last executing test programs: 30.429973896s ago: executing program 1 (id=1145): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 29.387965545s ago: executing program 1 (id=1148): syz_emit_ethernet(0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet(0x2, 0x2, 0x10001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) read(r2, &(0x7f00000000c0)=""/29, 0x1d) 28.95422896s ago: executing program 1 (id=1152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000480)=@xdp, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000400)=""/27, 0x1b}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/97, 0x61}, {&(0x7f0000001a00)=""/154, 0x9a}, {&(0x7f0000001ac0)=""/172, 0xac}, {&(0x7f0000001b80)=""/238, 0xee}, {&(0x7f0000002c80)=""/115, 0x73}, {&(0x7f0000002d00)=""/98, 0x62}], 0x8}, 0x4}, {{&(0x7f0000002e40)=@hci, 0x80, &(0x7f0000006100)=[{&(0x7f0000002ec0)=""/88, 0x58}, {&(0x7f0000002f40)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f0000000500)=""/11, 0xb}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/136, 0x88}], 0x7}, 0x101}, {{&(0x7f0000006180)=@generic, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006200)=""/252, 0xfc}, {&(0x7f0000006300)=""/232, 0xe8}, {0x0}, {&(0x7f0000006580)=""/47, 0x2f}], 0x4}, 0x800}, {{&(0x7f0000006640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000069c0)=[{&(0x7f00000066c0)=""/72, 0x48}, {&(0x7f00000067c0)=""/151, 0x97}, {&(0x7f0000007240)=""/4096, 0x1000}, {&(0x7f0000006880)=""/40, 0x28}, {&(0x7f00000068c0)=""/69, 0x45}, {&(0x7f0000006940)=""/87, 0x57}], 0x6, &(0x7f0000006a40)=""/125, 0x7d}, 0x47}, {{0x0, 0x0, 0x0}, 0xfff}], 0x5, 0x10000, &(0x7f0000007000)) 25.874365238s ago: executing program 1 (id=1156): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 25.152764561s ago: executing program 1 (id=1161): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000340)=""/233}, 0x90) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000040)={{0x80}, 'port0\x00', 0xe3, 0x1b0407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) read(r5, &(0x7f0000000280)=""/4096, 0x1000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 20.381828199s ago: executing program 1 (id=1164): preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 5.849334394s ago: executing program 2 (id=1234): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1b) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000740)) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xff}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40) openat(r3, &(0x7f0000000200)='./file0\x00', 0x111000, 0x49) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0x9, 0x0, &(0x7f0000000080)) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x5, &(0x7f000001ae00)=""/102385, &(0x7f00000001c0)=0xffffffcc) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$EVIOCGMASK(r8, 0x5b01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) 4.579869436s ago: executing program 0 (id=1243): syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000a80)={&(0x7f0000000200)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0/file0/file0\x00', 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 4.514565632s ago: executing program 3 (id=1244): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x203, 0x8401) ioctl$USBDEVFS_BULK(r3, 0x80045503, &(0x7f00000002c0)={{{0x1, 0x1}}, 0x0, 0x1, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b000000", @ANYRES32, @ANYBLOB="38003300c0000000e7ffffffffff080211000000505050"], 0x54}}, 0x0) lseek(r1, 0x5, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) 4.31271216s ago: executing program 3 (id=1246): syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700102c00fe87a6f88b23fdf2fb00000000000000000000000000000001"], 0x0) 4.135976991s ago: executing program 3 (id=1247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b0800000000000001090224000100"], 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCNXCL(r3, 0x540d) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="002253000000ab3c8dde8605"], 0x0}, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x9, &(0x7f0000000200)=[{0xfb4, 0x1}], 0x1, 0x4, 0x24, 0x28, 0x60, 0x60}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x41) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) openat$hwrng(0xffffff9c, &(0x7f0000000300), 0x101400, 0x0) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.692216678s ago: executing program 0 (id=1250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000340)) 3.59209503s ago: executing program 4 (id=1251): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x34}}, 0x0) 3.495257168s ago: executing program 0 (id=1252): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f000000b800)={0x2020}, 0xe80) dup2(r1, r2) 3.355021938s ago: executing program 4 (id=1253): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 3.227971092s ago: executing program 0 (id=1254): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f000000000b05d25a", 0xa}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85a1077477c0b7e82880000000000000230000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x90) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040b0b00", @ANYRESDEC], 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.986981979s ago: executing program 0 (id=1255): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x20000080) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x48004) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @timestamp, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x93, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 2.986788678s ago: executing program 4 (id=1256): openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000001f00)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1a, 0x2, 0x4) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000040)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, &(0x7f0000000100)={0xb, @raw_data="6a15549d86280de361a8b480e5b0cb916b5c87b9baacb82ccf6ac2971b9fdc8132091d6187ff7e37d819ed1045f8293cc64fd55051efd377fe50f55b0a7bf2df0f3c75b5fcb4160e15b20b724ffe809bf9531f4f46c57bb7f8e9578549821e4b72b4048ceabb71c85484277e1f639ef9f8ae48d3ff380e5e762e5f9953667079656f118b321007ae4229f962a8a851c030c6c4ed07c41ad607ef0e53988faf1d3f843c2b118f1253e1dc2bb25e5e0dd872f4a60333d6d870cd2b4ce505ecd28d8b975acd9a1c1d43"}) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x202000, 0x0) 2.628103058s ago: executing program 2 (id=1257): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000540)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, {0x0, @random="e34dff2257e0"}, 0x1c, {0x2, 0x0, @broadcast}, 'veth0\x00'}) 2.302332095s ago: executing program 0 (id=1258): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010450000904000001020d00000d240f01"], 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket(0x29, 0x6, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) write$cgroup_subtree(r3, 0x0, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000680)) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) shutdown(0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = dup2(r1, 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@migrate={0xec, 0x21, 0x21, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2}}, [@migrate={0x9c, 0x11, [{@in6=@local, @in, @in6=@private1, @in=@broadcast}, {@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, @in=@rand_addr=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xec}}, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x8, &(0x7f0000000200), 0x4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) capset(&(0x7f0000000080), &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, 0x40000}) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x20) 2.012105469s ago: executing program 4 (id=1259): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r1 = gettid() syz_open_dev$dri(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.901936247s ago: executing program 4 (id=1260): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0xfd80, 0x2, 0x1, 0x9, 0x4, 0x6}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}]}, 0x24}}, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x5b06, 0x0) 1.455230039s ago: executing program 2 (id=1261): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 1.120065608s ago: executing program 2 (id=1262): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) listen(r0, 0x100000) 867.95803ms ago: executing program 2 (id=1263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x9, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000001200), 0x10001, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x1c) 715.998934ms ago: executing program 3 (id=1264): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) 559.743761ms ago: executing program 2 (id=1265): r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4050}, 0x240280d5) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000240)={0x60, 0x2, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5, &(0x7f0000000200)=[{0x74d8, 0x7, 0x2}, {0x1, 0x8, 0x2}], 0x2, 0x3, 0x66, 0x34, 0x48, 0x10}) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x6) lseek(r3, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000002380)={0x7, 0x8, 0xfa00, {r4}}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x4913, &(0x7f00000003c0)={0x0, 0x55b6, 0x10100, 0x2}, &(0x7f00000000c0), &(0x7f0000000100)) sched_setaffinity(0x0, 0xffffffffffffff0f, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5b2b4293}], 0x1, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, 0x0) bind$alg(r6, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000040071108b000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc1, &(0x7f0000000700)=""/202, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xd, 0x4}, 0x10, 0x0, r3}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001d00000009b2b2c10d2117f75fe5da000000000000000200000d0000000006000000000000000000000000000097a17fea0f253b5f7b9db000d98c000c1addc9a8b505c8ae3c6f323f9dd9ef4128c2c98850e5c1eb149c9fbf1e165fb102eda723f3d3e2e26c6a630013d20f59112b541f53f019fd1a51e740d05c54de57e6f73262028adb03450083cf388548d85e7aba5251"], &(0x7f0000000180)=""/129, 0x3d, 0x81, 0x1}, 0x20) 455.597754ms ago: executing program 3 (id=1266): syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101081) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r2) listen(r1, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'ethtool\x00'}]}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = gettid() r6 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r6, 0x0) syz_emit_vhci(0x0, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) sigaltstack(0x0, 0x0) rt_sigqueueinfo(r5, 0x0, &(0x7f0000000080)) r7 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r7) recvmmsg(r3, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001500), 0x0, 0x11) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000c00000000000000000000000000a20000000000a030000000000000000000a0000000900010073797a3000000000740000000000000000000000000000000a0000000900020073797a3100000000400003800800014720311ef94180dc40000000002c0003801400010076657468305f746f5f626174616476001400010076657468315f746f5f7465616d00000008000740000000010900010073797a3000000000140000001100010000000000000000000fc12717a8cf8772ef2dfcc47b6b0643df8261cc8dee917d15215614c5d1e8106a551ff3c8d3fb499cc9e11d82413e4e09fcce280d4862988a894ddffe8d59215d"], 0xbc}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 91.013999ms ago: executing program 3 (id=1267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x200, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}}, 0x4004004) creat(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r2 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10b00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2af7, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r9, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="1ce36aba", 0x4}], 0x1}}], 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "6970db5e1a5e59ab54053861b182c1aa5bfa09d21b699379ab04eb29ee95bfd4aa2e83662eefcca878e3677208de36650006bfdf10d35ddf3148573cbc274287f6f94c55fc2a25f51f91b69e87873ea1"}, 0xd8) syz_emit_ethernet(0x17b, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000001450600fe8000"/37], 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x15, &(0x7f0000001400)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800500150000000000080012400006000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x6ed3, 0x0, 0x0, 0x0, 0x0) r12 = openat$ptp0(0xffffff9c, &(0x7f0000002100), 0x42202, 0x0) ioctl$PTP_CLOCK_GETCAPS(r12, 0x80503d01, &(0x7f0000002140)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f041}) 0s ago: executing program 4 (id=1268): r0 = syz_usb_connect(0x2, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): oop4): Mounted with checkpoint version = 48b305e5 [ 340.234569][ T5223] syz-executor: attempt to access beyond end of device [ 340.234569][ T5223] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 340.667423][ T5223] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 340.784440][ T7903] netlink: 'syz.3.790': attribute type 29 has an invalid length. [ 340.825816][ T7903] netlink: 'syz.3.790': attribute type 29 has an invalid length. [ 340.843358][ T7903] netlink: 'syz.3.790': attribute type 29 has an invalid length. [ 341.209188][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 341.319225][ T940] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 341.539653][ T940] usb 4-1: Using ep0 maxpacket: 32 [ 341.547353][ T940] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 341.590634][ T940] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 341.607434][ T940] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 341.629264][ T940] usb 4-1: Product: syz [ 341.633444][ T940] usb 4-1: Manufacturer: syz [ 341.656796][ T940] usb 4-1: SerialNumber: syz [ 341.707335][ T940] usb 4-1: config 0 descriptor?? [ 341.727784][ T7910] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.866458][ T47] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 342.036483][ T47] usb 5-1: device descriptor read/64, error -71 [ 342.059236][ T25] usb 4-1: USB disconnect, device number 10 [ 343.496411][ T47] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 344.432176][ T47] usb 5-1: device descriptor read/64, error -71 [ 344.866146][ T47] usb usb5-port1: attempt power cycle [ 345.677580][ T7954] netlink: 'syz.2.804': attribute type 29 has an invalid length. [ 345.723328][ T7954] netlink: 'syz.2.804': attribute type 29 has an invalid length. [ 345.787191][ T7954] netlink: 'syz.2.804': attribute type 29 has an invalid length. [ 351.389206][ T940] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 351.596423][ T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 351.596512][ T940] usb 1-1: Using ep0 maxpacket: 32 [ 351.623716][ T940] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 351.646801][ T940] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 351.661643][ T940] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 351.679743][ T940] usb 1-1: Product: syz [ 351.687784][ T940] usb 1-1: Manufacturer: syz [ 351.698089][ T940] usb 1-1: SerialNumber: syz [ 351.714068][ T940] usb 1-1: config 0 descriptor?? [ 351.726769][ T7985] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 351.769141][ T47] usb 2-1: device descriptor read/64, error -71 [ 351.832239][ T8002] netlink: 'syz.4.820': attribute type 29 has an invalid length. [ 351.847043][ T8002] netlink: 'syz.4.820': attribute type 29 has an invalid length. [ 351.855609][ T8002] netlink: 'syz.4.820': attribute type 29 has an invalid length. [ 351.880841][ T8000] loop3: detected capacity change from 0 to 512 [ 351.888197][ T8000] EXT4-fs: Ignoring removed mblk_io_submit option [ 351.895563][ T8000] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 351.908754][ T8000] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 351.943732][ T8000] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 351.959368][ T8000] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 351.973322][ T8000] EXT4-fs (loop3): 1 truncate cleaned up [ 351.981803][ T8000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.014110][ T8000] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 352.021350][ T8000] overlayfs: failed to set xattr on upper [ 352.027218][ T8000] overlayfs: ...falling back to redirect_dir=nofollow. [ 352.034085][ T8000] overlayfs: ...falling back to index=off. [ 352.039977][ T8000] overlayfs: ...falling back to uuid=null. [ 352.046354][ T47] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 352.098646][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.114254][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.293978][ T5312] usb 1-1: USB disconnect, device number 11 [ 352.338437][ T47] usb 2-1: device descriptor read/64, error -71 [ 352.552427][ T47] usb usb2-port1: attempt power cycle [ 353.024054][ T47] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 353.067133][ T47] usb 2-1: device descriptor read/8, error -71 [ 353.396766][ T47] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 353.452740][ T47] usb 2-1: device descriptor read/8, error -71 [ 353.691091][ T47] usb usb2-port1: unable to enumerate USB device [ 354.734679][ T5232] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /152/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 355.108480][ T5232] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /152/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 355.729543][ T5232] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 356.751595][ T5232] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /152/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 357.146570][ T5232] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /152/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 357.259308][ T5232] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 357.376797][ T5232] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /152/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 357.435977][ T5232] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /152/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 357.501465][ T5232] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 357.509600][ T8034] netlink: 'syz.4.831': attribute type 29 has an invalid length. [ 357.553240][ T5232] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /152/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 357.564853][ T8034] netlink: 'syz.4.831': attribute type 29 has an invalid length. [ 357.659513][ T8040] netlink: 'syz.4.831': attribute type 29 has an invalid length. [ 359.106767][ T8054] netlink: 'syz.2.837': attribute type 49 has an invalid length. [ 359.217723][ T8028] loop0: detected capacity change from 0 to 40427 [ 359.236525][ T8028] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(2560) blocks(523776) [ 359.245246][ T8028] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 359.308798][ T8028] F2FS-fs (loop0): invalid crc value [ 359.349583][ T8028] F2FS-fs (loop0): Found nat_bits in checkpoint [ 359.379106][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 359.450693][ T8028] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 359.466737][ T8028] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 359.533618][ T5232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.589004][ T5222] syz-executor: attempt to access beyond end of device [ 359.589004][ T5222] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 359.630239][ T8044] loop4: detected capacity change from 0 to 32768 [ 359.640651][ T5222] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 359.679253][ T8044] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.835 (8044) [ 359.737807][ T5532] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.788809][ T8044] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 359.817523][ T8044] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 359.838442][ T8044] BTRFS info (device loop4): using free-space-tree [ 359.881116][ T5532] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.936415][ T940] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 360.097586][ T940] usb 2-1: device descriptor read/64, error -71 [ 360.099229][ T5532] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.737289][ T940] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 361.025638][ T940] usb 2-1: device descriptor read/64, error -71 [ 361.238020][ T940] usb usb2-port1: attempt power cycle [ 361.755386][ T940] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 361.851465][ T940] usb 2-1: device descriptor read/8, error -71 [ 361.868826][ T5532] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.881586][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.891974][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.902995][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.934561][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.942757][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 361.950929][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.092947][ T8100] netlink: 'syz.2.845': attribute type 29 has an invalid length. [ 362.149505][ T5223] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 362.170311][ T8100] netlink: 'syz.2.845': attribute type 29 has an invalid length. [ 362.195050][ T8101] netlink: 'syz.2.845': attribute type 29 has an invalid length. [ 362.206316][ T940] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 362.247229][ T940] usb 2-1: device descriptor read/8, error -71 [ 362.385185][ T940] usb usb2-port1: unable to enumerate USB device [ 362.732753][ T8111] netlink: 100 bytes leftover after parsing attributes in process `syz.4.843'. [ 363.493546][ T5532] bridge_slave_1: left allmulticast mode [ 363.524551][ T5532] bridge_slave_1: left promiscuous mode [ 363.558678][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.649553][ T5532] bridge_slave_0: left allmulticast mode [ 363.666867][ T5532] bridge_slave_0: left promiscuous mode [ 363.682906][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.988229][ T5239] Bluetooth: hci3: command tx timeout [ 365.282770][ T8125] loop0: detected capacity change from 0 to 40427 [ 365.293619][ T8125] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(2560) blocks(523776) [ 365.308563][ T8125] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 365.338474][ T8125] F2FS-fs (loop0): invalid crc value [ 365.369146][ T8125] F2FS-fs (loop0): Found nat_bits in checkpoint [ 365.402890][ T5532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.431781][ T5532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.447424][ T5532] bond0 (unregistering): Released all slaves [ 365.454088][ T8125] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 365.466068][ T8125] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 365.486115][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 365.527402][ T5222] syz-executor: attempt to access beyond end of device [ 365.527402][ T5222] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 365.562057][ T8095] chnl_net:caif_netlink_parms(): no params data found [ 365.618086][ T5222] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 366.028057][ T8150] netlink: 'syz.4.856': attribute type 29 has an invalid length. [ 366.066493][ T5239] Bluetooth: hci3: command tx timeout [ 366.143965][ T8152] netlink: 'syz.4.856': attribute type 29 has an invalid length. [ 366.154327][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.168870][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.176070][ T8095] bridge_slave_0: entered allmulticast mode [ 366.183645][ T8095] bridge_slave_0: entered promiscuous mode [ 367.106420][ T8156] netlink: 'syz.4.856': attribute type 29 has an invalid length. [ 367.124517][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.162611][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.173626][ T8095] bridge_slave_1: entered allmulticast mode [ 367.187770][ T8095] bridge_slave_1: entered promiscuous mode [ 367.295097][ T8095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.384498][ T5532] hsr_slave_0: left promiscuous mode [ 367.448462][ T8181] netlink: 100 bytes leftover after parsing attributes in process `syz.4.861'. [ 368.176725][ T5239] Bluetooth: hci3: command tx timeout [ 368.235240][ T5312] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 368.340974][ T5532] hsr_slave_1: left promiscuous mode [ 368.388851][ T5532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.406598][ T5532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.406686][ T5312] usb 3-1: device descriptor read/64, error -71 [ 368.440765][ T5532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.457622][ T5532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.526316][ T5532] veth1_macvtap: left promiscuous mode [ 368.532261][ T5532] veth0_macvtap: left promiscuous mode [ 368.547477][ T5532] veth1_vlan: left promiscuous mode [ 368.552992][ T5532] veth0_vlan: left promiscuous mode [ 368.702678][ T5312] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 368.866378][ T5312] usb 3-1: device descriptor read/64, error -71 [ 368.986882][ T5312] usb usb3-port1: attempt power cycle [ 369.427177][ T5312] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 369.440514][ T8192] loop4: detected capacity change from 0 to 40427 [ 369.475142][ T8192] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(2560) blocks(523776) [ 369.478349][ T5312] usb 3-1: device descriptor read/8, error -71 [ 369.493159][ T5532] team0 (unregistering): Port device team_slave_1 removed [ 369.506483][ T8192] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 369.528157][ T8192] F2FS-fs (loop4): invalid crc value [ 369.567311][ T8192] F2FS-fs (loop4): Found nat_bits in checkpoint [ 369.596637][ T5532] team0 (unregistering): Port device team_slave_0 removed [ 369.691319][ T8192] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 369.699223][ T8192] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 369.756694][ T5312] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 369.806751][ T5312] usb 3-1: device descriptor read/8, error -71 [ 369.813685][ T5223] syz-executor: attempt to access beyond end of device [ 369.813685][ T5223] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 369.828334][ T5223] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 369.930753][ T5312] usb usb3-port1: unable to enumerate USB device [ 370.170010][ T8208] loop1: detected capacity change from 0 to 512 [ 370.177446][ T8208] EXT4-fs: Ignoring removed mblk_io_submit option [ 370.188236][ T8208] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 370.229406][ T5239] Bluetooth: hci3: command tx timeout [ 370.264907][ T8208] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 370.285625][ T8208] EXT4-fs (loop1): 1 truncate cleaned up [ 370.292570][ T8208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.321806][ T8208] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 370.329747][ T8208] overlayfs: failed to set xattr on upper [ 370.335504][ T8208] overlayfs: ...falling back to redirect_dir=nofollow. [ 370.342863][ T8208] overlayfs: ...falling back to index=off. [ 370.348813][ T8208] overlayfs: ...falling back to uuid=null. [ 370.439017][ T8095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.458918][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 370.495419][ T8211] netlink: 'syz.2.870': attribute type 29 has an invalid length. [ 370.899028][ T8095] team0: Port device team_slave_0 added [ 371.486882][ T8213] netlink: 'syz.2.870': attribute type 29 has an invalid length. [ 371.565861][ T8095] team0: Port device team_slave_1 added [ 371.609713][ T5225] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /182/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 371.795472][ T5225] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /182/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 371.835404][ T5225] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 371.851562][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.857935][ T5225] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /182/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 371.882436][ T5225] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /182/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 371.886777][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.965818][ T5225] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 371.995518][ T8095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.999173][ T5225] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /182/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 372.021647][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.048444][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.116420][ T8095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.142820][ T5225] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /182/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 372.224773][ T5225] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 372.274467][ T8095] hsr_slave_0: entered promiscuous mode [ 372.293333][ T5225] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /182/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 372.357716][ T8095] hsr_slave_1: entered promiscuous mode [ 373.196674][ T940] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 373.386713][ T940] usb 5-1: device descriptor read/64, error -71 [ 373.698272][ T5225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.707827][ T940] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 373.966543][ T940] usb 5-1: device descriptor read/64, error -71 [ 374.131141][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.213218][ T940] usb usb5-port1: attempt power cycle [ 374.252503][ T8095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 374.261751][ T8239] loop2: detected capacity change from 0 to 40427 [ 374.296928][ T8239] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(2560) blocks(523776) [ 374.298957][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.318095][ T8239] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 374.345253][ T8239] F2FS-fs (loop2): invalid crc value [ 374.357352][ T8095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 374.370856][ T8239] F2FS-fs (loop2): Found nat_bits in checkpoint [ 374.395102][ T8095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 374.465571][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.502180][ T8239] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 374.510974][ T8095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 374.518858][ T8239] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 374.635660][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.689954][ T940] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 374.726610][ T5241] syz-executor: attempt to access beyond end of device [ 374.726610][ T5241] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 374.750525][ T5241] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 374.777291][ T940] usb 5-1: device descriptor read/8, error -71 [ 374.833314][ T8095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.907165][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.923499][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.933644][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.937438][ T8095] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.948975][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.959238][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 374.968040][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.066891][ T53] bridge_slave_1: left allmulticast mode [ 375.086744][ T940] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 375.095219][ T53] bridge_slave_1: left promiscuous mode [ 375.130803][ T940] usb 5-1: device descriptor read/8, error -71 [ 375.136680][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.192749][ T53] bridge_slave_0: left allmulticast mode [ 375.218761][ T53] bridge_slave_0: left promiscuous mode [ 375.240521][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.407006][ T940] usb usb5-port1: unable to enumerate USB device [ 377.027527][ T5231] Bluetooth: hci2: command tx timeout [ 378.953690][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.961350][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.106929][ T5231] Bluetooth: hci2: command tx timeout [ 379.535125][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.891'. [ 380.937899][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.976110][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.010509][ T53] bond0 (unregistering): Released all slaves [ 381.175815][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.183087][ T5532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.186752][ T5231] Bluetooth: hci2: command tx timeout [ 381.214147][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.221393][ T5532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.746367][ T5350] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 381.821227][ T53] hsr_slave_0: left promiscuous mode [ 381.845492][ T53] hsr_slave_1: left promiscuous mode [ 381.853177][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.879729][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.900725][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.933840][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.941317][ T5350] usb 3-1: device descriptor read/64, error -71 [ 381.976120][ T53] veth1_macvtap: left promiscuous mode [ 381.982421][ T53] veth0_macvtap: left promiscuous mode [ 381.986972][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 381.989017][ T53] veth1_vlan: left promiscuous mode [ 382.001435][ T53] veth0_vlan: left promiscuous mode [ 382.187038][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 382.202803][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 382.229604][ T25] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 382.231161][ T5350] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 382.244074][ T25] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 382.280970][ T25] usb 1-1: Product: syz [ 382.285180][ T25] usb 1-1: Manufacturer: syz [ 382.313049][ T25] usb 1-1: SerialNumber: syz [ 382.326485][ T25] usb 1-1: config 0 descriptor?? [ 382.335878][ T8348] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 382.397330][ T5350] usb 3-1: device descriptor read/64, error -71 [ 382.528338][ T5350] usb usb3-port1: attempt power cycle [ 382.579859][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.593149][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.606629][ T25] usb 1-1: USB disconnect, device number 12 [ 382.707898][ T53] team0 (unregistering): Port device team_slave_1 removed [ 382.741052][ T53] team0 (unregistering): Port device team_slave_0 removed [ 382.956810][ T5350] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 383.005784][ T5350] usb 3-1: device descriptor read/8, error -71 [ 383.142390][ T8368] netlink: 332 bytes leftover after parsing attributes in process `syz.4.898'. [ 383.266373][ T5231] Bluetooth: hci2: command tx timeout [ 383.442916][ T5350] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 383.489044][ T5350] usb 3-1: device descriptor read/8, error -71 [ 383.777610][ T5350] usb usb3-port1: unable to enumerate USB device [ 384.191059][ T8095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.405819][ T8277] chnl_net:caif_netlink_parms(): no params data found [ 384.495570][ T8095] veth0_vlan: entered promiscuous mode [ 384.774473][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.901'. [ 385.535841][ T8095] veth1_vlan: entered promiscuous mode [ 385.900700][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.912235][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.574555][ T8277] bridge_slave_0: entered allmulticast mode [ 387.067715][ T8277] bridge_slave_0: entered promiscuous mode [ 387.586810][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.600766][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.615380][ T8277] bridge_slave_1: entered allmulticast mode [ 387.655444][ T8277] bridge_slave_1: entered promiscuous mode [ 387.805107][ T8277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.867713][ T8277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.915788][ T8095] veth0_macvtap: entered promiscuous mode [ 387.949415][ T8095] veth1_macvtap: entered promiscuous mode [ 388.051447][ T8277] team0: Port device team_slave_0 added [ 388.083245][ T8277] team0: Port device team_slave_1 added [ 388.110960][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.166951][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.200151][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.223813][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.259368][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.286447][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.312773][ T8095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.441384][ T8277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.472307][ T8277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.847647][ T8277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.775740][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.833184][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.919381][ T8440] Bluetooth: MGMT ver 1.23 [ 390.170179][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.206352][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.216213][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.246313][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.265903][ T8095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.295333][ T8277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.336714][ T8277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.439445][ T8277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.468775][ T8095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.495553][ T8095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.516275][ T8095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.525221][ T8095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.661938][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'. [ 390.838359][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 391.338230][ T8] usb 3-1: no configurations [ 391.342868][ T8] usb 3-1: can't read configurations, error -22 [ 391.415561][ T8277] hsr_slave_0: entered promiscuous mode [ 391.466815][ T8277] hsr_slave_1: entered promiscuous mode [ 391.494178][ T8277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.518841][ T8277] Cannot create hsr debugfs directory [ 391.527663][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 391.754158][ T8] usb 3-1: no configurations [ 391.777118][ T8] usb 3-1: can't read configurations, error -22 [ 391.795734][ T8] usb usb3-port1: attempt power cycle [ 391.864407][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.881928][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.357133][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 392.785417][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.851285][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.199610][ T8] usb 3-1: no configurations [ 393.204339][ T8] usb 3-1: can't read configurations, error -22 [ 393.356885][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 393.413992][ T8] usb 3-1: no configurations [ 393.430430][ T8] usb 3-1: can't read configurations, error -22 [ 393.450749][ T8] usb usb3-port1: unable to enumerate USB device [ 393.482430][ T8277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 393.496968][ T8277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 393.524420][ T8277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 393.537792][ T5350] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 393.586351][ T940] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 393.603145][ T8277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 393.726851][ T8277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.748435][ T8277] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.761680][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.768877][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.779940][ T5350] usb 1-1: Using ep0 maxpacket: 32 [ 393.787817][ T940] usb 5-1: Using ep0 maxpacket: 32 [ 393.800073][ T5350] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 393.801317][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.817317][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.833602][ T940] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 393.855205][ T940] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 393.874219][ T5350] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 393.886910][ T5350] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 393.895522][ T5350] usb 1-1: Product: syz [ 393.924639][ T940] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 393.934877][ T5350] usb 1-1: Manufacturer: syz [ 393.946831][ T940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.954859][ T940] usb 5-1: Product: syz [ 393.961228][ T5350] usb 1-1: SerialNumber: syz [ 393.978893][ T5350] usb 1-1: config 0 descriptor?? [ 393.992194][ T940] usb 5-1: Manufacturer: syz [ 394.000231][ T8485] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 394.001455][ T940] usb 5-1: SerialNumber: syz [ 394.233339][ T940] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 394.275928][ T940] usb 5-1: USB disconnect, device number 23 [ 394.302754][ T940] usblp1: removed [ 394.369688][ T8277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.487715][ T8277] veth0_vlan: entered promiscuous mode [ 394.530198][ T8277] veth1_vlan: entered promiscuous mode [ 394.623404][ T8277] veth0_macvtap: entered promiscuous mode [ 394.659641][ T8277] veth1_macvtap: entered promiscuous mode [ 394.705265][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.751321][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.788376][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.806483][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.819317][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.836977][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.852311][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.912501][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.942885][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 394.970203][ T8277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.033326][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.069222][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.130508][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.147902][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.148270][ T25] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 395.158444][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.186127][ T25] usb 4-1: config 0 has no interface number 0 [ 395.186684][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.208397][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.215778][ T25] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.219890][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.282888][ T25] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.308371][ T8277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.313049][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 395.334798][ T25] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 395.374759][ T25] usb 4-1: Manufacturer: syz [ 395.379159][ T8277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.399201][ T8277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.424701][ T25] usb 4-1: config 0 descriptor?? [ 395.441451][ T8277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.467877][ T8277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.710928][ T1062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.746057][ T1062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.824869][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.851070][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.063166][ T25] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.0003/input/input8 [ 396.207130][ T8553] netlink: 'syz.1.883': attribute type 29 has an invalid length. [ 396.229846][ T8553] netlink: 'syz.1.883': attribute type 29 has an invalid length. [ 396.252451][ T5274] usb 1-1: USB disconnect, device number 13 [ 396.259654][ T25] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 396.295559][ T8556] netlink: 'syz.1.883': attribute type 29 has an invalid length. [ 396.806835][ T940] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 396.997760][ T940] usb 1-1: no configurations [ 397.007048][ T940] usb 1-1: can't read configurations, error -22 [ 397.186732][ T940] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 397.431005][ T940] usb 1-1: no configurations [ 397.457184][ T940] usb 1-1: can't read configurations, error -22 [ 397.496732][ T940] usb usb1-port1: attempt power cycle [ 397.829650][ T8550] loop4: detected capacity change from 0 to 40427 [ 397.842880][ T8585] loop1: detected capacity change from 0 to 16 [ 397.856769][ T8585] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 398.236470][ T940] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 398.777481][ T940] usb 1-1: no configurations [ 398.782207][ T940] usb 1-1: can't read configurations, error -22 [ 398.836343][ T8550] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(2560) blocks(523776) [ 398.856945][ T8550] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 398.875338][ T5312] usb 4-1: USB disconnect, device number 11 [ 398.941704][ T8550] F2FS-fs (loop4): invalid crc value [ 399.032737][ T940] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 399.086585][ T8550] F2FS-fs (loop4): Found nat_bits in checkpoint [ 399.882804][ T940] usb 1-1: device descriptor read/8, error -71 [ 400.008308][ T940] usb usb1-port1: unable to enumerate USB device [ 400.052776][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 400.231740][ T8618] netlink: 'syz.2.943': attribute type 29 has an invalid length. [ 400.269715][ T8618] netlink: 'syz.2.943': attribute type 29 has an invalid length. [ 400.324237][ T8618] netlink: 'syz.2.943': attribute type 29 has an invalid length. [ 400.364283][ T8610] kvm: emulating exchange as write [ 400.806423][ T940] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 400.975494][ T8636] loop4: detected capacity change from 0 to 16 [ 400.995190][ T8636] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 401.746746][ T940] usb 3-1: Using ep0 maxpacket: 16 [ 401.797816][ T940] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 401.818044][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.826092][ T940] usb 3-1: Product: syz [ 401.859437][ T940] usb 3-1: Manufacturer: syz [ 401.867205][ T940] usb 3-1: SerialNumber: syz [ 401.897333][ T940] usb 3-1: config 0 descriptor?? [ 401.911415][ T940] usb 3-1: no audio or video endpoints found [ 401.929990][ T940] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 402.096363][ T5274] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 402.106198][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 402.116463][ T5275] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 402.143975][ T940] usb 3-1: USB disconnect, device number 28 [ 402.287363][ T5274] usb 1-1: no configurations [ 402.296057][ T5274] usb 1-1: can't read configurations, error -22 [ 402.453808][ T5275] usb 2-1: Using ep0 maxpacket: 32 [ 402.465938][ T5275] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 402.479584][ T5275] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 402.489779][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 402.498729][ T5275] usb 2-1: Product: syz [ 402.504879][ T5275] usb 2-1: Manufacturer: syz [ 402.514128][ T5275] usb 2-1: SerialNumber: syz [ 402.767227][ T5274] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 402.982384][ T5274] usb 1-1: no configurations [ 403.021480][ T5274] usb 1-1: can't read configurations, error -22 [ 403.145856][ T5274] usb usb1-port1: attempt power cycle [ 403.311070][ T8659] netlink: 'syz.2.958': attribute type 29 has an invalid length. [ 403.336610][ T8659] netlink: 'syz.2.958': attribute type 29 has an invalid length. [ 403.364152][ T8659] netlink: 'syz.2.958': attribute type 29 has an invalid length. [ 403.482752][ T5275] usb 2-1: config 0 descriptor?? [ 403.496668][ T8638] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 403.521723][ T8646] loop4: detected capacity change from 0 to 40427 [ 403.545962][ T8646] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(2560) blocks(523776) [ 403.560832][ T8646] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 403.573927][ T8646] F2FS-fs (loop4): invalid crc value [ 403.577314][ T5274] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 403.594687][ T8646] F2FS-fs (loop4): Found nat_bits in checkpoint [ 403.647787][ T5274] usb 1-1: no configurations [ 403.652717][ T5274] usb 1-1: can't read configurations, error -22 [ 403.698306][ T8646] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 403.725872][ T8646] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 403.757233][ T8638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.770793][ T8638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.816079][ T5223] syz-executor: attempt to access beyond end of device [ 403.816079][ T5223] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 403.816476][ T5274] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 403.843344][ T5223] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 403.855052][ T5275] usb 2-1: USB disconnect, device number 17 [ 403.868361][ T5274] usb 1-1: no configurations [ 403.876772][ T5274] usb 1-1: can't read configurations, error -22 [ 403.883676][ T5274] usb usb1-port1: unable to enumerate USB device [ 404.387874][ T5274] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 404.596338][ T5274] usb 5-1: Using ep0 maxpacket: 32 [ 404.610172][ T5274] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 404.638389][ T5274] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 404.649997][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 404.664561][ T5274] usb 5-1: Product: syz [ 404.669335][ T5274] usb 5-1: Manufacturer: syz [ 404.673963][ T5274] usb 5-1: SerialNumber: syz [ 404.688108][ T5274] usb 5-1: config 0 descriptor?? [ 404.698183][ T8678] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 404.963550][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 405.811603][ T8698] netlink: 256 bytes leftover after parsing attributes in process `syz.0.969'. [ 406.283010][ T8704] netlink: 'syz.2.972': attribute type 29 has an invalid length. [ 406.481270][ T8704] netlink: 'syz.2.972': attribute type 29 has an invalid length. [ 406.493309][ T8704] netlink: 'syz.2.972': attribute type 29 has an invalid length. [ 407.227461][ T5312] usb 5-1: USB disconnect, device number 24 [ 408.996926][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 409.233665][ T8711] loop2: detected capacity change from 0 to 40427 [ 409.285352][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.352212][ T8711] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(2560) blocks(523776) [ 409.475362][ T8711] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 409.519732][ T8711] F2FS-fs (loop2): invalid crc value [ 409.603987][ T8711] F2FS-fs (loop2): Found nat_bits in checkpoint [ 409.767577][ T8711] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 409.796380][ T9] usb 4-1: config 0 has no interfaces? [ 409.801927][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 409.806596][ T8711] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 409.813123][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.838075][ T9] usb 4-1: config 0 descriptor?? [ 409.856921][ T8744] netlink: 'syz.4.984': attribute type 29 has an invalid length. [ 410.054163][ T8746] netlink: 'syz.4.984': attribute type 29 has an invalid length. [ 410.092825][ T8744] netlink: 'syz.4.984': attribute type 29 has an invalid length. [ 412.051967][ T25] usb 4-1: USB disconnect, device number 12 [ 412.644225][ T940] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 414.029392][ T940] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 414.055183][ T940] usb 5-1: config 0 has no interface number 0 [ 414.069815][ T940] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.088770][ T940] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.151401][ T940] usb 5-1: string descriptor 0 read error: -71 [ 414.169355][ T940] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 414.380624][ T940] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 414.381966][ T8786] netlink: 'syz.4.997': attribute type 29 has an invalid length. [ 414.405836][ T8786] netlink: 'syz.4.997': attribute type 29 has an invalid length. [ 414.533287][ T940] usb 5-1: config 0 descriptor?? [ 414.650911][ T8790] netlink: 'syz.4.997': attribute type 29 has an invalid length. [ 415.376761][ T940] usb 5-1: can't set config #0, error -71 [ 415.384564][ T940] usb 5-1: USB disconnect, device number 25 [ 415.598914][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 415.746484][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 416.092241][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.117149][ T9] usb 4-1: config 0 has no interfaces? [ 416.122680][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 416.165894][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.251681][ T9] usb 4-1: config 0 descriptor?? [ 418.506321][ T940] usb 4-1: USB disconnect, device number 13 [ 419.696175][ T5312] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 419.906459][ T5312] usb 2-1: Using ep0 maxpacket: 32 [ 419.924534][ T5312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 419.951379][ T8833] netlink: 'syz.2.1009': attribute type 29 has an invalid length. [ 419.990261][ T5312] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 420.009899][ T8833] netlink: 'syz.2.1009': attribute type 29 has an invalid length. [ 420.039632][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 420.068938][ T8834] netlink: 'syz.2.1009': attribute type 29 has an invalid length. [ 420.102649][ T5312] usb 2-1: Product: syz [ 420.126376][ T5312] usb 2-1: Manufacturer: syz [ 420.131054][ T5312] usb 2-1: SerialNumber: syz [ 420.168210][ T5312] usb 2-1: config 0 descriptor?? [ 420.184041][ T8829] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 420.500090][ T8829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.531653][ T8829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.308912][ T5312] usb 2-1: USB disconnect, device number 18 [ 424.191731][ T5312] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 424.644342][ T5312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.631446][ T5312] usb 3-1: config 0 has no interfaces? [ 425.639813][ T5312] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 425.649377][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.667020][ T5312] usb 3-1: config 0 descriptor?? [ 426.113263][ T25] usb 3-1: USB disconnect, device number 29 [ 426.215092][ T8876] netlink: 'syz.3.1022': attribute type 29 has an invalid length. [ 426.282026][ T8876] netlink: 'syz.3.1022': attribute type 29 has an invalid length. [ 426.323309][ T8876] netlink: 'syz.3.1022': attribute type 29 has an invalid length. [ 427.346658][ T5312] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 427.394279][ T8870] loop0: detected capacity change from 0 to 512 [ 427.437167][ T8870] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.476975][ T8870] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 427.551523][ T8870] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 427.596525][ T5312] usb 2-1: Using ep0 maxpacket: 32 [ 427.642207][ T5312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 427.657667][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 427.666864][ T8870] EXT4-fs (loop0): 1 truncate cleaned up [ 427.674267][ T5312] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 427.686402][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 427.693321][ T8870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.701785][ T5312] usb 2-1: Product: syz [ 427.711096][ T5312] usb 2-1: Manufacturer: syz [ 427.717457][ T5312] usb 2-1: SerialNumber: syz [ 427.728755][ T5312] usb 2-1: config 0 descriptor?? [ 427.735649][ T8883] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 427.765823][ T8870] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 427.780962][ T8870] overlayfs: failed to set xattr on upper [ 427.791385][ T8870] overlayfs: ...falling back to redirect_dir=nofollow. [ 427.798789][ T8870] overlayfs: ...falling back to index=off. [ 427.805988][ T8870] overlayfs: ...falling back to uuid=null. [ 428.068585][ T8903] net_ratelimit: 207 callbacks suppressed [ 428.068608][ T8903] dccp_close: ABORT with 227 bytes unread [ 428.295997][ T940] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 428.536808][ T940] usb 3-1: Using ep0 maxpacket: 32 [ 428.605963][ T940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.677758][ T940] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.771066][ T940] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 428.790734][ T940] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 428.800718][ T940] usb 3-1: Product: syz [ 428.805040][ T940] usb 3-1: Manufacturer: syz [ 428.844811][ T940] usb 3-1: SerialNumber: syz [ 428.897897][ T940] usb 3-1: config 0 descriptor?? [ 429.028563][ T5222] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /215/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 429.059092][ T5222] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /215/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 429.091204][ T5222] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 429.111923][ T5222] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /215/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 429.150930][ T5222] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /215/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 429.153900][ T5275] usb 3-1: USB disconnect, device number 30 [ 429.179923][ T5222] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 429.374907][ T5222] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /215/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 429.407010][ T5222] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /215/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 429.435445][ T5222] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 429.633864][ T5222] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /215/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 430.283010][ T5274] usb 2-1: USB disconnect, device number 19 [ 430.450532][ T8917] netlink: 'syz.3.1036': attribute type 29 has an invalid length. [ 430.517645][ T8917] netlink: 'syz.3.1036': attribute type 29 has an invalid length. [ 430.568945][ T8917] netlink: 'syz.3.1036': attribute type 29 has an invalid length. [ 435.467245][ T5222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.311732][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.453524][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.504670][ T8957] netlink: 'syz.2.1050': attribute type 29 has an invalid length. [ 436.533819][ T8957] netlink: 'syz.2.1050': attribute type 29 has an invalid length. [ 437.185663][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.418624][ T8957] netlink: 'syz.2.1050': attribute type 29 has an invalid length. [ 437.702559][ T8952] loop1: detected capacity change from 0 to 512 [ 437.757289][ T8952] EXT4-fs: Ignoring removed mblk_io_submit option [ 437.827719][ T8952] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 437.934239][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.021252][ T8952] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 438.089678][ T8952] EXT4-fs (loop1): 1 truncate cleaned up [ 438.101853][ T8952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.147079][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 438.157724][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 438.179573][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 438.189326][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 438.199218][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 438.207049][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 438.224059][ T8952] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 438.276878][ T8952] overlayfs: failed to set xattr on upper [ 438.282794][ T8952] overlayfs: ...falling back to redirect_dir=nofollow. [ 438.303178][ T8952] overlayfs: ...falling back to index=off. [ 438.310386][ T8952] overlayfs: ...falling back to uuid=null. [ 438.444695][ T81] bridge_slave_1: left allmulticast mode [ 438.469061][ T81] bridge_slave_1: left promiscuous mode [ 438.493033][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.536692][ T81] bridge_slave_0: left allmulticast mode [ 438.560458][ T81] bridge_slave_0: left promiscuous mode [ 438.588992][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.657072][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 438.801258][ T8277] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /23/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 438.837800][ T8277] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /23/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 438.871601][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 438.890739][ T9] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 438.900154][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.910789][ T8277] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 438.937031][ T5350] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 438.944689][ T9] usb 4-1: Product: syz [ 438.956390][ T9] usb 4-1: Manufacturer: syz [ 438.961540][ T9] usb 4-1: SerialNumber: syz [ 438.973466][ T9] usb 4-1: config 0 descriptor?? [ 438.979554][ T8277] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /23/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 439.012018][ T9] usb 4-1: no audio or video endpoints found [ 439.027613][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 439.035559][ T8277] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /23/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 439.106067][ T8277] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 439.155570][ T8277] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /23/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 439.176554][ T5350] usb 3-1: Using ep0 maxpacket: 16 [ 439.189671][ T5350] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 439.199099][ T5350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.212671][ T5350] usb 3-1: Product: syz [ 439.216985][ T8277] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /23/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 439.250507][ T5350] usb 3-1: Manufacturer: syz [ 439.255332][ T5350] usb 3-1: SerialNumber: syz [ 439.278799][ T5350] usb 3-1: config 0 descriptor?? [ 439.294641][ T5350] usb 3-1: no audio or video endpoints found [ 439.306586][ T5350] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 439.314350][ T8277] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 439.328000][ T5312] usb 4-1: USB disconnect, device number 14 [ 439.394473][ T8277] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /23/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 439.528052][ T5274] usb 3-1: USB disconnect, device number 31 [ 439.769123][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.785643][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.805810][ T81] bond0 (unregistering): Released all slaves [ 440.164567][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.172777][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.361810][ T5231] Bluetooth: hci0: command tx timeout [ 440.372827][ T47] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 440.574588][ T8277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.383843][ T81] hsr_slave_0: left promiscuous mode [ 441.417808][ T81] hsr_slave_1: left promiscuous mode [ 441.476735][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.484209][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.569895][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.596971][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.767675][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 441.778967][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.798745][ T47] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 442.426404][ T5231] Bluetooth: hci0: command tx timeout [ 442.515314][ T81] veth1_macvtap: left promiscuous mode [ 442.544592][ T81] veth0_macvtap: left promiscuous mode [ 442.571959][ T81] veth1_vlan: left promiscuous mode [ 442.606405][ T81] veth0_vlan: left promiscuous mode [ 442.814329][ T47] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 442.826940][ T47] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 442.835146][ T47] usb 4-1: Product: syz [ 442.840148][ T47] usb 4-1: Manufacturer: syz [ 442.844957][ T47] usb 4-1: SerialNumber: syz [ 442.851763][ T47] usb 4-1: config 0 descriptor?? [ 442.953662][ T47] usb 4-1: USB disconnect, device number 15 [ 444.483019][ T5231] Bluetooth: hci0: command tx timeout [ 444.803975][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.870241][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.881889][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.940990][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.117269][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 445.125586][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 446.557314][ T5231] Bluetooth: hci0: command tx timeout [ 447.002993][ T47] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 447.186809][ T5231] Bluetooth: hci2: command tx timeout [ 447.219577][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 447.234021][ T47] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 447.247396][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.255627][ T47] usb 3-1: Product: syz [ 447.256154][ T9055] loop3: detected capacity change from 0 to 512 [ 447.267636][ T47] usb 3-1: Manufacturer: syz [ 447.267711][ T9055] EXT4-fs: Ignoring removed mblk_io_submit option [ 447.272240][ T47] usb 3-1: SerialNumber: syz [ 447.293705][ T9055] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 447.328546][ T47] usb 3-1: config 0 descriptor?? [ 447.350432][ T9055] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 447.359943][ T47] usb 3-1: no audio or video endpoints found [ 447.372080][ T9055] EXT4-fs (loop3): 1 truncate cleaned up [ 447.378842][ T9055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.380235][ T47] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 447.417215][ T9055] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 447.424201][ T9055] overlayfs: failed to set xattr on upper [ 447.430017][ T9055] overlayfs: ...falling back to redirect_dir=nofollow. [ 447.437049][ T9055] overlayfs: ...falling back to index=off. [ 447.442875][ T9055] overlayfs: ...falling back to uuid=null. [ 447.464174][ T81] team0 (unregistering): Port device team_slave_1 removed [ 447.502864][ T81] team0 (unregistering): Port device team_slave_0 removed [ 447.615709][ T47] usb 3-1: USB disconnect, device number 32 [ 447.740099][ T8095] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /39/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 447.764263][ T8095] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /39/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 447.789694][ T8095] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 447.813678][ T8095] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /39/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 447.838885][ T8095] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /39/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 447.862300][ T8095] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 447.885718][ T8095] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /39/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 447.907363][ T8095] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /39/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 447.934500][ T8095] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 447.957271][ T8095] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /39/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 448.268483][ T9061] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1073'. [ 448.404299][ T8971] chnl_net:caif_netlink_parms(): no params data found [ 449.277025][ T5231] Bluetooth: hci2: command tx timeout [ 449.616369][ T9011] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 449.728004][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.736066][ T8971] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.743957][ T8971] bridge_slave_0: entered allmulticast mode [ 449.752247][ T8971] bridge_slave_0: entered promiscuous mode [ 449.778229][ T8095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.799750][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.816836][ T8971] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.826323][ T9011] usb 5-1: Using ep0 maxpacket: 16 [ 449.837772][ T9011] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 449.852035][ T8971] bridge_slave_1: entered allmulticast mode [ 449.856262][ T9011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.866325][ T9011] usb 5-1: Product: syz [ 449.870523][ T9011] usb 5-1: Manufacturer: syz [ 449.875821][ T9011] usb 5-1: SerialNumber: syz [ 449.884407][ T8971] bridge_slave_1: entered promiscuous mode [ 449.898641][ T9011] usb 5-1: config 0 descriptor?? [ 449.922783][ T9011] usb 5-1: no audio or video endpoints found [ 449.939199][ T9011] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 449.966375][ T9040] chnl_net:caif_netlink_parms(): no params data found [ 450.042091][ T8971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.113605][ T8971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.167253][ T25] usb 5-1: USB disconnect, device number 26 [ 450.240824][ T8971] team0: Port device team_slave_0 added [ 450.288984][ T8971] team0: Port device team_slave_1 added [ 450.411217][ T81] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.453460][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 450.464743][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 450.475756][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 450.497879][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 450.505884][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 450.507639][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.525020][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.525079][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 450.558925][ T8971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.618090][ T81] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.660308][ T9040] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.673753][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.684161][ T9040] bridge_slave_0: entered allmulticast mode [ 450.695867][ T9040] bridge_slave_0: entered promiscuous mode [ 450.704889][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.736520][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.791919][ T8971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.001687][ T81] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.346518][ T5239] Bluetooth: hci2: command tx timeout [ 451.386916][ T9011] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 451.485595][ T9040] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.553489][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.599886][ T9011] usb 3-1: Using ep0 maxpacket: 32 [ 451.655988][ T9040] bridge_slave_1: entered allmulticast mode [ 451.692206][ T9011] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 451.733247][ T9040] bridge_slave_1: entered promiscuous mode [ 451.777832][ T9011] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 451.844479][ T9011] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 451.914658][ T9011] usb 3-1: Product: syz [ 451.946617][ T9011] usb 3-1: Manufacturer: syz [ 451.963315][ T9011] usb 3-1: SerialNumber: syz [ 452.066156][ T9011] usb 3-1: config 0 descriptor?? [ 452.135692][ T9103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 452.482226][ T8971] hsr_slave_0: entered promiscuous mode [ 452.493978][ T8971] hsr_slave_1: entered promiscuous mode [ 452.517816][ T9103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.532645][ T8971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.543045][ T9103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.550866][ T8971] Cannot create hsr debugfs directory [ 452.598568][ T81] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.636524][ T5239] Bluetooth: hci3: command tx timeout [ 452.656441][ T9040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.685193][ T9040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.737585][ T25] usb 3-1: USB disconnect, device number 33 [ 452.821680][ T9040] team0: Port device team_slave_0 added [ 452.865455][ T9040] team0: Port device team_slave_1 added [ 452.950849][ T9040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.962956][ T9040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.008951][ T9040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.024010][ T9040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.037649][ T9040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.064560][ T9040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.248563][ T9040] hsr_slave_0: entered promiscuous mode [ 453.259172][ T9040] hsr_slave_1: entered promiscuous mode [ 453.282670][ T9040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.297849][ T9040] Cannot create hsr debugfs directory [ 453.427466][ T5239] Bluetooth: hci2: command tx timeout [ 453.491245][ T81] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.308837][ T81] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.552121][ T81] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.767710][ T5239] Bluetooth: hci3: command tx timeout [ 454.857483][ T81] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.212317][ T9096] chnl_net:caif_netlink_parms(): no params data found [ 455.625883][ T29] audit: type=1326 audit(1723809684.893:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.2.1089" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8a25799b9 code=0x0 [ 455.675175][ T81] bridge_slave_1: left allmulticast mode [ 455.680936][ T81] bridge_slave_1: left promiscuous mode [ 455.688028][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.888682][ T81] bridge_slave_0: left allmulticast mode [ 455.894385][ T81] bridge_slave_0: left promiscuous mode [ 455.920264][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.866515][ T5239] Bluetooth: hci3: command tx timeout [ 457.051117][ T81] bridge_slave_1: left allmulticast mode [ 457.086363][ T81] bridge_slave_1: left promiscuous mode [ 457.633255][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.273124][ T81] bridge_slave_0: left allmulticast mode [ 458.328513][ T81] bridge_slave_0: left promiscuous mode [ 458.342430][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.946450][ T5239] Bluetooth: hci3: command tx timeout [ 461.698825][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.720193][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.736800][ T81] bond0 (unregistering): Released all slaves [ 462.583520][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.645234][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.710191][ T81] bond0 (unregistering): Released all slaves [ 462.902113][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.913799][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.061524][ T9096] bridge_slave_0: entered allmulticast mode [ 463.084510][ T9096] bridge_slave_0: entered promiscuous mode [ 463.445702][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.454141][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.267212][ T9096] bridge_slave_1: entered allmulticast mode [ 464.295253][ T9096] bridge_slave_1: entered promiscuous mode [ 464.736349][ T9096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.767228][ T8971] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 464.807995][ T8971] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 464.848573][ T9096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.909562][ T8971] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 464.919737][ T8971] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 464.982768][ T9096] team0: Port device team_slave_0 added [ 465.037966][ T9096] team0: Port device team_slave_1 added [ 465.081398][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.089297][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.116906][ T9096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.157049][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.165885][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.192211][ T9096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.292519][ T9096] hsr_slave_0: entered promiscuous mode [ 465.299923][ T9096] hsr_slave_1: entered promiscuous mode [ 465.305994][ T9096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.314606][ T9096] Cannot create hsr debugfs directory [ 465.325796][ T81] hsr_slave_0: left promiscuous mode [ 465.331839][ T81] hsr_slave_1: left promiscuous mode [ 465.348622][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.356066][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.371251][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.381356][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.399382][ T81] hsr_slave_0: left promiscuous mode [ 465.405370][ T81] hsr_slave_1: left promiscuous mode [ 465.411988][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.419765][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.436482][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.444976][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.524379][ T81] veth1_macvtap: left promiscuous mode [ 465.530301][ T81] veth0_macvtap: left promiscuous mode [ 465.535934][ T81] veth1_vlan: left promiscuous mode [ 465.541971][ T81] veth0_vlan: left promiscuous mode [ 465.549241][ T81] veth1_macvtap: left promiscuous mode [ 465.554792][ T81] veth0_macvtap: left promiscuous mode [ 465.560773][ T81] veth1_vlan: left promiscuous mode [ 465.568155][ T81] veth0_vlan: left promiscuous mode [ 465.836475][ T5273] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 466.056332][ T5273] usb 3-1: Using ep0 maxpacket: 32 [ 466.076733][ T5273] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 466.098797][ T5273] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 466.108135][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 466.124506][ T5273] usb 3-1: Product: syz [ 466.128920][ T5273] usb 3-1: Manufacturer: syz [ 466.133602][ T5273] usb 3-1: SerialNumber: syz [ 466.147941][ T5273] usb 3-1: config 0 descriptor?? [ 466.172102][ T9208] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 466.228670][ T9215] loop4: detected capacity change from 0 to 512 [ 466.235322][ T9215] EXT4-fs: Ignoring removed mblk_io_submit option [ 466.244083][ T9215] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 466.265612][ T9215] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 466.280824][ T9215] EXT4-fs (loop4): 1 truncate cleaned up [ 466.287897][ T9215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.310702][ T9215] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 466.317941][ T9215] overlayfs: failed to set xattr on upper [ 466.323680][ T9215] overlayfs: ...falling back to redirect_dir=nofollow. [ 466.330640][ T9215] overlayfs: ...falling back to index=off. [ 466.336539][ T9215] overlayfs: ...falling back to uuid=null. [ 466.345291][ T81] team0 (unregistering): Port device team_slave_1 removed [ 466.394235][ T81] team0 (unregistering): Port device team_slave_0 removed [ 466.407838][ T9208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.424337][ T9208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.499870][ T5273] usb 3-1: USB disconnect, device number 34 [ 466.853572][ T5223] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /228/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 466.892894][ T5223] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /228/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 466.915921][ T5223] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 466.935995][ T5223] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /228/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 466.958162][ T5223] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /228/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 466.981359][ T5223] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 467.001406][ T5223] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /228/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 467.023026][ T5223] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /228/file0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 467.058622][ T5223] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=61441, size=1024 fake=0 [ 467.081174][ T5223] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /228/file0/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=61441, size=1024 fake=0 [ 467.196189][ T9220] tipc: Failed to remove unknown binding: 66,1,1/0:1975878910/1975878912 [ 467.205944][ T9220] tipc: Failed to remove unknown binding: 66,1,1/0:1975878910/1975878912 [ 467.421510][ T81] team0 (unregistering): Port device team_slave_1 removed [ 467.465917][ T81] team0 (unregistering): Port device team_slave_0 removed [ 467.976002][ T9040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 468.021575][ T9040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 468.032742][ T9040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 468.047718][ T5223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.085633][ T9040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 468.183441][ T8971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.282029][ T8971] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.382123][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.389295][ T1062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.548640][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.555793][ T1062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.715934][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.726170][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.738013][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.747915][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.755562][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 468.764383][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.022878][ T9040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.104229][ T9040] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.200605][ T9096] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.219664][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.226855][ T5532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.269480][ T9096] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.306504][ T9096] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.338300][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.345503][ T5532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.372009][ T9096] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 469.428117][ T8971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.474993][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.547542][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.578972][ T9040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.591259][ T9040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.634480][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.652898][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 469.739898][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.824910][ T8971] veth0_vlan: entered promiscuous mode [ 470.134665][ T9040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.171758][ T9096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.193379][ T8971] veth1_vlan: entered promiscuous mode [ 470.212902][ T81] bridge_slave_1: left allmulticast mode [ 470.216769][ T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 470.220748][ T81] bridge_slave_1: left promiscuous mode [ 470.232943][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.242350][ T81] bridge_slave_0: left allmulticast mode [ 470.255083][ T81] bridge_slave_0: left promiscuous mode [ 470.261576][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.411943][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 470.428884][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 470.451233][ T25] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 470.471019][ T25] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 470.481234][ T25] usb 3-1: Product: syz [ 470.485438][ T25] usb 3-1: Manufacturer: syz [ 470.490191][ T25] usb 3-1: SerialNumber: syz [ 470.511825][ T25] usb 3-1: config 0 descriptor?? [ 470.517661][ T9264] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 470.684440][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.695763][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.706800][ T81] bond0 (unregistering): Released all slaves [ 470.719476][ T9234] chnl_net:caif_netlink_parms(): no params data found [ 470.802924][ T9096] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.814192][ T5350] usb 3-1: USB disconnect, device number 35 [ 470.868882][ T5231] Bluetooth: hci1: command tx timeout [ 470.986974][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.994147][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.086555][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.093695][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.150733][ T8971] veth0_macvtap: entered promiscuous mode [ 471.165650][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.175902][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.186968][ T9234] bridge_slave_0: entered allmulticast mode [ 471.194113][ T9234] bridge_slave_0: entered promiscuous mode [ 471.210358][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.219837][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.228337][ T9234] bridge_slave_1: entered allmulticast mode [ 471.235404][ T9234] bridge_slave_1: entered promiscuous mode [ 471.256816][ T8971] veth1_macvtap: entered promiscuous mode [ 471.270565][ T81] hsr_slave_0: left promiscuous mode [ 471.279317][ T81] hsr_slave_1: left promiscuous mode [ 471.288778][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.301804][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.312511][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.325998][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.377576][ T81] veth1_macvtap: left promiscuous mode [ 471.383156][ T81] veth0_macvtap: left promiscuous mode [ 471.400983][ T81] veth1_vlan: left promiscuous mode [ 471.416521][ T81] veth0_vlan: left promiscuous mode [ 471.944328][ T81] team0 (unregistering): Port device team_slave_1 removed [ 472.009788][ T81] team0 (unregistering): Port device team_slave_0 removed [ 472.607148][ T9234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.618060][ T9040] veth0_vlan: entered promiscuous mode [ 472.649603][ T9234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.693018][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.706826][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.719429][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.763038][ T9234] team0: Port device team_slave_0 added [ 472.781044][ T9040] veth1_vlan: entered promiscuous mode [ 472.804294][ T9234] team0: Port device team_slave_1 added [ 472.819193][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.831821][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.845540][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.909892][ T8971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.934589][ T8971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.943884][ T8971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.955739][ T8971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.956929][ T5231] Bluetooth: hci1: command tx timeout [ 472.975255][ T9040] veth0_macvtap: entered promiscuous mode [ 472.990676][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.011044][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.043644][ T9234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.064775][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.073684][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.105951][ T9234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.132356][ T9040] veth1_macvtap: entered promiscuous mode [ 473.200910][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.218038][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.233029][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.249897][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.263935][ T9040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.333873][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.355385][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.366102][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.383171][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.395125][ T9040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.423403][ T9234] hsr_slave_0: entered promiscuous mode [ 473.432715][ T9234] hsr_slave_1: entered promiscuous mode [ 473.443006][ T9096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.458517][ T9040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.468917][ T9040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.477820][ T9040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.486732][ T9040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.577746][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.585693][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.733656][ T5530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.745900][ T5530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.849061][ T9096] veth0_vlan: entered promiscuous mode [ 473.878262][ T5530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.886122][ T5530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.987249][ T9096] veth1_vlan: entered promiscuous mode [ 474.602634][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.739909][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.977902][ T9096] veth0_macvtap: entered promiscuous mode [ 475.029241][ T5231] Bluetooth: hci1: command tx timeout [ 475.051575][ T9096] veth1_macvtap: entered promiscuous mode [ 475.331287][ T9381] netlink: 'syz.1.1063': attribute type 29 has an invalid length. [ 475.409710][ T9384] netlink: 'syz.1.1063': attribute type 29 has an invalid length. [ 475.474790][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.501889][ T9391] tipc: Failed to remove unknown binding: 66,1,1/0:2813439900/2813439902 [ 475.504661][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.530631][ T9391] tipc: Failed to remove unknown binding: 66,1,1/0:2813439900/2813439902 [ 475.541747][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.559704][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.581046][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.613077][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.656924][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.664993][ T9389] netlink: 'syz.1.1063': attribute type 29 has an invalid length. [ 475.680664][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.866434][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.884015][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.931704][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.967232][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.107494][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.283577][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.617448][ T9404] fuse: Unknown parameter 'group_id00000000000000000000' [ 476.660954][ T9096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.746308][ T9096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.796899][ T9096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.854961][ T9096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.100613][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 477.116901][ T5231] Bluetooth: hci1: command tx timeout [ 477.134071][ T9234] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 477.185818][ T9234] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 477.232895][ T9234] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 477.265285][ T9234] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 477.320793][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.338851][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.491477][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.533210][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.661334][ T9234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.710875][ T9234] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.629300][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.636607][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.324974][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.332211][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.806499][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 479.947396][ T9448] netlink: 'syz.3.1123': attribute type 29 has an invalid length. [ 479.984481][ T9448] netlink: 'syz.3.1123': attribute type 29 has an invalid length. [ 480.018248][ T9448] netlink: 'syz.3.1123': attribute type 29 has an invalid length. [ 480.068906][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 480.109704][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.298593][ T9459] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1125'. [ 480.391660][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 480.406026][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 480.418578][ T9] usb 1-1: Product: syz [ 480.422906][ T9] usb 1-1: Manufacturer: syz [ 480.429239][ T9] usb 1-1: SerialNumber: syz [ 480.568602][ T9] usb 1-1: config 0 descriptor?? [ 481.753911][ T9] usb 1-1: USB disconnect, device number 22 [ 482.001125][ T9234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.455139][ T9494] fuse: Unknown parameter 'group_id00000000000000000000' [ 482.468117][ T9234] veth0_vlan: entered promiscuous mode [ 482.495990][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 482.561880][ T9234] veth1_vlan: entered promiscuous mode [ 482.605969][ T9500] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1130'. [ 482.627854][ T9234] veth0_macvtap: entered promiscuous mode [ 482.652657][ T9234] veth1_macvtap: entered promiscuous mode [ 482.683634][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.705475][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.724514][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.736408][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.766318][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.782232][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.792707][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.809642][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.822506][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.846633][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.879133][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.924427][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.951392][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.981737][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.013121][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.075234][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.099674][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.122672][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.227595][ T9234] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.264734][ T9234] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.302199][ T9234] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.318083][ T9234] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.977617][ T5530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.985492][ T5530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.070526][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.512193][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.638218][ T5274] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 485.866504][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 485.889050][ T5274] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.911793][ T5274] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 485.939406][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 485.963829][ T5274] usb 3-1: Product: syz [ 485.976480][ T5274] usb 3-1: Manufacturer: syz [ 485.996076][ T5274] usb 3-1: SerialNumber: syz [ 486.022293][ T5274] usb 3-1: config 0 descriptor?? [ 486.261041][ T5274] usb 3-1: USB disconnect, device number 36 [ 488.095112][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 491.600016][ T5274] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 491.742747][ T9602] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1153'. [ 492.581672][ T5274] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 492.598017][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.636087][ T5274] usb 4-1: config 0 descriptor?? [ 492.655533][ T5274] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 493.164213][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 494.134197][ T5274] gspca_sunplus: reg_w_riv err -110 [ 494.286041][ T5274] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 494.306383][ T5274] usb 4-1: USB disconnect, device number 16 [ 501.220606][ T5350] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 501.590729][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.608485][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.222111][ T5350] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 502.242972][ T5350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.270494][ T5350] usb 5-1: config 0 descriptor?? [ 502.289456][ T5350] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 502.806417][ T5350] gspca_sunplus: reg_w_riv err -110 [ 502.811765][ T5350] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 504.325022][ T9704] loop2: detected capacity change from 0 to 128 [ 504.606769][ T5350] usb 5-1: USB disconnect, device number 27 [ 504.771741][ T9705] netlink: 'syz.2.1186': attribute type 1 has an invalid length. [ 504.779954][ T9705] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.1186'. [ 504.791547][ T9705] netlink: 'syz.2.1186': attribute type 1 has an invalid length. [ 504.799387][ T9705] netlink: 'syz.2.1186': attribute type 2 has an invalid length. [ 504.807189][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 506.501480][ T9703] loop3: detected capacity change from 0 to 32768 [ 506.808488][ T9703] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 507.067046][ T9551] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 507.283879][ T9551] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.316369][ T9551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 507.352761][ T9551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 507.371971][ T9551] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 507.416638][ T9551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.485430][ T9551] usb 3-1: config 0 descriptor?? [ 507.501291][ T29] audit: type=1326 audit(1723809736.773:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.4.1201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f539ab799b9 code=0x0 [ 507.505549][ T9745] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 507.558458][ T9551] gspca_main: spca561-2.14.0 probing abcd:cdee [ 507.594238][ T9703] XFS (loop3): Ending clean mount [ 507.607070][ T9756] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 507.620709][ T29] audit: type=1326 audit(1723809736.893:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.4.1201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f539ab799b9 code=0x0 [ 507.804146][ T9745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1199'. [ 507.884556][ T9096] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 508.095450][ T9551] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 508.125014][ T9551] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 508.161087][ T9551] usb 3-1: MIDIStreaming interface descriptor not found [ 509.455300][ T9762] loop0: detected capacity change from 0 to 32768 [ 509.483367][ T9770] loop3: detected capacity change from 0 to 4096 [ 509.496561][ T9762] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1205 (9762) [ 509.533925][ T9770] ======================================================= [ 509.533925][ T9770] WARNING: The mand mount option has been deprecated and [ 509.533925][ T9770] and is ignored by this kernel. Remove the mand [ 509.533925][ T9770] option from the mount to silence this warning. [ 509.533925][ T9770] ======================================================= [ 509.628364][ T9762] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 509.708908][ T9762] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 509.742900][ T9770] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 509.749973][ T9011] usb 3-1: USB disconnect, device number 37 [ 509.762950][ T9762] BTRFS info (device loop0): disk space caching is enabled [ 509.804558][ T9762] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 510.065974][ T9762] BTRFS info (device loop0): rebuilding free space tree [ 510.144365][ T9770] ntfs3: loop3: Failed to load $Extend (-22). [ 510.204843][ T9770] ntfs3: loop3: Failed to initialize $Extend. [ 510.297621][ T9762] BTRFS info (device loop0): disabling free space tree [ 510.305335][ T9762] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 510.367961][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 510.382830][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 510.391989][ T9762] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 510.402650][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 510.422390][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 510.430739][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 510.438072][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 510.530784][ T9797] syz.2.1210 uses obsolete (PF_INET,SOCK_PACKET) [ 510.899825][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 510.944566][ T8971] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 511.125821][ T9800] chnl_net:caif_netlink_parms(): no params data found [ 511.295927][ T9814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1214'. [ 511.465698][ T9689] coredump: 50(syz.3.1177): written to core: VMAs: 33, size 80441344; core: 59802510 bytes, pos 80449536 [ 511.674112][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.716338][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.724745][ T9800] bridge_slave_0: entered allmulticast mode [ 511.768182][ T9800] bridge_slave_0: entered promiscuous mode [ 512.027827][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.066614][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.116610][ T9800] bridge_slave_1: entered allmulticast mode [ 512.123719][ T9800] bridge_slave_1: entered promiscuous mode [ 512.308716][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.371424][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 512.415943][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.456469][ T9843] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 512.466788][ T5231] Bluetooth: hci5: command tx timeout [ 512.516051][ T29] audit: type=1326 audit(1723809741.783:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9842 comm="syz.2.1223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8a25799b9 code=0x0 [ 512.580480][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 512.617720][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 512.652108][ T9] usb 5-1: config 0 has no interface number 0 [ 512.676582][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 512.733787][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 512.763761][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 512.766442][ T9800] team0: Port device team_slave_0 added [ 512.783267][ T9849] netlink: 'syz.2.1225': attribute type 6 has an invalid length. [ 512.796351][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 512.825118][ T9] usb 5-1: Product: syz [ 512.830694][ T9800] team0: Port device team_slave_1 added [ 512.837059][ T9849] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1225'. [ 512.838038][ T9] usb 5-1: SerialNumber: syz [ 512.901991][ T9] usb 5-1: config 0 descriptor?? [ 512.936151][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 512.992883][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input9 [ 513.056726][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.063901][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.089812][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.236664][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.259110][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 513.266648][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 513.273857][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 513.281065][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 513.288217][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 513.295374][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 513.302524][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 513.309680][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 513.316810][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 513.323995][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 513.341755][ T9] usb 5-1: USB disconnect, device number 28 [ 513.341798][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 513.407091][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.438848][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 513.465382][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.538829][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.780416][ T9800] hsr_slave_0: entered promiscuous mode [ 513.799223][ T9800] hsr_slave_1: entered promiscuous mode [ 513.819828][ T9800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.846334][ T9800] Cannot create hsr debugfs directory [ 514.300698][ T5274] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 514.385991][ T9800] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.499709][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 514.546398][ T5239] Bluetooth: hci5: command tx timeout [ 514.555910][ T5274] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 514.566546][ T5274] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 514.578544][ T5274] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 514.590050][ T5274] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 514.598996][ T9800] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.600209][ T5274] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.623521][ T5274] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 514.639539][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.884288][ T9800] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.938786][ T5274] usb 3-1: usb_control_msg returned -32 [ 514.952504][ T5274] usbtmc 3-1:16.0: can't read capabilities [ 515.080476][ T9800] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.199180][ T81] bridge_slave_1: left allmulticast mode [ 515.218475][ T81] bridge_slave_1: left promiscuous mode [ 515.248695][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.285612][ T81] bridge_slave_0: left allmulticast mode [ 515.296010][ T81] bridge_slave_0: left promiscuous mode [ 515.314090][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.853671][ T9913] kvm: pic: single mode not supported [ 515.853778][ T9913] kvm: pic: level sensitive irq not supported [ 515.855428][ T9901] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 515.886393][ T9011] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 515.908672][ T9873] binder: 9872:9873 ioctl 4018620d 0 returned -22 [ 516.077180][ T9011] usb 4-1: Using ep0 maxpacket: 16 [ 516.084682][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.088198][ T9011] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.138830][ T9011] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.138853][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.158303][ T9011] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 516.174187][ T9011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.185694][ T9011] usb 4-1: config 0 descriptor?? [ 516.211146][ T81] bond0 (unregistering): Released all slaves [ 516.278424][ T8] usb 3-1: USB disconnect, device number 38 [ 516.372457][ T9800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 516.462107][ T9800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 516.483395][ T9800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 516.514903][ T9800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 516.545717][ T9925] kvm: pic: level sensitive irq not supported [ 516.546084][ T9925] kvm: pic: level sensitive irq not supported [ 516.625188][ T81] hsr_slave_0: left promiscuous mode [ 516.626477][ T5239] Bluetooth: hci5: command tx timeout [ 516.646006][ T81] hsr_slave_1: left promiscuous mode [ 516.652370][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.665919][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.695806][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.716271][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.759826][ T81] veth1_macvtap: left promiscuous mode [ 516.765411][ T81] veth0_macvtap: left promiscuous mode [ 516.779484][ T81] veth1_vlan: left promiscuous mode [ 516.785191][ T81] veth0_vlan: left promiscuous mode [ 517.641982][ T81] team0 (unregistering): Port device team_slave_1 removed [ 517.688555][ T9551] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 517.699002][ T81] team0 (unregistering): Port device team_slave_0 removed [ 517.880934][ T9551] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.900247][ T9551] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 517.910090][ T9551] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.948298][ T9551] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.965925][ T9551] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.980092][ T9551] usb 1-1: Product: syz [ 517.984339][ T9551] usb 1-1: Manufacturer: syz [ 517.998743][ T9551] usb 1-1: SerialNumber: syz [ 518.096398][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 518.257235][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.301591][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 518.333512][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 518.334453][ T9800] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.348753][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 518.379081][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 518.413927][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.421086][ T1062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.431173][ T9945] libceph: resolve '0..' (ret=-3): failed [ 518.437203][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 518.458969][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 518.477806][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.545220][ T5530] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.552418][ T5530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.709231][ T5239] Bluetooth: hci5: command tx timeout [ 518.726796][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 518.806009][ T5273] usb 4-1: USB disconnect, device number 17 [ 518.826290][ T9] usbtmc 5-1:16.0: can't read capabilities [ 518.959276][ T9943] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 519.010196][ T9] usb 5-1: USB disconnect, device number 29 [ 519.474046][ T9800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.645415][ T9800] veth0_vlan: entered promiscuous mode [ 519.724953][ T9800] veth1_vlan: entered promiscuous mode [ 519.813943][ T9800] veth0_macvtap: entered promiscuous mode [ 519.843894][ T9800] veth1_macvtap: entered promiscuous mode [ 519.890803][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.902275][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.915753][ T9975] ------------[ cut here ]------------ [ 519.921867][ T9975] WARNING: CPU: 1 PID: 9975 at include/linux/memcontrol.h:373 folio_memcg+0x111/0x220 [ 519.931693][ T9975] Modules linked in: [ 519.935725][ T9975] CPU: 1 UID: 0 PID: 9975 Comm: syz.3.1267 Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 519.946429][ T9975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 519.956842][ T9975] RIP: 0010:folio_memcg+0x111/0x220 [ 519.962144][ T9975] Code: 10 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 e2 2f f8 ff 48 8b 1b 48 89 d8 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 90 <0f> 0b 90 eb ce 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 55 ff ff ff [ 519.982092][ T9975] RSP: 0018:ffffc9001521e9e0 EFLAGS: 00010246 [ 519.988577][ T9975] RAX: 0000000000000000 RBX: ffff88802be57b00 RCX: 0000000080000000 [ 519.997047][ T9975] RDX: 0000000000000000 RSI: ffffffff8c0adfc0 RDI: ffffffff8c60a8c0 [ 520.005129][ T9975] RBP: ffffea0001450008 R08: ffffffff9018c5af R09: 1ffffffff20318b5 [ 520.013253][ T9975] R10: dffffc0000000000 R11: fffffbfff20318b6 R12: dffffc0000000000 [ 520.021674][ T9975] R13: 0000000000400018 R14: ffffea0001450000 R15: ffffea0001450030 [ 520.029969][ T9975] FS: 00007f98c669f6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 520.038998][ T9975] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.045621][ T9975] CR2: 000000110c3fd4dd CR3: 000000005c754000 CR4: 00000000003506f0 [ 520.053665][ T9975] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 520.061720][ T9975] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 520.069866][ T9975] Call Trace: [ 520.073173][ T9975] [ 520.076117][ T9975] ? __warn+0x163/0x4e0 [ 520.080351][ T9975] ? folio_memcg+0x111/0x220 [ 520.084979][ T9975] ? report_bug+0x2b3/0x500 [ 520.089548][ T9975] ? folio_memcg+0x111/0x220 [ 520.094156][ T9975] ? handle_bug+0x60/0x90 [ 520.098559][ T9975] ? exc_invalid_op+0x1a/0x50 [ 520.103281][ T9975] ? asm_exc_invalid_op+0x1a/0x20 [ 520.108429][ T9975] ? folio_memcg+0x111/0x220 [ 520.113058][ T9975] split_page_memcg+0x58/0x3f0 [ 520.117894][ T9975] ? split_page+0x205/0x230 [ 520.122759][ T9975] __vmalloc_node_range_noprof+0xa63/0x1400 [ 520.128993][ T9975] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 520.135365][ T9975] ? rcu_is_watching+0x15/0xb0 [ 520.140196][ T9975] ? trace_kmalloc+0x1f/0xd0 [ 520.144809][ T9975] ? __kmalloc_node_noprof+0x247/0x440 [ 520.150419][ T9975] ? __kvmalloc_node_noprof+0x72/0x1b0 [ 520.155911][ T9975] __kvmalloc_node_noprof+0x142/0x1b0 [ 520.161363][ T9975] ? hash_ipmark_create+0x410/0x1190 [ 520.166722][ T9975] hash_ipmark_create+0x410/0x1190 [ 520.171865][ T9975] ? __nla_parse+0x40/0x60 [ 520.176353][ T9975] ? __pfx_hash_ipmark_create+0x10/0x10 [ 520.181920][ T9975] ip_set_create+0xa5c/0x1900 [ 520.186662][ T9975] ? ip_set_create+0x45e/0x1900 [ 520.191536][ T9975] ? __pfx___mutex_trylock_common+0x2/0x10 [ 520.197438][ T9975] ? __pfx_ip_set_create+0x10/0x10 [ 520.202614][ T9975] ? trace_contention_end+0x3c/0x120 [ 520.207987][ T9975] ? nfnetlink_rcv_msg+0x225/0x1180 [ 520.213234][ T9975] nfnetlink_rcv_msg+0xbec/0x1180 [ 520.218344][ T9975] ? nfnetlink_rcv_msg+0x225/0x1180 [ 520.224194][ T9975] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 520.229889][ T9975] ? stack_trace_save+0x118/0x1d0 [ 520.234982][ T9975] ? dev_hard_start_xmit+0x27a/0x7e0 [ 520.240374][ T9975] ? __dev_queue_xmit+0x1b63/0x3e90 [ 520.245608][ T9975] ? __netlink_deliver_tap+0x54d/0x7c0 [ 520.251168][ T9975] ? netlink_deliver_tap+0x19d/0x1b0 [ 520.256555][ T9975] ? netlink_unicast+0x7c4/0x990 [ 520.261539][ T9975] ? netlink_sendmsg+0x8e4/0xcb0 [ 520.266569][ T9975] ? __sock_sendmsg+0x221/0x270 [ 520.271452][ T9975] ? ____sys_sendmsg+0x525/0x7d0 [ 520.276487][ T9975] ? __sys_sendmsg+0x298/0x390 [ 520.281300][ T9975] netlink_rcv_skb+0x1e3/0x430 [ 520.286103][ T9975] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 520.291610][ T9975] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.296968][ T9975] ? apparmor_capable+0x13b/0x1b0 [ 520.302039][ T9975] ? bpf_lsm_capable+0x9/0x10 [ 520.306766][ T9975] ? security_capable+0x90/0xb0 [ 520.311643][ T9975] nfnetlink_rcv+0x297/0x2ad0 [ 520.316439][ T9975] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 520.322201][ T9975] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.327701][ T9975] ? __dev_queue_xmit+0x1763/0x3e90 [ 520.333188][ T9975] ? kasan_save_track+0x51/0x80 [ 520.338128][ T9975] ? do_syscall_64+0xf3/0x230 [ 520.342847][ T9975] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 520.348015][ T9975] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.353155][ T9975] ? __pfx___dev_queue_xmit+0x10/0x10 [ 520.358587][ T9975] ? ref_tracker_free+0x643/0x7e0 [ 520.363625][ T9975] ? __asan_memcpy+0x40/0x70 [ 520.368261][ T9975] ? __pfx_ref_tracker_free+0x10/0x10 [ 520.373651][ T9975] ? netlink_deliver_tap+0x2e/0x1b0 [ 520.378904][ T9975] ? skb_clone+0x240/0x390 [ 520.383353][ T9975] ? __pfx_lock_release+0x10/0x10 [ 520.388626][ T9975] ? __netlink_deliver_tap+0x77e/0x7c0 [ 520.394161][ T9975] ? netlink_deliver_tap+0x2e/0x1b0 [ 520.399497][ T9975] netlink_unicast+0x7f6/0x990 [ 520.404308][ T9975] ? __pfx_netlink_unicast+0x10/0x10 [ 520.409741][ T9975] ? __virt_addr_valid+0x183/0x530 [ 520.414873][ T9975] ? __check_object_size+0x49c/0x900 [ 520.420288][ T9975] ? bpf_lsm_netlink_send+0x9/0x10 [ 520.425948][ T9975] netlink_sendmsg+0x8e4/0xcb0 [ 520.431165][ T9975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.436540][ T9975] ? __import_iovec+0x536/0x820 [ 520.441412][ T9975] ? aa_sock_msg_perm+0x91/0x160 [ 520.446442][ T9975] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 520.451776][ T9975] ? security_socket_sendmsg+0x87/0xb0 [ 520.457324][ T9975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.462701][ T9975] __sock_sendmsg+0x221/0x270 [ 520.467694][ T9975] ____sys_sendmsg+0x525/0x7d0 [ 520.472489][ T9975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.477862][ T9975] __sys_sendmsg+0x298/0x390 [ 520.482521][ T9975] ? __pfx___sys_sendmsg+0x10/0x10 [ 520.487731][ T9975] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 520.494131][ T9975] ? do_syscall_64+0x100/0x230 [ 520.499001][ T9975] ? do_syscall_64+0xb6/0x230 [ 520.503725][ T9975] do_syscall_64+0xf3/0x230 [ 520.508290][ T9975] ? clear_bhb_loop+0x35/0x90 [ 520.512993][ T9975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.518987][ T9975] RIP: 0033:0x7f98c59799b9 [ 520.523439][ T9975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.543576][ T9975] RSP: 002b:00007f98c669f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.552351][ T9975] RAX: ffffffffffffffda RBX: 00007f98c5b16058 RCX: 00007f98c59799b9 [ 520.560387][ T9975] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 000000000000000b [ 520.568430][ T9975] RBP: 00007f98c59e78d8 R08: 0000000000000000 R09: 0000000000000000 [ 520.576529][ T9975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.584565][ T9975] R13: 0000000000000000 R14: 00007f98c5b16058 R15: 00007ffc3089b568 [ 520.592611][ T9975] [ 520.595661][ T9975] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 520.602935][ T9975] CPU: 1 UID: 0 PID: 9975 Comm: syz.3.1267 Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 520.613124][ T9975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 520.623261][ T9975] Call Trace: [ 520.626543][ T9975] [ 520.629473][ T9975] dump_stack_lvl+0x241/0x360 [ 520.634164][ T9975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.639370][ T9975] ? __pfx__printk+0x10/0x10 [ 520.643997][ T9975] ? vscnprintf+0x5d/0x90 [ 520.648352][ T9975] panic+0x349/0x870 [ 520.652283][ T9975] ? __warn+0x172/0x4e0 [ 520.656441][ T9975] ? __pfx_panic+0x10/0x10 [ 520.660906][ T9975] __warn+0x346/0x4e0 [ 520.664881][ T9975] ? folio_memcg+0x111/0x220 [ 520.669469][ T9975] report_bug+0x2b3/0x500 [ 520.673799][ T9975] ? folio_memcg+0x111/0x220 [ 520.678391][ T9975] handle_bug+0x60/0x90 [ 520.682566][ T9975] exc_invalid_op+0x1a/0x50 [ 520.687073][ T9975] asm_exc_invalid_op+0x1a/0x20 [ 520.691923][ T9975] RIP: 0010:folio_memcg+0x111/0x220 [ 520.697123][ T9975] Code: 10 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 e2 2f f8 ff 48 8b 1b 48 89 d8 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 90 <0f> 0b 90 eb ce 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 55 ff ff ff [ 520.716898][ T9975] RSP: 0018:ffffc9001521e9e0 EFLAGS: 00010246 [ 520.722965][ T9975] RAX: 0000000000000000 RBX: ffff88802be57b00 RCX: 0000000080000000 [ 520.731018][ T9975] RDX: 0000000000000000 RSI: ffffffff8c0adfc0 RDI: ffffffff8c60a8c0 [ 520.739007][ T9975] RBP: ffffea0001450008 R08: ffffffff9018c5af R09: 1ffffffff20318b5 [ 520.746981][ T9975] R10: dffffc0000000000 R11: fffffbfff20318b6 R12: dffffc0000000000 [ 520.754968][ T9975] R13: 0000000000400018 R14: ffffea0001450000 R15: ffffea0001450030 [ 520.762964][ T9975] split_page_memcg+0x58/0x3f0 [ 520.767744][ T9975] ? split_page+0x205/0x230 [ 520.772250][ T9975] __vmalloc_node_range_noprof+0xa63/0x1400 [ 520.778161][ T9975] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 520.784525][ T9975] ? rcu_is_watching+0x15/0xb0 [ 520.789296][ T9975] ? trace_kmalloc+0x1f/0xd0 [ 520.793890][ T9975] ? __kmalloc_node_noprof+0x247/0x440 [ 520.799358][ T9975] ? __kvmalloc_node_noprof+0x72/0x1b0 [ 520.804823][ T9975] __kvmalloc_node_noprof+0x142/0x1b0 [ 520.810193][ T9975] ? hash_ipmark_create+0x410/0x1190 [ 520.815481][ T9975] hash_ipmark_create+0x410/0x1190 [ 520.820593][ T9975] ? __nla_parse+0x40/0x60 [ 520.825003][ T9975] ? __pfx_hash_ipmark_create+0x10/0x10 [ 520.830543][ T9975] ip_set_create+0xa5c/0x1900 [ 520.835226][ T9975] ? ip_set_create+0x45e/0x1900 [ 520.840112][ T9975] ? __pfx___mutex_trylock_common+0x2/0x10 [ 520.845918][ T9975] ? __pfx_ip_set_create+0x10/0x10 [ 520.851027][ T9975] ? trace_contention_end+0x3c/0x120 [ 520.856329][ T9975] ? nfnetlink_rcv_msg+0x225/0x1180 [ 520.861533][ T9975] nfnetlink_rcv_msg+0xbec/0x1180 [ 520.866578][ T9975] ? nfnetlink_rcv_msg+0x225/0x1180 [ 520.871790][ T9975] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 520.877251][ T9975] ? stack_trace_save+0x118/0x1d0 [ 520.882290][ T9975] ? dev_hard_start_xmit+0x27a/0x7e0 [ 520.887569][ T9975] ? __dev_queue_xmit+0x1b63/0x3e90 [ 520.892760][ T9975] ? __netlink_deliver_tap+0x54d/0x7c0 [ 520.898229][ T9975] ? netlink_deliver_tap+0x19d/0x1b0 [ 520.903520][ T9975] ? netlink_unicast+0x7c4/0x990 [ 520.908459][ T9975] ? netlink_sendmsg+0x8e4/0xcb0 [ 520.913398][ T9975] ? __sock_sendmsg+0x221/0x270 [ 520.918250][ T9975] ? ____sys_sendmsg+0x525/0x7d0 [ 520.923183][ T9975] ? __sys_sendmsg+0x298/0x390 [ 520.927966][ T9975] netlink_rcv_skb+0x1e3/0x430 [ 520.932736][ T9975] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 520.938200][ T9975] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.943502][ T9975] ? apparmor_capable+0x13b/0x1b0 [ 520.948538][ T9975] ? bpf_lsm_capable+0x9/0x10 [ 520.953215][ T9975] ? security_capable+0x90/0xb0 [ 520.958072][ T9975] nfnetlink_rcv+0x297/0x2ad0 [ 520.962753][ T9975] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 520.968474][ T9975] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.973582][ T9975] ? __dev_queue_xmit+0x1763/0x3e90 [ 520.978787][ T9975] ? kasan_save_track+0x51/0x80 [ 520.983642][ T9975] ? do_syscall_64+0xf3/0x230 [ 520.988323][ T9975] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 520.993436][ T9975] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.998552][ T9975] ? __pfx___dev_queue_xmit+0x10/0x10 [ 521.003935][ T9975] ? ref_tracker_free+0x643/0x7e0 [ 521.009000][ T9975] ? __asan_memcpy+0x40/0x70 [ 521.013588][ T9975] ? __pfx_ref_tracker_free+0x10/0x10 [ 521.018969][ T9975] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.024167][ T9975] ? skb_clone+0x240/0x390 [ 521.028580][ T9975] ? __pfx_lock_release+0x10/0x10 [ 521.033607][ T9975] ? __netlink_deliver_tap+0x77e/0x7c0 [ 521.039075][ T9975] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.044278][ T9975] netlink_unicast+0x7f6/0x990 [ 521.049055][ T9975] ? __pfx_netlink_unicast+0x10/0x10 [ 521.054351][ T9975] ? __virt_addr_valid+0x183/0x530 [ 521.059469][ T9975] ? __check_object_size+0x49c/0x900 [ 521.064758][ T9975] ? bpf_lsm_netlink_send+0x9/0x10 [ 521.069876][ T9975] netlink_sendmsg+0x8e4/0xcb0 [ 521.074686][ T9975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.079978][ T9975] ? __import_iovec+0x536/0x820 [ 521.084834][ T9975] ? aa_sock_msg_perm+0x91/0x160 [ 521.089781][ T9975] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 521.095076][ T9975] ? security_socket_sendmsg+0x87/0xb0 [ 521.100535][ T9975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.105818][ T9975] __sock_sendmsg+0x221/0x270 [ 521.110501][ T9975] ____sys_sendmsg+0x525/0x7d0 [ 521.115269][ T9975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.120566][ T9975] __sys_sendmsg+0x298/0x390 [ 521.125171][ T9975] ? __pfx___sys_sendmsg+0x10/0x10 [ 521.130310][ T9975] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 521.136648][ T9975] ? do_syscall_64+0x100/0x230 [ 521.141416][ T9975] ? do_syscall_64+0xb6/0x230 [ 521.146098][ T9975] do_syscall_64+0xf3/0x230 [ 521.150605][ T9975] ? clear_bhb_loop+0x35/0x90 [ 521.155297][ T9975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.161193][ T9975] RIP: 0033:0x7f98c59799b9 [ 521.165620][ T9975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.185231][ T9975] RSP: 002b:00007f98c669f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.193644][ T9975] RAX: ffffffffffffffda RBX: 00007f98c5b16058 RCX: 00007f98c59799b9 [ 521.201631][ T9975] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 000000000000000b [ 521.209600][ T9975] RBP: 00007f98c59e78d8 R08: 0000000000000000 R09: 0000000000000000 [ 521.217572][ T9975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.225538][ T9975] R13: 0000000000000000 R14: 00007f98c5b16058 R15: 00007ffc3089b568 [ 521.233512][ T9975] [ 521.236904][ T9975] Kernel Offset: disabled [ 521.241298][ T9975] Rebooting in 86400 seconds..