last executing test programs: 26.159563226s ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$nci(r1, 0x0, 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_TSC_KHZ(r5, 0xaea3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}, r6}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @empty}, r6}}, 0x48) 6.813549776s ago: executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) unshare(0x20020400) memfd_create(&(0x7f0000000000)='-\'#{\\\x00', 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x14, r3, 0x333, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0xa60d000000000000}, 0x0) 5.89105486s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 5.669472288s ago: executing program 0: gettid() timer_create(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) gettid() poll(0x0, 0x0, 0x64) pipe2$9p(&(0x7f0000000280), 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x41005, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) sched_setscheduler(0x0, 0x0, 0x0) 5.420617759s ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:\n'], 0x8) close(r2) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigreturn() bind$unix(0xffffffffffffffff, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x1003) 3.799656066s ago: executing program 4: close(0xffffffffffffffff) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f0000000180)='\xb6\x00', 0x40, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) 3.62106279s ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000101c0)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000103c0)=[{0x0}, {&(0x7f0000010100)="2da0f9e777788aac3d15d8e4830824e8c57201ae20e44e0b654540ed772e78386ef18e57da684b61efaebf86cf0795c03cbd53446a4744051ab83b6fb76c3a35357c30c89b85b947527789aa1e875e6c30e8f2bec79c2ef45ae528", 0x5b}], 0x2}, 0x0) statfs(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rt_sigreturn() futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x77359400}}, 0x0) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r3, 0x0) r4 = dup3(r3, r2, 0x0) accept$packet(r4, 0x0, 0x0) 3.580780857s ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$nci(r1, 0x0, 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_TSC_KHZ(r5, 0xaea3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}, r6}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @empty}, r6}}, 0x48) 3.143924395s ago: executing program 4: futex(&(0x7f0000004080)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) timer_create(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000340)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) 3.124616089s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 3.093963202s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) close(r2) r3 = eventfd(0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="01202a3a8a"], 0x8) close(r4) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) rt_sigreturn() mremap(&(0x7f0000fe8000/0x10000)=nil, 0x10000, 0x4000, 0x3, &(0x7f0000fec000/0x4000)=nil) poll(0x0, 0x0, 0x64) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x17, 0x1e, 0x5c, &(0x7f00000003c0)}) poll(0x0, 0x0, 0x401) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0x5452, 0x0) 2.811899682s ago: executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 2.810665447s ago: executing program 3: inotify_init1(0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000240)={0x0, "204d25b5a40d3e18c2f88aae6a7ca15c53be361b9c69f53009df14d73fd0deafad693b4028917de332a0b38365b30a646f61db7285b8e34d4075bd4e2fee1c8f", 0x2e}, 0x48, 0xfffffffffffffff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30044041) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) pipe(&(0x7f0000001340)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) splice(r7, 0x0, r8, 0x0, 0x100000004, 0x0) sendmsg$kcm(r6, 0x0, 0x20040000) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30044041) socket$kcm(0x10, 0x2, 0x10) 2.692839335s ago: executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000000), 0x3f, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1, 0x18b, &(0x7f00000003c0)="$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") 2.609829067s ago: executing program 2: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) 1.639111191s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) read$char_usb(r1, &(0x7f0000000840)=""/171, 0xab) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r2, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r3) mlockall(0x1) 1.59869355s ago: executing program 1: open(&(0x7f0000000040)='./file0\x00', 0xa8041, 0x0) r0 = msgget$private(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40002021) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RLOPEN(r2, 0x0, 0x0) rt_sigreturn() msgsnd(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x28, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xcf3e8ebc) rt_sigreturn() setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 1.571604481s ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 1.448513182s ago: executing program 3: r0 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) landlock_restrict_self(r0, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 1.296354731s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x9, 0x0, 0x0, 0x0) 1.277202086s ago: executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0409"], 0x8) dup(0xffffffffffffffff) 1.178088655s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1.174550693s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[], 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@private2, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00'}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ff5000/0x4000)=nil}) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) preadv(r5, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x4000009) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&\x00'], 0xfe33) 1.077207599s ago: executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 920.150599ms ago: executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 886.217276ms ago: executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@broadcast}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x34}}, {}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private=0xa010102, @multicast1]}, @rr={0x7, 0xf, 0x0, [@remote, @multicast1, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 770.875808ms ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$nci(r1, 0x0, 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_TSC_KHZ(r5, 0xaea3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}, r6}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @empty}, r6}}, 0x48) 215.030024ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 22.005165ms ago: executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000002c0)=@ccm_128={{0x303}, "f661f9dd0100", "b6670f8f45501dbe548b7f2e0e14e176", "34d77a45", "3ad42eb1833ba3cc"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfccf}, &(0x7f0000000240)=0x40) writev(r0, &(0x7f0000000180)=[{&(0x7f0000001340)="ad", 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) close(0xffffffffffffffff) kernel console output (not intermixed with test programs): ready present! [ 74.934937][ T5114] Cannot create hsr debugfs directory [ 74.968603][ T5130] hsr_slave_0: entered promiscuous mode [ 74.975160][ T5130] hsr_slave_1: entered promiscuous mode [ 74.981595][ T5130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.989264][ T5130] Cannot create hsr debugfs directory [ 75.451210][ T5113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.468634][ T5113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.492508][ T5113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.513103][ T5113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.567943][ T5126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.584380][ T5126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.595250][ T5126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.608632][ T5126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.694404][ T5123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.720519][ T5123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.748347][ T5123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.770537][ T5123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.885105][ T5114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.896119][ T5114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.908721][ T5114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.932251][ T5114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.957586][ T5128] Bluetooth: hci1: command tx timeout [ 75.963146][ T5128] Bluetooth: hci0: command tx timeout [ 76.037034][ T5128] Bluetooth: hci2: command tx timeout [ 76.037838][ T5121] Bluetooth: hci3: command tx timeout [ 76.062283][ T5130] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.084429][ T5130] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.098164][ T5130] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.115940][ T5130] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.127813][ T5121] Bluetooth: hci4: command tx timeout [ 76.194811][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.292163][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.314333][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.344971][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.352459][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.400491][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.407727][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.443022][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.495672][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.502841][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.539200][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.552284][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.559448][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.645229][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.711562][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.748755][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.755904][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.791932][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.821686][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.828899][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.894680][ T5130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.931394][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.938656][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.037363][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.044833][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.122085][ T5130] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.171175][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.178339][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.215374][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.222971][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.282944][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.342641][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.686658][ T5126] veth0_vlan: entered promiscuous mode [ 77.729103][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.819878][ T5126] veth1_vlan: entered promiscuous mode [ 77.963819][ T5123] veth0_vlan: entered promiscuous mode [ 77.979364][ T5130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.993287][ T5126] veth0_macvtap: entered promiscuous mode [ 78.006551][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.022112][ T5126] veth1_macvtap: entered promiscuous mode [ 78.037830][ T5121] Bluetooth: hci0: command tx timeout [ 78.037836][ T5128] Bluetooth: hci1: command tx timeout [ 78.072276][ T5123] veth1_vlan: entered promiscuous mode [ 78.082729][ T5113] veth0_vlan: entered promiscuous mode [ 78.117461][ T5121] Bluetooth: hci2: command tx timeout [ 78.117469][ T5128] Bluetooth: hci3: command tx timeout [ 78.146232][ T5113] veth1_vlan: entered promiscuous mode [ 78.156313][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.185987][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.197375][ T5121] Bluetooth: hci4: command tx timeout [ 78.229148][ T5126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.239419][ T5126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.249368][ T5126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.258540][ T5126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.321529][ T5123] veth0_macvtap: entered promiscuous mode [ 78.364238][ T5123] veth1_macvtap: entered promiscuous mode [ 78.394094][ T5114] veth0_vlan: entered promiscuous mode [ 78.406407][ T5130] veth0_vlan: entered promiscuous mode [ 78.454840][ T5114] veth1_vlan: entered promiscuous mode [ 78.464904][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.476495][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.489347][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.511887][ T5113] veth0_macvtap: entered promiscuous mode [ 78.531959][ T5130] veth1_vlan: entered promiscuous mode [ 78.560280][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.571267][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.583210][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.595103][ T5113] veth1_macvtap: entered promiscuous mode [ 78.634648][ T5123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.644195][ T5123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.658283][ T5123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.667180][ T5123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.700153][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.713569][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.773789][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.784572][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.797138][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.807831][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.819485][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.852218][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.860175][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.872930][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.884345][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.895671][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.906256][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.920576][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.957329][ T5114] veth0_macvtap: entered promiscuous mode [ 78.982449][ T5113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.993009][ T5113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.002389][ T5113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.012345][ T5113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.037048][ T5114] veth1_macvtap: entered promiscuous mode [ 79.047592][ T5130] veth0_macvtap: entered promiscuous mode [ 79.091578][ T5130] veth1_macvtap: entered promiscuous mode [ 79.144752][ T5199] autofs: Unknown parameter '0x0000000000000000' [ 79.242454][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.267210][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.289747][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.300538][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.311615][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.326009][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.336279][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.348290][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.361551][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.378018][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.396761][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.417840][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.436031][ T5201] loop3: detected capacity change from 0 to 512 [ 79.442843][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.455659][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.469877][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.480217][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.493162][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.521626][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.564287][ T5201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.591197][ T5201] ext4 filesystem being mounted at /root/syzkaller-testdir3778621604/syzkaller.Qmi7Mp/1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.613956][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.627062][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.638037][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.648910][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.659194][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.670397][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.683094][ T5201] overlay: Unknown parameter 'dont_appraise' [ 79.689162][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.727205][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.741717][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.753417][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.768684][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.778600][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.789220][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.799137][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.811113][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.829372][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.873863][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.892574][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.909625][ T5114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.925309][ T5114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.935125][ T5114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.944795][ T5114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.966236][ T5130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.976059][ T5130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.985260][ T5130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.997048][ T5130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.083137][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.094872][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.125075][ T5121] Bluetooth: hci0: command tx timeout [ 80.127346][ T5128] Bluetooth: hci1: command tx timeout [ 80.197467][ T5128] Bluetooth: hci3: command tx timeout [ 80.197735][ T5121] Bluetooth: hci2: command tx timeout [ 80.255931][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.278233][ T5121] Bluetooth: hci4: command tx timeout [ 80.340027][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.395641][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.617323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.670728][ T5214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.994940][ T5220] loop4: detected capacity change from 0 to 164 [ 83.839294][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.875495][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.944502][ T5226] loop4: detected capacity change from 0 to 512 [ 83.967357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 83.978006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.142274][ T5226] ext4: Unknown parameter 'noacl' [ 84.185513][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.196311][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.239576][ T5226] loop4: detected capacity change from 0 to 1024 [ 85.019390][ T5226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.148226][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.196391][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.310263][ T5234] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.065390][ T2482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.218275][ T2482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.307913][ T5226] loop4: detected capacity change from 1024 to 0 [ 86.357850][ T5226] syz-executor.4: attempt to access beyond end of device [ 86.357850][ T5226] loop4: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 86.577909][ T5113] syz-executor.4: attempt to access beyond end of device [ 86.577909][ T5113] loop4: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 86.609149][ T5113] syz-executor.4: attempt to access beyond end of device [ 86.609149][ T5113] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 86.661033][ T5239] autofs: Unknown parameter '0x0000000000000000' [ 86.677571][ T5113] syz-executor.4: attempt to access beyond end of device [ 86.677571][ T5113] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 86.708257][ T5113] syz-executor.4: attempt to access beyond end of device [ 86.708257][ T5113] loop4: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 86.847150][ T5113] syz-executor.4: attempt to access beyond end of device [ 86.847150][ T5113] loop4: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 86.915649][ T5113] syz-executor.4: attempt to access beyond end of device [ 86.915649][ T5113] loop4: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 86.986678][ T5247] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.995607][ T5113] syz-executor.4: attempt to access beyond end of device [ 86.995607][ T5113] loop4: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 88.346869][ C1] sched: RT throttling activated [ 88.600064][ T5250] loop0: detected capacity change from 0 to 32768 [ 88.641596][ T46] cfg80211: failed to load regulatory.db [ 88.691863][ T5113] syz-executor.4: attempt to access beyond end of device [ 88.691863][ T5113] loop4: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 88.997310][ T5164] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 89.295042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.803693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.805562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.906123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.907781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.828194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.207166][ T5229] kmmpd-loop4: attempt to access beyond end of device [ 91.207166][ T5229] loop4: rw=14337, sector=128, nr_sectors = 2 limit=0 [ 91.237263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 91.334059][ T5256] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 91.401300][ T5229] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 91.429597][ T5113] syz-executor.4: attempt to access beyond end of device [ 91.429597][ T5113] loop4: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 91.477975][ T5229] EXT4-fs error (device loop4): kmmpd:186: comm kmmpd-loop4: Error writing to MMP block [ 91.508625][ T5113] syz-executor.4: attempt to access beyond end of device [ 91.508625][ T5113] loop4: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 91.583892][ T5265] loop0: detected capacity change from 0 to 164 [ 91.607511][ T5229] kmmpd-loop4: attempt to access beyond end of device [ 91.607511][ T5229] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 91.621426][ T5229] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 91.630023][ T5113] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #2: block 5: comm syz-executor.4: unable to read itable block [ 91.644846][ T5229] EXT4-fs (loop4): I/O error while writing superblock [ 91.649641][ T5113] EXT4-fs (loop4): previous I/O error to superblock detected [ 91.725881][ T5113] syz-executor.4: attempt to access beyond end of device [ 91.725881][ T5113] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 91.928494][ T5113] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 91.958618][ T5113] EXT4-fs (loop4): I/O error while writing superblock [ 91.966293][ T5113] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: IO failure [ 91.975789][ T5113] syz-executor.4: attempt to access beyond end of device [ 91.975789][ T5113] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 91.990938][ T5113] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 91.999595][ T5113] EXT4-fs (loop4): I/O error while writing superblock [ 92.006809][ T5113] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 92.020735][ T5113] syz-executor.4: attempt to access beyond end of device [ 92.020735][ T5113] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 92.035436][ T5113] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 92.402583][ T5113] EXT4-fs (loop4): I/O error while writing superblock [ 92.981158][ T5276] usb usb3: usbfs: process 5276 (syz-executor.0) did not claim interface 0 before use [ 93.443119][ T29] audit: type=1326 audit(1718456682.703:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f927207cea9 code=0x0 [ 93.457974][ T62] kworker/u8:4: attempt to access beyond end of device [ 93.457974][ T62] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 93.547086][ T29] audit: type=1326 audit(1718456683.463:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f927207cea9 code=0x0 [ 93.599512][ T62] kworker/u8:4: attempt to access beyond end of device [ 93.599512][ T62] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 93.606290][ T5280] loop2: detected capacity change from 0 to 512 [ 93.649808][ T5280] ext4: Unknown parameter 'noacl' [ 93.757787][ T62] kworker/u8:4: attempt to access beyond end of device [ 93.757787][ T62] loop4: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 93.880130][ T5128] Bluetooth: hci4: command 0x0405 tx timeout [ 93.898908][ T62] kworker/u8:4: attempt to access beyond end of device [ 93.898908][ T62] loop4: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 93.917467][ T62] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #2: block 5: comm kworker/u8:4: unable to read itable block [ 94.533969][ T62] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 94.558377][ T5285] autofs: Unknown parameter '0x0000000000000000' [ 94.595754][ T62] EXT4-fs (loop4): I/O error while writing superblock [ 94.705545][ T5113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.840506][ T5113] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 94.885428][ T5113] EXT4-fs (loop4): I/O error while writing superblock [ 94.915744][ T5229] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 95.551001][ T2397] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.793414][ T2397] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.030250][ T2397] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.189422][ T2397] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.666124][ T5293] loop3: detected capacity change from 0 to 40427 [ 96.704731][ T2397] bridge_slave_1: left allmulticast mode [ 96.721258][ T2397] bridge_slave_1: left promiscuous mode [ 96.721564][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.738113][ T5293] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 96.747258][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.753028][ T2397] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.755065][ T5293] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 96.776578][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.807134][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.819312][ T5128] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.828891][ T5293] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 96.840149][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.910455][ T2397] bridge_slave_0: left allmulticast mode [ 96.938364][ T5293] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.977178][ T2397] bridge_slave_0: left promiscuous mode [ 96.983094][ T2397] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.181917][ T5293] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 97.227385][ T5293] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.569465][ T5315] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 98.747671][ T5168] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.922824][ T5121] Bluetooth: hci0: command tx timeout [ 98.948661][ T2397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.973065][ T5168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.990442][ T2397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.001328][ T5168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.025536][ T5168] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 99.037142][ T5168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.049020][ T2397] bond0 (unregistering): Released all slaves [ 99.065931][ T5168] usb 3-1: config 0 descriptor?? [ 99.365369][ T5335] kvm: emulating exchange as write [ 99.606262][ T29] audit: type=1804 audit(1718456689.523:4): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3203023195/syzkaller.HWQEHr/3/bus/file0" dev="sda1" ino=1966 res=1 errno=0 [ 100.032375][ T2397] hsr_slave_0: left promiscuous mode [ 100.069912][ T2397] hsr_slave_1: left promiscuous mode [ 100.089699][ T2397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.110800][ T2397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.137410][ T2397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.157539][ T2397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.258061][ T2397] veth1_macvtap: left promiscuous mode [ 100.264271][ T2397] veth0_macvtap: left promiscuous mode [ 100.271020][ T2397] veth1_vlan: left promiscuous mode [ 100.278939][ T2397] veth0_vlan: left promiscuous mode [ 100.997325][ T5121] Bluetooth: hci0: command tx timeout [ 101.812781][ T5168] usbhid 3-1:0.0: can't add hid device: -71 [ 101.829653][ T5168] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 101.850323][ T5168] usb 3-1: USB disconnect, device number 2 [ 102.185279][ T2397] team0 (unregistering): Port device team_slave_1 removed [ 102.495131][ T2397] team0 (unregistering): Port device team_slave_0 removed [ 103.077077][ T5121] Bluetooth: hci0: command tx timeout [ 104.388702][ T5341] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.800412][ T5168] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.006973][ T5168] usb 3-1: Using ep0 maxpacket: 8 [ 105.206996][ T5121] Bluetooth: hci0: command tx timeout [ 105.291343][ T5386] loop0: detected capacity change from 0 to 512 [ 105.308690][ T5168] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 105.323028][ T5168] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.345779][ T5168] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 105.364173][ T5168] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 105.391319][ T5168] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 105.427695][ T5168] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.529587][ T5395] loop1: detected capacity change from 0 to 256 [ 105.539106][ T5395] FAT-fs (loop1): Unrecognized mount option "uni_xlatf=1¬shortname=win95" or missing value [ 107.176532][ T5386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.230377][ T5168] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 107.270713][ T5168] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 107.677977][ T5324] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 107.688072][ T5386] ext4 filesystem being mounted at /root/syzkaller-testdir3209705910/syzkaller.QWJUpt/12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.796633][ T5168] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 107.857834][ T5304] chnl_net:caif_netlink_parms(): no params data found [ 107.875323][ T5168] usb 3-1: can't read configurations, error -71 [ 107.925518][ T5397] loop3: detected capacity change from 0 to 1024 [ 108.096796][ T5397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.304323][ T5114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.504150][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.832391][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.870858][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.938811][ T5304] bridge_slave_0: entered allmulticast mode [ 109.971164][ T5304] bridge_slave_0: entered promiscuous mode [ 112.917406][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.924608][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.952777][ T5304] bridge_slave_1: entered allmulticast mode [ 113.000722][ T5304] bridge_slave_1: entered promiscuous mode [ 113.937116][ T5304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.060371][ T5304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.252955][ T5468] loop1: detected capacity change from 0 to 1764 [ 114.255001][ T5304] team0: Port device team_slave_0 added [ 114.324253][ T5304] team0: Port device team_slave_1 added [ 114.593542][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.619874][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.695571][ T5304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.783877][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.853379][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.953745][ T5304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.112019][ T783] libceph: connect (1)[c::]:6789 error -101 [ 115.119230][ T783] libceph: mon0 (1)[c::]:6789 connect error [ 115.298056][ T5483] ceph: No mds server is up or the cluster is laggy [ 115.413975][ T5165] libceph: connect (1)[c::]:6789 error -101 [ 115.471741][ T5165] libceph: mon0 (1)[c::]:6789 connect error [ 115.511372][ T5304] hsr_slave_0: entered promiscuous mode [ 115.613146][ T5304] hsr_slave_1: entered promiscuous mode [ 116.707574][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.067769][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 117.105742][ T46] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 117.128210][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.145274][ T5519] loop0: detected capacity change from 0 to 16 [ 117.161758][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 117.181197][ T5519] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 117.209625][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 117.230864][ T46] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 117.271558][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.335465][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 117.400041][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 117.447489][ T46] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 117.458132][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.470533][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 117.484101][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 117.516462][ T46] usb 4-1: string descriptor 0 read error: -22 [ 117.545892][ T46] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 117.588471][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.713839][ T46] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 117.884624][ T46] usb 4-1: USB disconnect, device number 2 [ 118.647560][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.789762][ T5304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.841066][ T5304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.866498][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.898149][ T5304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.924206][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.961885][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 118.965010][ T5304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.026947][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.046316][ T9] usb 1-1: config 0 descriptor?? [ 119.072888][ T5536] loop3: detected capacity change from 0 to 1764 [ 120.198448][ T5304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.645190][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 121.670808][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 121.822939][ T9] usb 1-1: USB disconnect, device number 2 [ 122.147941][ T5304] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.536690][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.543974][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.640091][ T5560] loop1: detected capacity change from 0 to 16 [ 122.700213][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.707403][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.794530][ T5560] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 123.249504][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.467736][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 123.494131][ T25] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 123.517076][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 123.561328][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 123.629154][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 123.946448][ T5304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.129701][ T25] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 124.148961][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 124.167310][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 124.183167][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 124.235236][ T25] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 124.246290][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 124.265450][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 124.293214][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 124.346315][ T25] usb 1-1: string descriptor 0 read error: -22 [ 124.399401][ T25] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 124.485706][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.795354][ T25] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 125.127128][ T25] usb 1-1: USB disconnect, device number 3 [ 127.807984][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.865749][ T5304] veth0_vlan: entered promiscuous mode [ 128.030371][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.070856][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.089919][ T5304] veth1_vlan: entered promiscuous mode [ 128.101943][ T25] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.125120][ T5640] loop3: detected capacity change from 0 to 16 [ 128.141315][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.160691][ T5640] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 128.186274][ T5631] loop1: detected capacity change from 0 to 1764 [ 128.194177][ T25] usb 1-1: config 0 descriptor?? [ 128.331344][ T5304] veth0_macvtap: entered promiscuous mode [ 128.383786][ T5304] veth1_macvtap: entered promiscuous mode [ 128.460156][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.476791][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.515633][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.568708][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.583859][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.594818][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.618235][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.638654][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.661425][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.713325][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.743523][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.769898][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.784775][ T29] audit: type=1804 audit(1718456718.693:5): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3209705910/syzkaller.QWJUpt/26/bus/file0" dev="overlay" ino=1965 res=1 errno=0 [ 128.807024][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.943212][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.987960][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.048155][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.106546][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.235974][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.283008][ T5304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.325326][ T5304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.380258][ T5304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.438908][ T5304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.651160][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 130.663222][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 130.688485][ T25] usb 1-1: USB disconnect, device number 4 [ 130.704932][ T5324] udevd[5324]: setting mode of /dev/bus/usb/001/004 to 020664 failed: No such file or directory [ 130.718629][ T5324] udevd[5324]: setting owner of /dev/bus/usb/001/004 to uid=0, gid=0 failed: No such file or directory [ 131.344575][ T2858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.519594][ T2858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.508636][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.516678][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.081816][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.088769][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.568430][ T5165] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.782040][ T5165] usb 4-1: Using ep0 maxpacket: 8 [ 133.826986][ T5165] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 133.880337][ T5165] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 133.972679][ T5715] Bluetooth: MGMT ver 1.23 [ 134.457776][ T5165] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 134.468957][ T5165] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 134.481840][ T5165] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 134.507020][ T5165] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.567841][ T5165] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 134.679019][ T5165] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 134.723672][ T5726] loop2: detected capacity change from 0 to 16 [ 134.788634][ T5165] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 134.788724][ T5165] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.788756][ T5165] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 134.788784][ T5165] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 134.792434][ T5165] usb 4-1: string descriptor 0 read error: -22 [ 134.831647][ T5726] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 134.977511][ T5165] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 135.001774][ T5732] loop0: detected capacity change from 0 to 1024 [ 135.009633][ T5165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.079491][ T5165] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 135.140345][ T5732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.295537][ T25] usb 4-1: USB disconnect, device number 3 [ 136.441188][ T5114] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor.0: path /root/syzkaller-testdir3209705910/syzkaller.QWJUpt/29/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 136.608312][ T5114] EXT4-fs error (device loop0): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 136.670736][ T5114] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor.0: path /root/syzkaller-testdir3209705910/syzkaller.QWJUpt/29/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 136.749889][ T5114] EXT4-fs error (device loop0): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 136.770470][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.852787][ T5114] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor.0: path /root/syzkaller-testdir3209705910/syzkaller.QWJUpt/29/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 136.935817][ T5114] EXT4-fs error (device loop0): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 137.022388][ T5114] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor.0: path /root/syzkaller-testdir3209705910/syzkaller.QWJUpt/29/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 137.111777][ T5114] EXT4-fs error (device loop0): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 137.188716][ T5114] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor.0: path /root/syzkaller-testdir3209705910/syzkaller.QWJUpt/29/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 137.261705][ T5114] EXT4-fs error (device loop0): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 140.135703][ T5796] autofs: Unknown parameter '0x0000000000000000' [ 140.384538][ T5800] loop1: detected capacity change from 0 to 1024 [ 140.460117][ T5803] loop2: detected capacity change from 0 to 16 [ 140.471713][ T5800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.525149][ T5114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.627100][ T5803] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 140.778453][ T5324] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 141.680390][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.729588][ T5123] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor.1: path /root/syzkaller-testdir268793630/syzkaller.e8ZN1z/30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 141.870127][ T5123] EXT4-fs error (device loop1): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 141.922321][ T5123] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor.1: path /root/syzkaller-testdir268793630/syzkaller.e8ZN1z/30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 142.070585][ T5123] EXT4-fs error (device loop1): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 142.168476][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.212308][ T5123] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor.1: path /root/syzkaller-testdir268793630/syzkaller.e8ZN1z/30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 142.600504][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.600586][ T5123] EXT4-fs error (device loop1): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 142.715011][ T5123] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor.1: path /root/syzkaller-testdir268793630/syzkaller.e8ZN1z/30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 142.741418][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.914267][ T5123] EXT4-fs error (device loop1): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 143.118398][ T5123] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor.1: path /root/syzkaller-testdir268793630/syzkaller.e8ZN1z/30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 143.150064][ T5123] EXT4-fs error (device loop1): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 143.185152][ T5128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.197325][ T5128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.210252][ T5128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.222887][ T5128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.244875][ T5128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.262842][ T5128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.290975][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.254694][ T5838] loop2: detected capacity change from 0 to 32768 [ 145.415866][ T5128] Bluetooth: hci1: command tx timeout [ 145.500012][ T35] bridge_slave_1: left allmulticast mode [ 145.514002][ T35] bridge_slave_1: left promiscuous mode [ 145.528711][ T5840] autofs: Unknown parameter 'fd0x0000000000000000' [ 145.547260][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.735826][ T35] bridge_slave_0: left allmulticast mode [ 145.757370][ T35] bridge_slave_0: left promiscuous mode [ 145.778055][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.351599][ T5865] loop2: detected capacity change from 0 to 1024 [ 147.448991][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.481275][ T5128] Bluetooth: hci1: command tx timeout [ 147.588383][ T5865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.914089][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.928593][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.942221][ T35] bond0 (unregistering): Released all slaves [ 148.920151][ T5130] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.149391][ T5123] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.567328][ T5128] Bluetooth: hci1: command tx timeout [ 150.098613][ T35] hsr_slave_0: left promiscuous mode [ 150.177201][ T35] hsr_slave_1: left promiscuous mode [ 150.194779][ T5881] loop3: detected capacity change from 0 to 40427 [ 150.217115][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.236951][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.264723][ T5881] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 150.276957][ T5881] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 150.337174][ T5881] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 150.346438][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.376039][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.409293][ T5881] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.459830][ T35] veth1_macvtap: left promiscuous mode [ 150.465527][ T35] veth0_macvtap: left promiscuous mode [ 150.507327][ T35] veth1_vlan: left promiscuous mode [ 150.512753][ T35] veth0_vlan: left promiscuous mode [ 150.627054][ T5881] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 150.635591][ T5881] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 150.651595][ T5915] loop2: detected capacity change from 0 to 128 [ 150.653116][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.668961][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.678888][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.689377][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.697447][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.705134][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.738201][ T5915] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 151.505798][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.638571][ T5128] Bluetooth: hci1: command tx timeout [ 152.238924][ T35] team0 (unregistering): Port device team_slave_1 removed [ 152.333485][ T35] team0 (unregistering): Port device team_slave_0 removed [ 152.758489][ T5128] Bluetooth: hci2: command tx timeout [ 155.076868][ C0] DEBUG: waiting rtnl_mutex for 501 jiffies. [ 155.083326][ C0] task:syz-executor.0 state:D stack:21024 pid:5826 tgid:5826 ppid:5820 flags:0x00000002 [ 155.093627][ C0] Call Trace: [ 155.096981][ C0] [ 155.099951][ C0] __schedule+0x17e8/0x4a20 [ 155.104553][ C0] ? __pfx___schedule+0x10/0x10 [ 155.109485][ C0] ? __pfx_lock_release+0x10/0x10 [ 155.114568][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 155.120145][ C0] ? schedule+0x90/0x320 [ 155.124435][ C0] schedule+0x14b/0x320 [ 155.128683][ C0] schedule_preempt_disabled+0x13/0x30 [ 155.134196][ C0] __mutex_lock+0x6a4/0xd70 [ 155.138803][ C0] ? __mutex_lock+0x527/0xd70 [ 155.143617][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 155.148905][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 155.153990][ C0] ? rtnl_lock+0xe7/0x130 [ 155.158406][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 155.163499][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 155.168794][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.174304][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 155.179774][ C0] ? __pfx_validate_chain+0x10/0x10 [ 155.185019][ C0] ? __pfx_validate_chain+0x10/0x10 [ 155.190306][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 155.195291][ C0] ? mark_lock+0x9a/0x360 [ 155.199694][ C0] ? __pfx_validate_chain+0x10/0x10 [ 155.205035][ C0] ? __lock_acquire+0x1359/0x2000 [ 155.210182][ C0] ? mark_lock+0x9a/0x360 [ 155.214562][ C0] ? __lock_acquire+0x1359/0x2000 [ 155.217740][ T5128] Bluetooth: hci2: command tx timeout [ 155.219675][ C0] netlink_rcv_skb+0x1e3/0x430 [ 155.229912][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.235461][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.240894][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.246152][ C0] netlink_unicast+0x7ea/0x980 [ 155.250997][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 155.256325][ C0] ? __virt_addr_valid+0x183/0x520 [ 155.261530][ C0] ? __check_object_size+0x49c/0x900 [ 155.266900][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 155.272050][ C0] netlink_sendmsg+0x8db/0xcb0 [ 155.276907][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.282238][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 155.287261][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 155.292584][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 155.298121][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.303445][ C0] __sock_sendmsg+0x221/0x270 [ 155.308222][ C0] __sys_sendto+0x3a4/0x4f0 [ 155.312788][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 155.317912][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.323933][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.330342][ C0] __x64_sys_sendto+0xde/0x100 [ 155.335150][ C0] do_syscall_64+0xf3/0x230 [ 155.339813][ C0] ? clear_bhb_loop+0x35/0x90 [ 155.344530][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.350498][ C0] RIP: 0033:0x7f4386a7eb9c [ 155.354952][ C0] RSP: 002b:00007ffe55620570 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 155.363452][ C0] RAX: ffffffffffffffda RBX: 00007f43876e4620 RCX: 00007f4386a7eb9c [ 155.371490][ C0] RDX: 000000000000003c RSI: 00007f43876e4670 RDI: 0000000000000003 [ 155.379525][ C0] RBP: 0000000000000000 R08: 00007ffe556205c4 R09: 000000000000000c [ 155.387564][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 155.395570][ C0] R13: 0000000000000000 R14: 00007f43876e4670 R15: 0000000000000000 [ 155.403627][ C0] [ 155.406673][ C0] DEBUG: holding rtnl_mutex for 542 jiffies. [ 155.412711][ C0] task:kworker/u8:2 state:R running task stack:22232 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 155.424546][ C0] Workqueue: netns cleanup_net [ 155.429399][ C0] Call Trace: [ 155.432713][ C0] [ 155.435720][ C0] __schedule+0x17e8/0x4a20 [ 155.440426][ C0] ? __virt_addr_valid+0x183/0x520 [ 155.445608][ C0] ? __virt_addr_valid+0x183/0x520 [ 155.450814][ C0] ? lock_release+0xbf/0x9f0 [ 155.455452][ C0] ? __pfx___schedule+0x10/0x10 [ 155.460400][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.466441][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 155.471809][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 155.476999][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 155.482785][ C0] irqentry_exit+0x5e/0x90 [ 155.487282][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.493300][ C0] RIP: 0010:synchronize_rcu+0x0/0x360 [ 155.498762][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 05 b8 7f 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 155.518451][ C0] RSP: 0018:ffffc90000ab76f8 EFLAGS: 00000206 [ 155.524567][ C0] RAX: dffffc0000000000 RBX: 1ffff92000156ee8 RCX: ffffffff947c3803 [ 155.532613][ C0] RDX: 0000777d58baed01 RSI: ffffffff8bcace80 RDI: ffffffff8c200760 [ 155.540655][ C0] RBP: ffffc90000ab77d0 R08: ffffffff81423c05 R09: 1ffffffff1f5c095 [ 155.548701][ C0] R10: dffffc0000000000 R11: fffffbfff1f5c096 R12: ffffffff947aedf8 [ 155.556707][ C0] R13: 1ffff92000156ee4 R14: 0000000000000202 R15: ffffc90000ab7740 [ 155.564766][ C0] ? __phys_addr+0x105/0x170 [ 155.569453][ C0] lockdep_unregister_key+0x4b7/0x540 [ 155.574883][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 155.580862][ C0] ? team_uninit+0x383/0x3e0 [ 155.585497][ C0] ? __pfx_team_uninit+0x10/0x10 [ 155.590532][ C0] unregister_netdevice_many_notify+0x10c5/0x16b0 [ 155.597068][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 155.603899][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 155.609885][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 155.616180][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 155.622436][ C0] default_device_exit_batch+0xa0f/0xa90 [ 155.628182][ C0] ? __pfx___might_resched+0x10/0x10 [ 155.633515][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 155.639768][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 155.645101][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 155.651357][ C0] cleanup_net+0x89d/0xcc0 [ 155.655827][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 155.660858][ C0] ? process_scheduled_works+0x945/0x1830 [ 155.666660][ C0] process_scheduled_works+0xa2c/0x1830 [ 155.672409][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.678488][ C0] ? assign_work+0x364/0x3d0 [ 155.683125][ C0] worker_thread+0x86d/0xd50 [ 155.687803][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 155.693743][ C0] ? __kthread_parkme+0x169/0x1d0 [ 155.698852][ C0] ? __pfx_worker_thread+0x10/0x10 [ 155.704001][ C0] kthread+0x2f0/0x390 [ 155.708147][ C0] ? __pfx_worker_thread+0x10/0x10 [ 155.713302][ C0] ? __pfx_kthread+0x10/0x10 [ 155.718087][ C0] ret_from_fork+0x4b/0x80 [ 155.722895][ C0] ? __pfx_kthread+0x10/0x10 [ 155.727575][ C0] ret_from_fork_asm+0x1a/0x30 [ 155.732427][ C0] [ 155.735479][ C0] DEBUG: waiting rtnl_mutex for 569 jiffies. [ 155.741828][ C0] task:kworker/1:7 state:D stack:25264 pid:5667 tgid:5667 ppid:2 flags:0x00004000 [ 155.752125][ C0] Workqueue: events linkwatch_event [ 155.757453][ C0] Call Trace: [ 155.760765][ C0] [ 155.763730][ C0] __schedule+0x17e8/0x4a20 [ 155.768337][ C0] ? __pfx___schedule+0x10/0x10 [ 155.773253][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.779319][ C0] ? __pfx_lock_release+0x10/0x10 [ 155.784419][ C0] ? kick_pool+0x1bd/0x620 [ 155.788924][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.794161][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 155.799486][ C0] ? schedule+0x90/0x320 [ 155.803774][ C0] schedule+0x14b/0x320 [ 155.808008][ C0] schedule_preempt_disabled+0x13/0x30 [ 155.813623][ C0] __mutex_lock+0x6a4/0xd70 [ 155.818244][ C0] ? __mutex_lock+0x527/0xd70 [ 155.822978][ C0] ? linkwatch_event+0xe/0x60 [ 155.827744][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 155.833082][ C0] ? process_scheduled_works+0x945/0x1830 [ 155.838874][ C0] ? rtnl_lock+0xe7/0x130 [ 155.843243][ C0] ? process_scheduled_works+0x945/0x1830 [ 155.849052][ C0] linkwatch_event+0xe/0x60 [ 155.853594][ C0] process_scheduled_works+0xa2c/0x1830 [ 155.859255][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.865300][ C0] ? assign_work+0x364/0x3d0 [ 155.869977][ C0] worker_thread+0x86d/0xd50 [ 155.874624][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 155.880691][ C0] ? __kthread_parkme+0x169/0x1d0 [ 155.885779][ C0] ? __pfx_worker_thread+0x10/0x10 [ 155.890979][ C0] kthread+0x2f0/0x390 [ 155.895102][ C0] ? __pfx_worker_thread+0x10/0x10 [ 155.900293][ C0] ? __pfx_kthread+0x10/0x10 [ 155.904926][ C0] ret_from_fork+0x4b/0x80 [ 155.909419][ C0] ? __pfx_kthread+0x10/0x10 [ 155.914049][ C0] ret_from_fork_asm+0x1a/0x30 [ 155.918998][ C0] [ 155.922054][ C0] DEBUG: waiting rtnl_mutex for 559 jiffies. [ 155.928090][ C0] task:dhcpcd state:D stack:20384 pid:4760 tgid:4760 ppid:4759 flags:0x00000002 [ 155.938339][ C0] Call Trace: [ 155.941650][ C0] [ 155.944622][ C0] __schedule+0x17e8/0x4a20 [ 155.949223][ C0] ? __pfx___schedule+0x10/0x10 [ 155.954113][ C0] ? __pfx_lock_release+0x10/0x10 [ 155.959213][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 155.964738][ C0] ? schedule+0x90/0x320 [ 155.969055][ C0] schedule+0x14b/0x320 [ 155.973251][ C0] schedule_preempt_disabled+0x13/0x30 [ 155.978784][ C0] __mutex_lock+0x6a4/0xd70 [ 155.983346][ C0] ? __mutex_lock+0x527/0xd70 [ 155.988100][ C0] ? devinet_ioctl+0x2ce/0x1bc0 [ 155.992994][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 155.998124][ C0] ? bpf_lsm_capable+0x9/0x10 [ 156.002835][ C0] ? security_capable+0x90/0xb0 [ 156.007797][ C0] ? rtnl_lock+0xe7/0x130 [ 156.012175][ C0] devinet_ioctl+0x2ce/0x1bc0 [ 156.016973][ C0] ? get_user_ifreq+0x1bb/0x200 [ 156.021964][ C0] inet_ioctl+0x3d7/0x4f0 [ 156.026351][ C0] ? __pfx_inet_ioctl+0x10/0x10 [ 156.031320][ C0] sock_do_ioctl+0x158/0x460 [ 156.036145][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 156.041366][ C0] sock_ioctl+0x629/0x8e0 [ 156.045751][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 156.050868][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 156.057115][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 156.062100][ C0] ? security_file_ioctl+0x87/0xb0 [ 156.067297][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 156.072199][ C0] __se_sys_ioctl+0xfc/0x170 [ 156.076885][ C0] do_syscall_64+0xf3/0x230 [ 156.081426][ C0] ? clear_bhb_loop+0x35/0x90 [ 156.086168][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.092135][ C0] RIP: 0033:0x7ff2be153d49 [ 156.096583][ C0] RSP: 002b:00007ffe84c2a7e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.105077][ C0] RAX: ffffffffffffffda RBX: 00007ff2be0856c0 RCX: 00007ff2be153d49 [ 156.113123][ C0] RDX: 00007ffe84c3a9d8 RSI: 0000000000008914 RDI: 0000000000000018 [ 156.121196][ C0] RBP: 00007ffe84c4ab98 R08: 00007ffe84c3a998 R09: 00007ffe84c3a948 [ 156.129267][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.137325][ C0] R13: 00007ffe84c3a9d8 R14: 0000000000000028 R15: 0000000000008914 [ 156.145710][ C0] [ 156.148803][ C0] DEBUG: waiting rtnl_mutex for 543 jiffies. [ 156.154807][ C0] task:syz-executor.1 state:D stack:24944 pid:5917 tgid:5917 ppid:5903 flags:0x00000002 [ 156.165081][ C0] Call Trace: [ 156.168448][ C0] [ 156.171508][ C0] __schedule+0x17e8/0x4a20 [ 156.176090][ C0] ? __pfx___schedule+0x10/0x10 [ 156.181120][ C0] ? __pfx_lock_release+0x10/0x10 [ 156.186370][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 156.191957][ C0] ? schedule+0x90/0x320 [ 156.196243][ C0] schedule+0x14b/0x320 [ 156.200495][ C0] schedule_preempt_disabled+0x13/0x30 [ 156.206005][ C0] __mutex_lock+0x6a4/0xd70 [ 156.210596][ C0] ? __mutex_lock+0x527/0xd70 [ 156.215323][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 156.220659][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 156.225753][ C0] ? rtnl_lock+0xe7/0x130 [ 156.230268][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 156.235453][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 156.240767][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.246295][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 156.251687][ C0] ? __pfx_validate_chain+0x10/0x10 [ 156.256963][ C0] ? __pfx_validate_chain+0x10/0x10 [ 156.262217][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 156.267335][ C0] ? mark_lock+0x9a/0x360 [ 156.271709][ C0] ? __pfx_validate_chain+0x10/0x10 [ 156.276996][ C0] ? __lock_acquire+0x1359/0x2000 [ 156.282085][ C0] ? mark_lock+0x9a/0x360 [ 156.286558][ C0] ? __lock_acquire+0x1359/0x2000 [ 156.291711][ C0] netlink_rcv_skb+0x1e3/0x430 [ 156.297080][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.302586][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.307987][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.313228][ C0] netlink_unicast+0x7ea/0x980 [ 156.318078][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 156.323400][ C0] ? __virt_addr_valid+0x183/0x520 [ 156.328600][ C0] ? __check_object_size+0x49c/0x900 [ 156.333920][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 156.339102][ C0] netlink_sendmsg+0x8db/0xcb0 [ 156.343921][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.349286][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 156.354266][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 156.359626][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 156.365134][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.370599][ C0] __sock_sendmsg+0x221/0x270 [ 156.375328][ C0] __sys_sendto+0x3a4/0x4f0 [ 156.380000][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 156.385091][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 156.391144][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.397638][ C0] ? exc_page_fault+0x590/0x8c0 [ 156.402535][ C0] __x64_sys_sendto+0xde/0x100 [ 156.407377][ C0] do_syscall_64+0xf3/0x230 [ 156.411915][ C0] ? clear_bhb_loop+0x35/0x90 [ 156.416630][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.422599][ C0] RIP: 0033:0x7f35f207eb9c [ 156.427076][ C0] RSP: 002b:00007ffc08f3c1e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 156.435526][ C0] RAX: ffffffffffffffda RBX: 00007f35f2ce4620 RCX: 00007f35f207eb9c [ 156.443662][ C0] RDX: 0000000000000028 RSI: 00007f35f2ce4670 RDI: 0000000000000003 [ 156.451700][ C0] RBP: 0000000000000000 R08: 00007ffc08f3c234 R09: 000000000000000c [ 156.459737][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 156.467785][ C0] R13: 0000000000000000 R14: 00007f35f2ce4670 R15: 0000000000000000 [ 156.475811][ C0] [ 156.478896][ C0] [ 156.478896][ C0] Showing all locks held in the system: [ 156.486720][ C0] 2 locks held by kworker/0:0/8: [ 156.492017][ C0] 2 locks held by kworker/u8:0/11: [ 156.497198][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 156.509715][ C0] #1: ffffc90000107d00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 156.520942][ C0] 5 locks held by kworker/u8:2/35: [ 156.526084][ C0] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 156.537107][ C0] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 156.547892][ C0] #2: ffffffff8f5e2c90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 156.557397][ C0] #3: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 156.567529][ C0] #4: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 156.578540][ C0] 5 locks held by kworker/u8:4/62: [ 156.583684][ C0] 3 locks held by kworker/u8:5/993: [ 156.588958][ C0] 2 locks held by kworker/u8:7/2397: [ 156.594358][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 156.606134][ C0] #1: ffffc90009007d00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 156.616959][ C0] 1 lock held by dhcpcd/4760: [ 156.621672][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 156.630941][ C0] 2 locks held by getty/4851: [ 156.635637][ C0] #0: ffff88802ae850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 156.645506][ C0] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 156.655746][ C0] 3 locks held by kworker/1:7/5667: [ 156.661011][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 156.672113][ C0] #1: ffffc900143d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 156.683208][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 156.692281][ C0] 1 lock held by syz-executor.0/5826: [ 156.697706][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 156.707324][ C0] 1 lock held by syz-executor.1/5917: [ 156.712801][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 156.723193][ C0] 2 locks held by syz-executor.3/5937: [ 156.728755][ C0] 2 locks held by syz-executor.2/5941: [ 156.734240][ C0] 4 locks held by vhost-5942/5943: [ 156.739414][ C0] #0: ffff88802e610258 (&vq->mutex){+.+.}-{3:3}, at: vhost_transport_do_send_pkt+0xad/0x1400 [ 156.749797][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 156.760006][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 156.769881][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 156.779874][ C0] 1 lock held by syz-executor.4/5946: [ 156.785275][ C0] 3 locks held by syz-executor.4/5947: [ 156.790802][ C0] [ 156.793146][ C0] ============================================= [ 156.793146][ C0] [ 157.237371][ T5128] Bluetooth: hci2: command tx timeout [ 157.585217][ T5965] autofs: Unknown parameter 'fd0x0000000000000000' [ 157.605606][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 158.328608][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.350552][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.387220][ T5826] bridge_slave_0: entered allmulticast mode [ 158.394860][ T5826] bridge_slave_0: entered promiscuous mode [ 158.438020][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.445283][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.472628][ T5826] bridge_slave_1: entered allmulticast mode [ 158.488632][ T5826] bridge_slave_1: entered promiscuous mode [ 158.853730][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.971042][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.126590][ T5826] team0: Port device team_slave_0 added [ 159.284094][ T5826] team0: Port device team_slave_1 added [ 159.317887][ T5128] Bluetooth: hci2: command tx timeout [ 159.847088][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.975782][ T5998] usb usb3: usbfs: process 5998 (syz-executor.4) did not claim interface 0 before use [ 160.064492][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.142839][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.155463][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.181310][ T6006] loop3: detected capacity change from 0 to 512 [ 160.194790][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.360696][ T6006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.374951][ T6006] ext4 filesystem being mounted at /root/syzkaller-testdir3778621604/syzkaller.Qmi7Mp/39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.671369][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.716580][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.727347][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.782966][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.920236][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.978128][ T5917] chnl_net:caif_netlink_parms(): no params data found [ 161.034960][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.118863][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.250626][ T6018] loop3: detected capacity change from 0 to 164 [ 161.448354][ T5826] hsr_slave_0: entered promiscuous mode [ 161.471292][ T5826] hsr_slave_1: entered promiscuous mode [ 161.503518][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.532534][ T5826] Cannot create hsr debugfs directory [ 162.191609][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.217058][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.237153][ T5917] bridge_slave_0: entered allmulticast mode [ 162.247462][ T5917] bridge_slave_0: entered promiscuous mode [ 162.437366][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.444632][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.467918][ T5917] bridge_slave_1: entered allmulticast mode [ 162.476165][ T5917] bridge_slave_1: entered promiscuous mode [ 162.733894][ T35] bridge_slave_1: left allmulticast mode [ 162.750088][ T35] bridge_slave_1: left promiscuous mode [ 162.755990][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.796134][ T35] bridge_slave_0: left allmulticast mode [ 162.803320][ T35] bridge_slave_0: left promiscuous mode [ 162.828019][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.834330][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.895700][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.918993][ T35] bond0 (unregistering): Released all slaves [ 164.035429][ T5917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.251165][ T5917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.723202][ T6074] loop3: detected capacity change from 0 to 256 [ 164.736316][ T5917] team0: Port device team_slave_0 added [ 164.767805][ T6074] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 164.847783][ T6074] loop3: detected capacity change from 256 to 0 [ 164.869785][ T6074] bio_check_eod: 8 callbacks suppressed [ 164.869805][ T6074] syz-executor.3: attempt to access beyond end of device [ 164.869805][ T6074] loop3: rw=2049, sector=136, nr_sectors = 1 limit=0 [ 164.891953][ T6074] Buffer I/O error on dev loop3, logical block 136, lost sync page write [ 164.922789][ T5126] syz-executor.3: attempt to access beyond end of device [ 164.922789][ T5126] loop3: rw=0, sector=128, nr_sectors = 1 limit=0 [ 164.939803][ T5126] exFAT-fs (loop3): error, failed to access to FAT (entry 0x00000005, err:-5) [ 164.949599][ T5126] exFAT-fs (loop3): Filesystem has been set read-only [ 164.962003][ T5917] team0: Port device team_slave_1 added [ 164.971519][ T5126] syz-executor.3: attempt to access beyond end of device [ 164.971519][ T5126] loop3: rw=0, sector=128, nr_sectors = 1 limit=0 [ 164.986811][ T5126] exFAT-fs (loop3): error, failed to access to FAT (entry 0x00000005, err:-5) [ 165.475057][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.546129][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.623955][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.668068][ T35] hsr_slave_0: left promiscuous mode [ 165.696168][ T35] hsr_slave_1: left promiscuous mode [ 165.717137][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.725122][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.735654][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.751980][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.813553][ T35] veth1_macvtap: left promiscuous mode [ 165.820504][ T35] veth0_macvtap: left promiscuous mode [ 165.827273][ T35] veth1_vlan: left promiscuous mode [ 165.832841][ T35] veth0_vlan: left promiscuous mode [ 165.865672][ T6076] loop3: detected capacity change from 0 to 32768 [ 166.072810][ T6076] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 166.108710][ T6076] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 166.126984][ T6076] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 166.126984][ T6076] running recovery passes: check_allocations [ 166.340022][ T6076] bcachefs (loop3): accounting_read... done [ 166.348020][ T6076] bcachefs (loop3): alloc_read... done [ 166.363811][ T6076] bcachefs (loop3): stripes_read... done [ 166.372355][ T6076] bcachefs (loop3): snapshots_read... done [ 166.390172][ T6076] bcachefs (loop3): check_allocations... [ 166.404904][ T6076] btree ptr not marked in member info btree allocated bitmap [ 166.404964][ T6076] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4fe84214937890c3 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 166.481263][ T6076] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 10 [ 166.495404][ T6076] bcachefs (loop3): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 166.521107][ T6076] bcachefs (loop3): bch2_gc_btree(): error fsck_errors_not_fixed [ 166.532060][ T6076] bcachefs (loop3): bch2_gc_btrees(): error fsck_errors_not_fixed [ 166.567715][ T6076] bcachefs (loop3): bch2_check_allocations(): error fsck_errors_not_fixed [ 166.578521][ T6076] bcachefs (loop3): bch2_fs_recovery(): error fsck_errors_not_fixed [ 166.607403][ T6076] bcachefs (loop3): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 166.626631][ T6076] bcachefs (loop3): shutting down [ 166.682254][ T6076] bcachefs (loop3): shutdown complete [ 167.225643][ T35] team0 (unregistering): Port device team_slave_1 removed [ 167.448904][ T35] team0 (unregistering): Port device team_slave_0 removed [ 167.573911][ T6100] loop4: detected capacity change from 0 to 2048 [ 168.875841][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.885766][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.914780][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.235128][ T5917] hsr_slave_0: entered promiscuous mode [ 169.370583][ T5917] hsr_slave_1: entered promiscuous mode [ 169.383297][ T5917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.395928][ T5917] Cannot create hsr debugfs directory [ 169.685796][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.719387][ T6139] loop4: detected capacity change from 0 to 16 [ 169.771977][ T6139] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 169.832117][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.851247][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.928478][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.159509][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.232790][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.345738][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.353099][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.404802][ T5917] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 170.433493][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.440853][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.487155][ T5917] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 170.502279][ T6152] loop4: detected capacity change from 0 to 256 [ 170.536060][ T5917] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.552512][ T6152] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 170.569263][ T5917] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.648883][ T6152] loop4: detected capacity change from 256 to 0 [ 170.671918][ T6152] syz-executor.4: attempt to access beyond end of device [ 170.671918][ T6152] loop4: rw=2049, sector=136, nr_sectors = 1 limit=0 [ 170.694950][ T6152] Buffer I/O error on dev loop4, logical block 136, lost sync page write [ 170.735481][ T5304] syz-executor.4: attempt to access beyond end of device [ 170.735481][ T5304] loop4: rw=0, sector=128, nr_sectors = 1 limit=0 [ 170.775072][ T5304] exFAT-fs (loop4): error, failed to access to FAT (entry 0x00000005, err:-5) [ 170.799210][ T5304] exFAT-fs (loop4): Filesystem has been set read-only [ 170.813361][ T5304] syz-executor.4: attempt to access beyond end of device [ 170.813361][ T5304] loop4: rw=0, sector=128, nr_sectors = 1 limit=0 [ 170.832930][ T5304] exFAT-fs (loop4): error, failed to access to FAT (entry 0x00000005, err:-5) [ 171.478548][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.611505][ T5917] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.669931][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.677178][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.710841][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.757768][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.765021][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.155618][ T5826] veth0_vlan: entered promiscuous mode [ 172.333890][ T5826] veth1_vlan: entered promiscuous mode [ 172.675243][ T5826] veth0_macvtap: entered promiscuous mode [ 172.745270][ T5826] veth1_macvtap: entered promiscuous mode [ 172.910374][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.958287][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.007048][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.026877][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.036913][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.060847][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.089264][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.138870][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.181603][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.220800][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.257253][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.314018][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.345923][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.386305][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.456797][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.495266][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.524712][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.549064][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.611146][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.652384][ T6208] loop3: detected capacity change from 0 to 16 [ 173.680961][ T6208] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 173.731212][ T5964] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 174.079887][ T2397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.107366][ T2397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.132104][ T6219] loop4: detected capacity change from 0 to 256 [ 174.181579][ T6219] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 174.271908][ T2397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.304784][ T2397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.332789][ T5917] veth0_vlan: entered promiscuous mode [ 174.497752][ T5917] veth1_vlan: entered promiscuous mode [ 176.015811][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.190268][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.322923][ T5917] veth0_macvtap: entered promiscuous mode [ 176.449934][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.522813][ T5917] veth1_macvtap: entered promiscuous mode [ 176.611580][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.830257][ T6270] loop0: detected capacity change from 0 to 256 [ 176.889055][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.917795][ T6270] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 176.929099][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.970101][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.999222][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.039142][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.065222][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.075483][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.084172][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.091481][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.102605][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.113607][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.123817][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.141820][ T5128] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 177.151746][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.157681][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.434195][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.465326][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.490910][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.525562][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.570464][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.631142][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.678346][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.727139][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.739545][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.998750][ T5128] Bluetooth: hci4: unexpected event for opcode 0x080b [ 178.149639][ T5917] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.198246][ T5917] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.217011][ T5917] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.236022][ T5917] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.388370][ T62] bridge_slave_1: left allmulticast mode [ 178.398649][ T62] bridge_slave_1: left promiscuous mode [ 178.411287][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.438595][ T62] bridge_slave_0: left allmulticast mode [ 178.446693][ T62] bridge_slave_0: left promiscuous mode [ 178.469579][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.055941][ T5121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.076178][ T5121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.095805][ T5121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.106436][ T5121] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.126372][ T5121] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.134090][ T5121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.237263][ T5121] Bluetooth: hci0: command tx timeout [ 179.256439][ T6310] loop3: detected capacity change from 0 to 256 [ 179.305607][ T6310] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 179.346958][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.360245][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.373955][ T62] bond0 (unregistering): Released all slaves [ 179.622388][ T6312] loop2: detected capacity change from 0 to 16 [ 179.665560][ T6312] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 179.900685][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.912038][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.962095][ T62] hsr_slave_0: left promiscuous mode [ 179.969934][ T62] hsr_slave_1: left promiscuous mode [ 179.997522][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.008859][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.045425][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.055727][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.144455][ T62] veth1_macvtap: left promiscuous mode [ 180.161511][ T62] veth0_macvtap: left promiscuous mode [ 180.175206][ T62] veth1_vlan: left promiscuous mode [ 180.197130][ T62] veth0_vlan: left promiscuous mode [ 180.875879][ T5128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.885992][ T5128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.896704][ T5128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.906503][ T5128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.927362][ T5128] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 180.943472][ T5128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.239126][ T5128] Bluetooth: hci1: command tx timeout [ 181.292077][ T62] team0 (unregistering): Port device team_slave_1 removed [ 181.317184][ T5128] Bluetooth: hci0: command tx timeout [ 181.379332][ T62] team0 (unregistering): Port device team_slave_0 removed [ 182.045146][ T5128] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 182.054900][ T5128] Bluetooth: hci4: Injecting HCI hardware error event [ 182.064516][ T5128] Bluetooth: hci4: hardware error 0x00 [ 182.112814][ T2397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.128955][ T2397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.276090][ T6273] chnl_net:caif_netlink_parms(): no params data found [ 182.727692][ T6361] Bluetooth: MGMT ver 1.23 [ 182.998297][ T5121] Bluetooth: hci3: command tx timeout [ 183.317637][ T5121] Bluetooth: hci1: command tx timeout [ 183.397203][ T5121] Bluetooth: hci0: command tx timeout [ 183.582857][ T6372] loop1: detected capacity change from 0 to 256 [ 183.656046][ T6372] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 183.680419][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.697298][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.731020][ T6273] bridge_slave_0: entered allmulticast mode [ 183.757160][ T6273] bridge_slave_0: entered promiscuous mode [ 183.832922][ T6305] chnl_net:caif_netlink_parms(): no params data found [ 183.887243][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.894533][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.912359][ T6273] bridge_slave_1: entered allmulticast mode [ 183.927923][ T6273] bridge_slave_1: entered promiscuous mode [ 184.117322][ T5128] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 184.140288][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.326567][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.560533][ T6273] team0: Port device team_slave_0 added [ 184.622374][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.753172][ T6273] team0: Port device team_slave_1 added [ 184.878204][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.958249][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.965444][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.980732][ T6305] bridge_slave_0: entered allmulticast mode [ 184.992211][ T6305] bridge_slave_0: entered promiscuous mode [ 185.013767][ T6335] chnl_net:caif_netlink_parms(): no params data found [ 185.032947][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.050040][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.057449][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.057687][ T6305] bridge_slave_1: entered allmulticast mode [ 185.075495][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.083370][ T5122] Bluetooth: hci3: command tx timeout [ 185.091401][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.100552][ T6305] bridge_slave_1: entered promiscuous mode [ 185.108313][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.137729][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.145236][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.197178][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.204382][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.231918][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.262078][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.333151][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.355899][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.363117][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.388987][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.396057][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.397033][ T5128] Bluetooth: hci1: command tx timeout [ 185.477511][ T5128] Bluetooth: hci0: command tx timeout [ 185.484630][ T6305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.502440][ T6305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.745363][ T6305] team0: Port device team_slave_0 added [ 185.760551][ T6305] team0: Port device team_slave_1 added [ 185.836488][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.846483][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.863547][ T6335] bridge_slave_0: entered allmulticast mode [ 185.874177][ T6335] bridge_slave_0: entered promiscuous mode [ 185.927643][ T6273] hsr_slave_0: entered promiscuous mode [ 185.934241][ T6273] hsr_slave_1: entered promiscuous mode [ 185.955526][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.085898][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.125256][ T6335] bridge_slave_1: entered allmulticast mode [ 186.179160][ T6335] bridge_slave_1: entered promiscuous mode [ 186.876301][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.894365][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.931501][ T6305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.957487][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.982438][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.050350][ T6305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.157899][ T5128] Bluetooth: hci3: command tx timeout [ 187.238318][ T5128] Bluetooth: hci2: command tx timeout [ 187.478584][ T5128] Bluetooth: hci1: command tx timeout [ 187.630694][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.742922][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.773862][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.875886][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.971653][ T6305] hsr_slave_0: entered promiscuous mode [ 187.979313][ T6305] hsr_slave_1: entered promiscuous mode [ 187.987716][ T6305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.995420][ T6305] Cannot create hsr debugfs directory [ 188.089844][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.123634][ T6335] team0: Port device team_slave_0 added [ 188.289656][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.321201][ T6335] team0: Port device team_slave_1 added [ 188.580938][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.592031][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.637010][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.783691][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.790832][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.819493][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.075234][ T6335] hsr_slave_0: entered promiscuous mode [ 189.098350][ T6335] hsr_slave_1: entered promiscuous mode [ 189.105300][ T6335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.113292][ T6335] Cannot create hsr debugfs directory [ 189.137048][ T6401] chnl_net:caif_netlink_parms(): no params data found [ 189.215628][ T6446] loop2: detected capacity change from 0 to 16 [ 189.224373][ T6446] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 189.237177][ T5128] Bluetooth: hci3: command tx timeout [ 189.307253][ T62] bridge_slave_1: left allmulticast mode [ 189.313043][ T62] bridge_slave_1: left promiscuous mode [ 189.318801][ T5128] Bluetooth: hci2: command tx timeout [ 189.324512][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.340356][ T62] bridge_slave_0: left allmulticast mode [ 189.346093][ T62] bridge_slave_0: left promiscuous mode [ 189.352180][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.364340][ T62] bridge_slave_1: left allmulticast mode [ 189.371286][ T62] bridge_slave_1: left promiscuous mode [ 189.378190][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.389597][ T62] bridge_slave_0: left allmulticast mode [ 189.395311][ T62] bridge_slave_0: left promiscuous mode [ 189.402788][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.052655][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.084055][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.098257][ T62] bond0 (unregistering): Released all slaves [ 190.227359][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.242861][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.253925][ T62] bond0 (unregistering): Released all slaves [ 191.330416][ T6273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.345419][ T6273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.397173][ T5128] Bluetooth: hci2: command tx timeout [ 191.411247][ T6273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.500623][ T6273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.516013][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.523873][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.532605][ T6401] bridge_slave_0: entered allmulticast mode [ 191.548721][ T6401] bridge_slave_0: entered promiscuous mode [ 191.574826][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.587115][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.602448][ T6401] bridge_slave_1: entered allmulticast mode [ 191.615969][ T6401] bridge_slave_1: entered promiscuous mode [ 192.260359][ T6401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.515757][ T6401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.702547][ T6335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.788240][ T6401] team0: Port device team_slave_0 added [ 192.823293][ T6335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.847436][ T6401] team0: Port device team_slave_1 added [ 192.904593][ T6401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.912204][ T6401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.940377][ T6401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.989533][ T6335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.009242][ T6401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.016254][ T6401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.043202][ T6401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.071757][ T62] hsr_slave_0: left promiscuous mode [ 193.078307][ T62] hsr_slave_1: left promiscuous mode [ 193.084567][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.092604][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.101184][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.110916][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.123318][ T62] hsr_slave_0: left promiscuous mode [ 193.130844][ T62] hsr_slave_1: left promiscuous mode [ 193.141144][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.149166][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.159542][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.167519][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.210864][ T62] veth1_macvtap: left promiscuous mode [ 193.216476][ T62] veth0_macvtap: left promiscuous mode [ 193.222434][ T62] veth1_vlan: left promiscuous mode [ 193.227996][ T62] veth0_vlan: left promiscuous mode [ 193.234959][ T62] veth1_macvtap: left promiscuous mode [ 193.250593][ T62] veth0_macvtap: left promiscuous mode [ 193.256287][ T62] veth1_vlan: left promiscuous mode [ 193.261982][ T62] veth0_vlan: left promiscuous mode [ 193.477191][ T5128] Bluetooth: hci2: command tx timeout [ 193.811252][ T6480] input: syz0 as /devices/virtual/input/input11 [ 194.521201][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.540853][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.894775][ T62] team0 (unregistering): Port device team_slave_1 removed [ 194.934487][ T62] team0 (unregistering): Port device team_slave_0 removed [ 194.935144][ T6485] loop2: detected capacity change from 0 to 16 [ 194.952091][ T6485] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 195.011709][ T6464] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 195.736218][ T62] team0 (unregistering): Port device team_slave_1 removed [ 195.784504][ T62] team0 (unregistering): Port device team_slave_0 removed [ 196.303853][ T6335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.431874][ T6401] hsr_slave_0: entered promiscuous mode [ 196.441589][ T6401] hsr_slave_1: entered promiscuous mode [ 196.449080][ T6401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.457718][ T6401] Cannot create hsr debugfs directory [ 196.832256][ T6305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.867616][ T6305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.931869][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.949942][ T6305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.022236][ T6305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.364422][ T6335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 197.742491][ T6273] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.764766][ T6335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 197.798413][ T6335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 197.883582][ T6335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.006344][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.013614][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.023844][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.031110][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.329723][ T6401] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 198.351299][ T6401] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 198.373325][ T6401] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 198.411262][ T6401] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 198.483285][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.602110][ T6305] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.641783][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.649100][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.676736][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.688037][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.695160][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.738878][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.929067][ T6335] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.996906][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.004194][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.089912][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.097117][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.222206][ T6531] input: syz0 as /devices/virtual/input/input12 [ 200.986657][ T6401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.125096][ T6401] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.156611][ T6305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.205744][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.213011][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.230166][ T6539] loop2: detected capacity change from 0 to 16 [ 201.241836][ T6539] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 201.258811][ T6273] veth0_vlan: entered promiscuous mode [ 201.304825][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.312081][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.426695][ T6273] veth1_vlan: entered promiscuous mode [ 201.682151][ T6305] veth0_vlan: entered promiscuous mode [ 201.725369][ T6273] veth0_macvtap: entered promiscuous mode [ 201.760005][ T6305] veth1_vlan: entered promiscuous mode [ 201.780457][ T6273] veth1_macvtap: entered promiscuous mode [ 201.805364][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.921098][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.936643][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.969971][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.996858][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.019038][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.101091][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.112973][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.123253][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.134451][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.146578][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.166672][ T6273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.177290][ T6273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.186311][ T6273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.211737][ T6273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.327125][ T6305] veth0_macvtap: entered promiscuous mode [ 202.372216][ T6305] veth1_macvtap: entered promiscuous mode [ 202.420382][ T6401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.505110][ T6335] veth0_vlan: entered promiscuous mode [ 202.573271][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.585190][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.595956][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.608529][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.620343][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.631326][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.643698][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.662459][ T6335] veth1_vlan: entered promiscuous mode [ 202.759250][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.786006][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.803812][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.814791][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.833597][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.853596][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.873741][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.925016][ T2482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.946925][ T2482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.961025][ T6305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.970739][ T6305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.979806][ T6305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.989192][ T6305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.146545][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.175528][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.221517][ T6335] veth0_macvtap: entered promiscuous mode [ 203.312286][ T6335] veth1_macvtap: entered promiscuous mode [ 203.344337][ T6401] veth0_vlan: entered promiscuous mode [ 203.432016][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.448484][ T6401] veth1_vlan: entered promiscuous mode [ 203.456430][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.546338][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.565227][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.586311][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.605771][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.616593][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.629859][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.645024][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.656110][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.669056][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.690168][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.700989][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.711852][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.723244][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.733658][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.747692][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.757698][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.768451][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.780979][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.797603][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.807766][ T6335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.817163][ T6335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.821317][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.825875][ T6335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.825942][ T6335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.938043][ T6401] veth0_macvtap: entered promiscuous mode [ 204.067532][ T6401] veth1_macvtap: entered promiscuous mode [ 204.195342][ T2482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.208530][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.226577][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.228390][ T2482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.237237][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.270461][ T6620] Zero length message leads to an empty skb [ 204.354567][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.390389][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.401121][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.411204][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.422099][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.436901][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.461371][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.474529][ T6401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.524830][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.566582][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.586875][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.606844][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.628749][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.654673][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.678510][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.709447][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.726939][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.747091][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.778720][ T6401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.910761][ T2482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.923445][ T6401] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.935154][ T2482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.954302][ T6401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.976924][ T6401] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.995912][ T6401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.094537][ T6630] loop4: detected capacity change from 0 to 16 [ 205.171671][ T6630] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 205.258273][ T6464] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 206.886144][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.921431][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.059049][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.074550][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.186308][ T6689] loop4: detected capacity change from 0 to 16 [ 209.226918][ T6689] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x43de2b41, 0xc6d5fae7 expected [ 209.274358][ T6698] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 209.326352][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.809287][ T6715] bridge0: port 3(syz_tun) entered blocking state [ 209.858551][ T6715] bridge0: port 3(syz_tun) entered disabled state [ 209.898236][ T6715] syz_tun: entered allmulticast mode [ 209.935321][ T6715] syz_tun: entered promiscuous mode [ 209.962468][ T6715] bridge0: port 3(syz_tun) entered blocking state [ 209.969684][ T6715] bridge0: port 3(syz_tun) entered forwarding state [ 210.760505][ T6717] mmap: syz-executor.3 (6717) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 210.845602][ T6717] ================================================================== [ 210.853732][ T6717] BUG: KASAN: slab-use-after-free in finish_fault+0xf87/0x1460 [ 210.861423][ T6717] Read of size 8 at addr ffff88806ad78000 by task syz-executor.3/6717 [ 210.869673][ T6717] [ 210.872027][ T6717] CPU: 1 PID: 6717 Comm: syz-executor.3 Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 [ 210.881919][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 210.891989][ T6717] Call Trace: [ 210.895273][ T6717] [ 210.898209][ T6717] dump_stack_lvl+0x241/0x360 [ 210.902899][ T6717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.908104][ T6717] ? __pfx__printk+0x10/0x10 [ 210.912713][ T6717] ? _printk+0xd5/0x120 [ 210.916882][ T6717] ? __virt_addr_valid+0x183/0x520 [ 210.922004][ T6717] ? __virt_addr_valid+0x183/0x520 [ 210.927124][ T6717] print_report+0x169/0x550 [ 210.931644][ T6717] ? __virt_addr_valid+0x183/0x520 [ 210.936765][ T6717] ? __virt_addr_valid+0x183/0x520 [ 210.941909][ T6717] ? __virt_addr_valid+0x44e/0x520 [ 210.947121][ T6717] ? __phys_addr+0xba/0x170 [ 210.951656][ T6717] ? finish_fault+0xf87/0x1460 [ 210.956429][ T6717] kasan_report+0x143/0x180 [ 210.960963][ T6717] ? finish_fault+0xf87/0x1460 [ 210.965735][ T6717] finish_fault+0xf87/0x1460 [ 210.970344][ T6717] ? __pfx_finish_fault+0x10/0x10 [ 210.975389][ T6717] ? __pfx_lock_release+0x10/0x10 [ 210.980439][ T6717] ? pte_offset_map_nolock+0x137/0x1f0 [ 210.986015][ T6717] ? __lock_acquire+0x1359/0x2000 [ 210.991059][ T6717] ? __do_fault+0x258/0x460 [ 210.995586][ T6717] ? handle_pte_fault+0x2bf5/0x7130 [ 211.000814][ T6717] handle_pte_fault+0x3db5/0x7130 [ 211.005868][ T6717] ? __pfx_lock_acquire+0x10/0x10 [ 211.010902][ T6717] ? __pfx_handle_pte_fault+0x10/0x10 [ 211.016307][ T6717] ? do_raw_spin_lock+0x14f/0x370 [ 211.021358][ T6717] ? follow_page_pte+0x292/0x1d90 [ 211.026392][ T6717] ? follow_page_pte+0x859/0x1d90 [ 211.031428][ T6717] ? __pfx_lock_release+0x10/0x10 [ 211.036481][ T6717] ? do_raw_spin_unlock+0x13c/0x8b0 [ 211.041688][ T6717] handle_mm_fault+0x10df/0x1ba0 [ 211.046649][ T6717] ? __pfx_handle_mm_fault+0x10/0x10 [ 211.051957][ T6717] ? __pfx_find_vma+0x10/0x10 [ 211.056648][ T6717] ? vma_is_secretmem+0xd/0x50 [ 211.061421][ T6717] ? check_vma_flags+0x500/0x5a0 [ 211.066376][ T6717] __get_user_pages+0x6ef/0x1590 [ 211.071327][ T6717] ? mt_find+0x62d/0x850 [ 211.075575][ T6717] ? __pfx___get_user_pages+0x10/0x10 [ 211.080967][ T6717] populate_vma_page_range+0x264/0x330 [ 211.086436][ T6717] ? __pfx_populate_vma_page_range+0x10/0x10 [ 211.092437][ T6717] ? do_mmap+0x915/0xfa0 [ 211.096710][ T6717] __mm_populate+0x27a/0x460 [ 211.101315][ T6717] ? __pfx___mm_populate+0x10/0x10 [ 211.106452][ T6717] __se_sys_remap_file_pages+0x7a1/0x9a0 [ 211.112107][ T6717] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 211.118274][ T6717] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 211.124350][ T6717] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.130684][ T6717] ? do_syscall_64+0x100/0x230 [ 211.135474][ T6717] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 211.141211][ T6717] do_syscall_64+0xf3/0x230 [ 211.145735][ T6717] ? clear_bhb_loop+0x35/0x90 [ 211.150436][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.156344][ T6717] RIP: 0033:0x7f20fa87cea9 [ 211.160858][ T6717] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 211.180477][ T6717] RSP: 002b:00007f20fb6b50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 211.188896][ T6717] RAX: ffffffffffffffda RBX: 00007f20fa9b3f80 RCX: 00007f20fa87cea9 [ 211.196894][ T6717] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00000000202ec000 [ 211.204963][ T6717] RBP: 00007f20fa8ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 211.212938][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.220909][ T6717] R13: 000000000000000b R14: 00007f20fa9b3f80 R15: 00007ffee7b755c8 [ 211.228981][ T6717] [ 211.231999][ T6717] [ 211.234329][ T6717] Allocated by task 6581: [ 211.238651][ T6717] kasan_save_track+0x3f/0x80 [ 211.243342][ T6717] __kasan_slab_alloc+0x66/0x80 [ 211.248191][ T6717] kmem_cache_alloc_noprof+0x135/0x2a0 [ 211.253741][ T6717] ptlock_alloc+0x20/0x70 [ 211.258082][ T6717] pte_alloc_one+0xcd/0x5d0 [ 211.262591][ T6717] __pte_alloc+0x79/0x3a0 [ 211.266948][ T6717] handle_pte_fault+0x55b4/0x7130 [ 211.271982][ T6717] handle_mm_fault+0x10df/0x1ba0 [ 211.276922][ T6717] exc_page_fault+0x459/0x8c0 [ 211.281622][ T6717] asm_exc_page_fault+0x26/0x30 [ 211.286556][ T6717] [ 211.288916][ T6717] Freed by task 6581: [ 211.292889][ T6717] kasan_save_track+0x3f/0x80 [ 211.297707][ T6717] kasan_save_free_info+0x40/0x50 [ 211.302828][ T6717] poison_slab_object+0xe0/0x150 [ 211.307792][ T6717] __kasan_slab_free+0x37/0x60 [ 211.312563][ T6717] kmem_cache_free+0x145/0x350 [ 211.317419][ T6717] ___pte_free_tlb+0x2d/0x130 [ 211.322130][ T6717] free_pgd_range+0x727/0xdd0 [ 211.326836][ T6717] free_pgtables+0x719/0x840 [ 211.331438][ T6717] exit_mmap+0x447/0xc80 [ 211.335686][ T6717] __mmput+0x115/0x390 [ 211.339758][ T6717] exit_mm+0x220/0x310 [ 211.343917][ T6717] do_exit+0x9aa/0x28e0 [ 211.348097][ T6717] do_group_exit+0x207/0x2c0 [ 211.352796][ T6717] __x64_sys_exit_group+0x3f/0x40 [ 211.357827][ T6717] do_syscall_64+0xf3/0x230 [ 211.362328][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.368221][ T6717] [ 211.370630][ T6717] The buggy address belongs to the object at ffff88806ad78000 [ 211.370630][ T6717] which belongs to the cache page->ptl of size 64 [ 211.384426][ T6717] The buggy address is located 0 bytes inside of [ 211.384426][ T6717] freed 64-byte region [ffff88806ad78000, ffff88806ad78040) [ 211.398078][ T6717] [ 211.400417][ T6717] The buggy address belongs to the physical page: [ 211.406838][ T6717] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6ad78 [ 211.415604][ T6717] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 211.423153][ T6717] page_type: 0xfdffffff(slab) [ 211.427829][ T6717] raw: 00fff00000000000 ffff88801504f780 0000000000000000 dead000000000001 [ 211.436410][ T6717] raw: 0000000000000000 00000000002a002a 00000001fdffffff 0000000000000000 [ 211.444990][ T6717] page dumped because: kasan: bad access detected [ 211.451402][ T6717] page_owner tracks the page as allocated [ 211.457210][ T6717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5826, tgid 5826 (syz-executor.0), ts 176796132919, free_ts 175851129675 [ 211.476757][ T6717] post_alloc_hook+0x1f3/0x230 [ 211.481525][ T6717] get_page_from_freelist+0x2cbd/0x2d70 [ 211.487104][ T6717] __alloc_pages_noprof+0x256/0x6c0 [ 211.492307][ T6717] alloc_slab_page+0x5f/0x120 [ 211.496987][ T6717] allocate_slab+0x5a/0x2f0 [ 211.501488][ T6717] ___slab_alloc+0xcd1/0x14b0 [ 211.506171][ T6717] __slab_alloc+0x58/0xa0 [ 211.510510][ T6717] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 211.515978][ T6717] __pmd_alloc+0x110/0x630 [ 211.520422][ T6717] copy_pmd_range+0x8049/0x8500 [ 211.525713][ T6717] copy_page_range+0x99f/0xe90 [ 211.530481][ T6717] copy_mm+0x11ea/0x1f30 [ 211.534728][ T6717] copy_process+0x187a/0x3dc0 [ 211.539407][ T6717] kernel_clone+0x226/0x8f0 [ 211.543917][ T6717] __x64_sys_clone+0x258/0x2a0 [ 211.548692][ T6717] do_syscall_64+0xf3/0x230 [ 211.553279][ T6717] page last free pid 5299 tgid 5299 stack trace: [ 211.559621][ T6717] free_unref_page+0xd22/0xea0 [ 211.564392][ T6717] vfree+0x186/0x2e0 [ 211.568307][ T6717] kcov_close+0x2b/0x50 [ 211.572467][ T6717] __fput+0x406/0x8b0 [ 211.576455][ T6717] task_work_run+0x24f/0x310 [ 211.581053][ T6717] do_exit+0xa27/0x28e0 [ 211.585208][ T6717] do_group_exit+0x207/0x2c0 [ 211.589800][ T6717] __x64_sys_exit_group+0x3f/0x40 [ 211.594921][ T6717] do_syscall_64+0xf3/0x230 [ 211.599432][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.605360][ T6717] [ 211.607691][ T6717] Memory state around the buggy address: [ 211.613318][ T6717] ffff88806ad77f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 211.621377][ T6717] ffff88806ad77f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 211.629528][ T6717] >ffff88806ad78000: fa fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 211.637584][ T6717] ^ [ 211.641647][ T6717] ffff88806ad78080: fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb [ 211.649709][ T6717] ffff88806ad78100: fc fc fc fc fa fb fb fb fb fb fb fb fc fc fc fc [ 211.657765][ T6717] ================================================================== [ 211.676084][ T6717] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 211.683425][ T6717] CPU: 1 PID: 6717 Comm: syz-executor.3 Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 [ 211.693343][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 211.703431][ T6717] Call Trace: [ 211.706822][ T6717] [ 211.709779][ T6717] dump_stack_lvl+0x241/0x360 [ 211.714490][ T6717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.719732][ T6717] ? __pfx__printk+0x10/0x10 [ 211.724372][ T6717] ? vscnprintf+0x5d/0x90 [ 211.728743][ T6717] panic+0x349/0x870 [ 211.732689][ T6717] ? check_panic_on_warn+0x21/0xb0 [ 211.737848][ T6717] ? __pfx_panic+0x10/0x10 [ 211.742299][ T6717] ? mark_lock+0x9a/0x360 [ 211.746662][ T6717] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 211.752600][ T6717] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 211.758539][ T6717] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 211.764903][ T6717] ? print_report+0x502/0x550 [ 211.769616][ T6717] check_panic_on_warn+0x86/0xb0 [ 211.774595][ T6717] ? finish_fault+0xf87/0x1460 [ 211.779420][ T6717] end_report+0x77/0x160 [ 211.783698][ T6717] kasan_report+0x154/0x180 [ 211.788235][ T6717] ? finish_fault+0xf87/0x1460 [ 211.793033][ T6717] finish_fault+0xf87/0x1460 [ 211.797672][ T6717] ? __pfx_finish_fault+0x10/0x10 [ 211.802733][ T6717] ? __pfx_lock_release+0x10/0x10 [ 211.807786][ T6717] ? pte_offset_map_nolock+0x137/0x1f0 [ 211.813287][ T6717] ? __lock_acquire+0x1359/0x2000 [ 211.818357][ T6717] ? __do_fault+0x258/0x460 [ 211.822898][ T6717] ? handle_pte_fault+0x2bf5/0x7130 [ 211.828138][ T6717] handle_pte_fault+0x3db5/0x7130 [ 211.833214][ T6717] ? __pfx_lock_acquire+0x10/0x10 [ 211.838280][ T6717] ? __pfx_handle_pte_fault+0x10/0x10 [ 211.843694][ T6717] ? do_raw_spin_lock+0x14f/0x370 [ 211.848754][ T6717] ? follow_page_pte+0x292/0x1d90 [ 211.853817][ T6717] ? follow_page_pte+0x859/0x1d90 [ 211.858874][ T6717] ? __pfx_lock_release+0x10/0x10 [ 211.863918][ T6717] ? do_raw_spin_unlock+0x13c/0x8b0 [ 211.869135][ T6717] handle_mm_fault+0x10df/0x1ba0 [ 211.874095][ T6717] ? __pfx_handle_mm_fault+0x10/0x10 [ 211.879396][ T6717] ? __pfx_find_vma+0x10/0x10 [ 211.884088][ T6717] ? vma_is_secretmem+0xd/0x50 [ 211.888879][ T6717] ? check_vma_flags+0x500/0x5a0 [ 211.893831][ T6717] __get_user_pages+0x6ef/0x1590 [ 211.898781][ T6717] ? mt_find+0x62d/0x850 [ 211.903030][ T6717] ? __pfx___get_user_pages+0x10/0x10 [ 211.908438][ T6717] populate_vma_page_range+0x264/0x330 [ 211.913907][ T6717] ? __pfx_populate_vma_page_range+0x10/0x10 [ 211.919900][ T6717] ? do_mmap+0x915/0xfa0 [ 211.924153][ T6717] __mm_populate+0x27a/0x460 [ 211.928748][ T6717] ? __pfx___mm_populate+0x10/0x10 [ 211.933869][ T6717] __se_sys_remap_file_pages+0x7a1/0x9a0 [ 211.939524][ T6717] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 211.945704][ T6717] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 211.951694][ T6717] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.958047][ T6717] ? do_syscall_64+0x100/0x230 [ 211.962817][ T6717] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 211.968648][ T6717] do_syscall_64+0xf3/0x230 [ 211.973157][ T6717] ? clear_bhb_loop+0x35/0x90 [ 211.977843][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.983743][ T6717] RIP: 0033:0x7f20fa87cea9 [ 211.988159][ T6717] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 212.007779][ T6717] RSP: 002b:00007f20fb6b50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 212.016220][ T6717] RAX: ffffffffffffffda RBX: 00007f20fa9b3f80 RCX: 00007f20fa87cea9 [ 212.024211][ T6717] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00000000202ec000 [ 212.032198][ T6717] RBP: 00007f20fa8ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 212.040178][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.048148][ T6717] R13: 000000000000000b R14: 00007f20fa9b3f80 R15: 00007ffee7b755c8 [ 212.056129][ T6717] [ 212.059528][ T6717] Kernel Offset: disabled [ 212.063857][ T6717] Rebooting in 86400 seconds..