [ 176.857237][ T5291] rfcomm_dlc_exists+0x5f/0x1a0 [ 176.862639][ T5291] rfcomm_dev_ioctl+0x9e6/0x1ca0 [ 176.868135][ T5291] rfcomm_sock_ioctl+0xb4/0xe0 [ 176.873448][ T5291] sock_do_ioctl+0x119/0x280 [ 176.878685][ T5291] sock_ioctl+0x228/0x6c0 [ 176.883572][ T5291] __x64_sys_ioctl+0x192/0x220 [ 176.889067][ T5291] do_syscall_64+0xcd/0x250 [ 176.894142][ T5291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.900606][ T5291] [ 176.900606][ T5291] -> #1 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 176.909082][ T5291] __mutex_lock+0x175/0x9c0 [ 176.914151][ T5291] rfcomm_dev_ioctl+0x905/0x1ca0 [ 176.919651][ T5291] rfcomm_sock_ioctl+0xb4/0xe0 [ 176.924966][ T5291] sock_do_ioctl+0x119/0x280 [ 176.930111][ T5291] sock_ioctl+0x228/0x6c0 [ 176.934996][ T5291] __x64_sys_ioctl+0x192/0x220 [ 176.940312][ T5291] do_syscall_64+0xcd/0x250 [ 176.945389][ T5291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.951840][ T5291] [ 176.951840][ T5291] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 176.961363][ T5291] __lock_acquire+0x250b/0x3ce0 [ 176.966852][ T5291] lock_acquire.part.0+0x11b/0x380 [ 176.972516][ T5291] lock_sock_nested+0x3a/0xf0 [ 176.977744][ T5291] rfcomm_sk_state_change+0x6d/0x3b0 [ 176.983583][ T5291] __rfcomm_dlc_close+0x28f/0x700 [ 176.989247][ T5291] rfcomm_dlc_close+0x1eb/0x240 [ 176.994651][ T5291] __rfcomm_sock_close+0xa7/0x230 [ 177.000229][ T5291] rfcomm_sock_shutdown+0xd5/0x230 [ 177.005893][ T5291] rfcomm_sock_release+0x5d/0x140 [ 177.011473][ T5291] __sock_release+0xb3/0x270 [ 177.016620][ T5291] sock_close+0x1c/0x30 [ 177.021327][ T5291] __fput+0x3f9/0xb60 [ 177.025857][ T5291] delayed_fput+0x72/0x90 [ 177.030739][ T5291] process_one_work+0x9c8/0x1ba0 [ 177.036576][ T5291] worker_thread+0x6c8/0xf00 [ 177.041717][ T5291] kthread+0x2c4/0x3a0 [ 177.046340][ T5291] ret_from_fork+0x48/0x80 [ 177.051305][ T5291] ret_from_fork_asm+0x1a/0x30 [ 177.056636][ T5291] [ 177.056636][ T5291] other info that might help us debug this: [ 177.056636][ T5291] [ 177.066881][ T5291] Chain exists of: [ 177.066881][ T5291] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_mutex --> &d->lock [ 177.066881][ T5291] [ 177.080874][ T5291] Possible unsafe locking scenario: [ 177.080874][ T5291] [ 177.088455][ T5291] CPU0 CPU1 [ 177.093834][ T5291] ---- ---- [ 177.099228][ T5291] lock(&d->lock); [ 177.103064][ T5291] lock(rfcomm_mutex); [ 177.109764][ T5291] lock(&d->lock); [ 177.116121][ T5291] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 177.122311][ T5291] [ 177.122311][ T5291] *** DEADLOCK *** [ 177.122311][ T5291] [ 177.131021][ T5291] 5 locks held by kworker/1:3/5291: [ 177.136414][ T5291] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 177.146939][ T5291] #1: ffffc9000496fd80 ((delayed_fput_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 177.157812][ T5291] #2: ffff88805aebbe08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 177.168615][ T5291] #3: ffffffff901756c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x33/0x240 [ 177.178177][ T5291] #4: ffff88802deb9928 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x235/0x700 [ 177.187566][ T5291] [ 177.187566][ T5291] stack backtrace: [ 177.193471][ T5291] CPU: 1 UID: 0 PID: 5291 Comm: kworker/1:3 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 177.204268][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 177.214352][ T5291] Workqueue: events delayed_fput [ 177.219640][ T5291] Call Trace: [ 177.222934][ T5291] [ 177.225880][ T5291] dump_stack_lvl+0x116/0x1f0 [ 177.230612][ T5291] print_circular_bug+0x41c/0x610 [ 177.235700][ T5291] check_noncircular+0x31a/0x400 [ 177.240688][ T5291] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 177.247330][ T5291] ? __pfx_check_noncircular+0x10/0x10 [ 177.252970][ T5291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.258660][ T5291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.264342][ T5291] ? lockdep_lock+0x1b8/0x200 [ 177.269242][ T5291] ? __pfx_lockdep_lock+0x10/0x10 [ 177.274310][ T5291] __lock_acquire+0x250b/0x3ce0 [ 177.279200][ T5291] ? __pfx___lock_acquire+0x10/0x10 [ 177.284424][ T5291] ? __mutex_trylock_common+0xea/0x250 [ 177.289955][ T5291] ? __pfx___mutex_trylock_common+0x10/0x10 [ 177.295910][ T5291] ? __rfcomm_dlc_close+0x235/0x700 [ 177.301140][ T5291] lock_acquire.part.0+0x11b/0x380 [ 177.306283][ T5291] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 177.311783][ T5291] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 177.317446][ T5291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.323129][ T5291] ? rcu_is_watching+0x12/0xc0 [ 177.327931][ T5291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.333613][ T5291] ? trace_lock_acquire+0x14a/0x1d0 [ 177.338947][ T5291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.344629][ T5291] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 177.350125][ T5291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.355813][ T5291] ? lock_acquire+0x2f/0xb0 [ 177.360347][ T5291] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 177.365852][ T5291] lock_sock_nested+0x3a/0xf0 [ 177.370557][ T5291] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 177.376062][ T5291] rfcomm_sk_state_change+0x6d/0x3b0 [ 177.381396][ T5291] __rfcomm_dlc_close+0x28f/0x700 [ 177.386462][ T5291] rfcomm_dlc_close+0x1eb/0x240 [ 177.391523][ T5291] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.397498][ T5291] __rfcomm_sock_close+0xa7/0x230 [ 177.402664][ T5291] rfcomm_sock_shutdown+0xd5/0x230 [ 177.407818][ T5291] rfcomm_sock_release+0x5d/0x140 [ 177.412893][ T5291] __sock_release+0xb3/0x270 [ 177.417615][ T5291] ? __pfx_sock_close+0x10/0x10 [ 177.422531][ T5291] sock_close+0x1c/0x30 [ 177.426723][ T5291] __fput+0x3f9/0xb60 [ 177.430734][ T5291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.436421][ T5291] delayed_fput+0x72/0x90 [ 177.441223][ T5291] process_one_work+0x9c8/0x1ba0 [ 177.446199][ T5291] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 177.451872][ T5291] ? __pfx_process_one_work+0x10/0x10 [ 177.457274][ T5291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.463103][ T5291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.468790][ T5291] ? assign_work+0x1a0/0x250 [ 177.473449][ T5291] worker_thread+0x6c8/0xf00 [ 177.478090][ T5291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.483779][ T5291] ? __kthread_parkme+0x148/0x220 [ 177.488847][ T5291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.494534][ T5291] ? __pfx_worker_thread+0x10/0x10 [ 177.499679][ T5291] kthread+0x2c4/0x3a0 [ 177.503805][ T5291] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.509058][ T5291] ? __pfx_kthread+0x10/0x10 [ 177.513700][ T5291] ret_from_fork+0x48/0x80 [ 177.518156][ T5291] ? __pfx_kthread+0x10/0x10 [ 177.522834][ T5291] ret_from_fork_asm+0x1a/0x30 [ 177.527665][ T5291] [ 177.544063][ T5293] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 177.803979][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.848285][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.879519][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.901667][ T5293] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 177.929949][ T1606] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.937747][ T5293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.982477][ T5293] usb 6-1: config 0 descriptor?? [ 178.111643][ T5240] Bluetooth: hci2: command 0x0405 tx timeout [ 178.145780][ T1606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.156921][ T1606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.166822][ T1606] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 178.176206][ T1606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.196735][ T1606] usb 1-1: config 0 descriptor?? [ 178.443391][ T5293] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 178.512188][ T5293] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected [ 178.541503][ T5293] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 178.630667][ T1606] sony 0003:054C:0268.000F: collection stack underflow [ 178.638198][ T1606] sony 0003:054C:0268.000F: item 0 4 0 12 parsing failed [ 178.646320][ T1606] sony 0003:054C:0268.000F: parse failed [ 178.652362][ T1606] sony 0003:054C:0268.000F: probe with driver sony failed with error -22 [ 178.674177][ T1606] usb 6-1: USB disconnect, device number 4 [ 178.695251][ T1606] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected [ 178.845753][ T5291] usb 1-1: USB disconnect, device number 6 [ 179.642037][ T5241] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 179.651252][ T5241] Bluetooth: hci4: Injecting HCI hardware error event [ 179.658945][ T5241] Bluetooth: hci4: hardware error 0x00 [ 181.712687][ T5241] Bluetooth: hci4: Opcode 0x0c03 failed: -110