last executing test programs: 8m51.345031818s ago: executing program 4 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r0, &(0x7f0000005400)=[{&(0x7f0000005440)='!', 0x1}], 0x1) 8m51.091805334s ago: executing program 4 (id=340): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f000082d000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000064c000/0x3000)=nil) 8m49.530149982s ago: executing program 4 (id=356): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a"], 0x0) 8m46.704356682s ago: executing program 4 (id=380): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@usrquota}, {@noinit_itable}, {@dioread_nolock}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 8m46.268907633s ago: executing program 4 (id=386): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x800) 8m45.94529731s ago: executing program 4 (id=391): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 8m30.791877094s ago: executing program 32 (id=391): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 8m27.065361575s ago: executing program 2 (id=544): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x7, 0x7, &(0x7f0000000000)={0x2, "11c093814887aec119672d5e237e58595381ec3121eadf75a2dddaea4f48709d05"}}) 8m25.412483476s ago: executing program 2 (id=560): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m23.273287868s ago: executing program 2 (id=567): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='mountproto\x00', &(0x7f0000000300)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 8m22.936661216s ago: executing program 2 (id=573): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x50000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0xfa, 0x0, 0x38, 0x1b}, {0xdddd1000, 0x70000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0x2000, 0xa000, 0xe, 0x5, 0x3, 0x7, 0x6, 0x8b, 0x22, 0xab, 0x5, 0x46}, {0x30000, 0x7000, 0x3, 0x1, 0x4, 0x43, 0x9, 0xfb, 0xc0, 0x7, 0xd}, {0xa000, 0x9000, 0x10, 0x2, 0x3, 0xa, 0xab, 0x7f, 0x4a, 0x83, 0xfe, 0xe}, {0xf000, 0x26000, 0x8, 0xfa, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x7000, 0x2, 0xf, 0xd, 0x7, 0xff, 0xb, 0x0, 0x4, 0x81, 0x1}, {0x5000, 0xa000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x1a, 0x5, 0x3, 0x7, 0x19}, {0xb000, 0x2d}, {0xf000, 0x7fff}, 0xc0040075, 0x0, 0x231d7000, 0x42224, 0xb, 0x1, 0x3000, [0x483ffffffffffffe, 0x3, 0x80000004, 0x5b3]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160060000090509"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x101001) write$P9_RRENAME(r0, &(0x7f0000000640)={0x7, 0x15, 0x2}, 0x7) 8m20.260747853s ago: executing program 0 (id=592): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='\x00'/16, 0x6) 8m20.026240468s ago: executing program 0 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='blk', 0x3) 8m19.734858446s ago: executing program 2 (id=598): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8m19.446466353s ago: executing program 2 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 8m19.336457275s ago: executing program 0 (id=601): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x64e98, 0xb6a0d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x48092) 8m19.032356623s ago: executing program 0 (id=602): syz_mount_image$minix(&(0x7f00000001c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="7665b56bff7d13a2d819dd99d7b7fb44d89826e61bdd16b72b7b4b28466b2dd5276d640c15e37c725cc51cf9ccb08269fbbcf21642cf3700d39319aedab841312becd7508764407fc111e219d48aff23cec7bff40e31ce41ce552026be34aef66f44ef30690a7b52e1dd15b63c9d5de5b8fd41279c39eaa7c3660cdf0466414f5b966df46c5dd09f5d724a4d956293d161bf6a0aab3287558cfa91db1a051d07", @ANYRES64, @ANYRESOCT=0x0, @ANYRES16, @ANYRES8=0x0], 0x1, 0x1e5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 8m18.671922841s ago: executing program 0 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000200000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000040), &(0x7f0000000140)='%pI4 \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 8m17.375993174s ago: executing program 0 (id=608): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 8m16.729094789s ago: executing program 33 (id=608): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 8m4.323830575s ago: executing program 34 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7m33.187496711s ago: executing program 6 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) lseek(r0, 0x0, 0x0) 7m32.915404797s ago: executing program 6 (id=849): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0xd) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x1000, {[@fastopen={0x1e, 0x10, "3aaeb09fe79b4e1c9012ae2e57cc"}]}}}}}}}}, 0x0) 7m32.700080712s ago: executing program 6 (id=852): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) chown(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0) 7m31.762980075s ago: executing program 6 (id=859): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES16, @ANYRES8=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRES32, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f00000000c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) 7m31.250186688s ago: executing program 6 (id=863): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x10, &(0x7f0000000080), 0x1, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVNsZAPDvTv5YY2LSUrHVFgItVrGdmESjQilmVRAtbS100T8Sk5iISSaYCagUahCLFCpddGFx1Y1ddBO6K9IiFB681Vu4eG8hCm/1njyfPHkuXOVxJ3d0jGPyYmLuY/z94DL3nEnmfHc+7p1zhnPPBPDW6o6IIxHRFBHFiOjM6gvZFpcWt/TvTvXPj6dbEgsLJx4lkUTE0f758eprJdnjluwFvpU+XInY2/xyuzMXLp4dmpgYPZeVe8qT0z0zFy7+6Mzk0Njo2OjUwMGDhw8dGDhweP2OdfP26ze//fdjd669M/fdbVuGJ9N427Pnao9jvXRHd/aetERH7RNJxKn1bixnX8s7AFbtk8LOW3nHAABsvELW92+u9P87oykWO+v37/72cWf8sS3v+AAAAIC1W1hoyh4BAACAxpUY+wMAAECDq84DONo/P17dNmruwYOfblRLvMrDwYjoWsx/9f7uxWean93T2/KG7u/9w9OI7uh48tFPvvH/dIs3dB82X03zH+YdAXlq3Z93BORpxy/yjoA8vXc17wi4NBcRt4/U6f8na+7ztS8pJ0vKxwfT/t9fZmrr9P/eHr88kXcE5OlnA3lHQJ5uPMo7Am4PRsS+et//FSrr91Vtjoi26tp+6+RQe/r5/+/7tXUvf/4XHqxjkyzxcDDixzVrO56qyX+mqykrdVS+KmxJTp+ZGN0XEVsjYne0bErLvcu00Ttw46/16r/zJM3/P5Pq93/plrZf/S4wi+NB86YX/29kqDy01uNm0cO5iB3N9fL/vP+fZLl+Xf8tXftzvfqBPZV1RXctn3/epIV/ROyqe/4/H60ly67P2lO5HPRULwp1/OuDz67Uq//+79P8n90j//lJz/+25fNfuf4/W693ZvVtXP7fzSf16p/eSvP/t0uvc/1vTX5VCbA1qzs/VC6f641oTY69XN+3+pgbVfX9qL5faf53f6/+53+1/5dk60J3RcTXX6PNuXvTd+rVXy+k+b/xO+d/ftL8j6xw/icvnP+r35l//4c/qNf2zqtp/rt+vfL5v78SzO6sRv9vZV82QXnHCQAAAAAAAMD6KFTu00kKxWf7hUKxuDjP95vRVpgozZT3ni7NTo0s3s/TFS2F6lSvzpr5oL3Z/JBquW9JuT+bO3K1c3OlXBwuTYzkffAAAADQ4Noj7v3m8n+2b3nF+D91tzPvKAEAAIC1SMf/HffaKst5fW6cDwAAAA0pHf8//tOn74bxPwAAADSs2vE/AAAA0Nh+fvx4ui1Uf/dvqjR25uz49OG+fcXJ2eHicOncdHGsVBqrrNg3ufLrTZRK0719MXu+pzw6U+6ZuXDx5GRpdqp8svK7sSdHWzbgmICVFbd+vC3vGAAAgI2zlt/1t2PHTqPu5H1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLb4IAAD//wws/WY=") chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 7m30.536142516s ago: executing program 6 (id=869): mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000440)=""/4086, 0xff6, 0x80) 7m29.992951099s ago: executing program 35 (id=869): mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000440)=""/4086, 0xff6, 0x80) 6m29.125330327s ago: executing program 5 (id=1410): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x200000000000001}}, 0x21) 6m28.781010055s ago: executing program 5 (id=1412): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e621b4c951ee12e"}}}}}}}, 0x0) 6m28.541769261s ago: executing program 5 (id=1413): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/223, 0xdf}, {&(0x7f0000000280)=""/239, 0xef}], 0x2, 0x3, 0x0) 6m28.368441005s ago: executing program 5 (id=1414): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='\'', 0x1}], 0x2) 6m28.216490169s ago: executing program 5 (id=1416): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000040)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) stat(&(0x7f00000003c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000400)) 6m27.954808825s ago: executing program 5 (id=1420): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x0, 0xffffffff, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x7, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x200440c3}, 0x0) 6m12.625949792s ago: executing program 36 (id=1420): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x0, 0xffffffff, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x7, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x200440c3}, 0x0) 5m26.190005845s ago: executing program 7 (id=1942): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x8000004, {0x7, 0x0, 0x0, r1, 0x4334c}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m25.895896842s ago: executing program 7 (id=1944): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/clk/clk_summary\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/1000, 0x3e8) 5m25.56337747s ago: executing program 7 (id=1947): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) uname(&(0x7f0000000180)=""/176) 5m24.278217922s ago: executing program 7 (id=1959): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x1) 5m24.060253147s ago: executing program 7 (id=1963): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000002700)=ANY=[@ANYRES64=0x0, @ANYRESOCT], 0x1, 0x215, &(0x7f0000000580)="$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") unlink(&(0x7f0000000200)='./file1\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 5m23.665404237s ago: executing program 7 (id=1969): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) 5m23.13377427s ago: executing program 37 (id=1969): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) 4m11.20396949s ago: executing program 9 (id=2040): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0xa) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xf5, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0) 4m10.147130295s ago: executing program 1 (id=2041): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='-2 -3 +4 +4.1 +4.2\n', 0x13) 4m5.534679159s ago: executing program 9 (id=2044): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000013c0)={0x2020}, 0x2020) 4m4.154666813s ago: executing program 1 (id=2045): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3m59.910486007s ago: executing program 9 (id=2047): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1b, 0x0) 3m58.113288392s ago: executing program 1 (id=2049): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, 0x0) 3m51.975689033s ago: executing program 1 (id=2052): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x641, 0x8000026, r0, 0x0) fanotify_mark(r1, 0x29, 0xb, r0, 0x0) 3m51.048002706s ago: executing program 9 (id=2054): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/1024, 0x400) 3m46.679926183s ago: executing program 1 (id=2056): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$eJzs3c1vHGcdB/DvrNeuHargtEkboSKiRCpIFolf5IK5EBBCPlSoKgfOVuI0VjZOZbvIrRC4FMEJiUP/gILkGyck7kHhXG69+lgJiUvEIeJiNLOz9tq7ju3Eb4HPJxo/z8zzzDO//e0zM951Vhvg/9bsWJoPU2R27O3Vcn1jfaq1sT71Ut3cSlLWG0mzXaRYTIpHyc2yveha0lX2+HRh5t0vHm982V5r1kvVv/G0/fro03etXnIlyUBd9ho86CF2jHcrycs9XYYOOtaOjmXSrtUlnLrNHmuH2f0w5y1wxnTuTkX7vtljNDmXZLj+PSD11aFxchEej0Nd5QAAAOAF9fmD044AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXjz19/8X9dKoy1xJ0fn+/6HOtrr+Qnt42gEAAAAAAAAAwBH4xpM8yWrOd9Y3i+pv/lerlYv5z2bylXyQ5cxnKdezmrmsZCVLmUgy2jXQ0OrcysrSxNaepf57Tvbdc/KkHjEAAAAAAAAA/E/6dWa3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnQZEMtItqudipj6bRbFczVP5YS/7Rqb8gin4bH558HAAAAPBchp9hn68+yZOs5nxnfbOoXvO/Vr1eHs4HWcxKFrKSVuZzu34NXb7qb2ysT7U21qful0vvuD/416HCqEZM+72H/ke+XPUYyZ0sVFuu51YVzO00qj1Llzvx9I/r4zKm4vu1A0bWrNNaHuwPe72LcCQO+1bEaBlcspWR8Tq2MhsX2hkoqjdqkt2Z2PfZae4+UhoZ3DrSRBpb7/xcPIacn6vL8vH89lhzflhbmWikysRk1+x77emZSL751z//7G5r8d7dO8tjZ+ch7WNgj+2758RUVyZe75eJ7oHOdCaah+w/XmXi0tb6bH6cn2YsV/JOlrKQn2cuK5nPZt0+V8/n8ufo0+fMzR1r7+wXyVD9vLRTfZCYruRHVW0uV6t9z2chRR7kdubzVvVvMhP5TqYznZmuZ/jSnnFXj6066xu7z/rOM/23vsFf+1ZdGUnyu7rsycEue83Oo9K+9pd5vdCV1/asf7zV60LXeTDelaVXOtkZ7Dv4s1wbm1+rK+UxPqnLs2G0zkR5AnXuEp3oXm1nolndi3rn+R+rc2O5tXhv6e7c+3uMv7Zr/c26LKfV+tcPGmX/p+JolfPllQzXV5Kds6Nse3XrKnNhx111qP6LS7ut0dN2qWoris6Z+pOeM7Wcr+WZOlT/Dtc70mTV9nrftqmq7XJX247ft/Igrdw+gfwB8JxGc25o5J8jn498NvKbkbsjbw//8KXvvvTGUAb/Pvi95vjAm403ir/ks/xy+/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7JY//OjeXKs1v9S/0ti7aZ/KfiPvqhT1F/o807HOYGU4yY4tg+WGIzvEJwfsPLI7jJ7K5q+SE89P50sE+/f5fVlp5iAD3tyvz8enPhPOemUg/SfAKV+YgGN3Y+X++zeWP/zo2wv3596bf29+cXB6emZ8ZvqtqRt3Flrz4+2fpx0lcBy2b/qnHQkAAAAAAAAAAABwUP0+GHD15f0+NHKgz3j4n4UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkZgdS/NhikyMXx8v1zfWp1rl0qlv92wmaTSS4hdJ8Si5mfaS0a7hivzpUTb7HOfThZl3v3i88eX2WM12/6RRl89hrV5yJclAXR7VeLeee7zi351HWCbsWidxcNr+GwAA///UmvRo") r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) 3m46.570741955s ago: executing program 9 (id=2057): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) 3m40.709434739s ago: executing program 1 (id=2060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000080)) 3m40.364921198s ago: executing program 9 (id=2061): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) 3m23.409225245s ago: executing program 38 (id=2060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000080)) 3m20.811422429s ago: executing program 39 (id=2061): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) 1m32.946182283s ago: executing program 3 (id=2112): r0 = syz_io_uring_setup(0x96d, &(0x7f0000000540)={0x0, 0x2fe, 0x0, 0x3, 0x11}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000007c0)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000680)=@IORING_OP_SOCKET={0x2d, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, 0x1, {0x0, 0x0, 0x400}}) io_uring_enter(r0, 0x101, 0x11, 0x5, 0x0, 0x0) 1m28.270531628s ago: executing program 3 (id=2114): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, r0, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) clock_getres(0xfffffffffffffffb, 0x0) 1m24.9284472s ago: executing program 3 (id=2116): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x1, 0x82b, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x12, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768f8124c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) 1m19.491518334s ago: executing program 3 (id=2118): mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8) 1m15.484731622s ago: executing program 3 (id=2120): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x2a202, 0x109) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'rlimit'}]}, 0x8) 1m10.149678524s ago: executing program 3 (id=2122): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 53.572146182s ago: executing program 40 (id=2122): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 25.744078136s ago: executing program 8 (id=2130): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000cc0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.681978342s ago: executing program 8 (id=2131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8) 17.794032872s ago: executing program 8 (id=2132): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000880)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@block={'block', 0x3d, 0x400}}, {@sbsector={'sbsector', 0x3d, 0xfffffffffffffff1}}, {@showassoc}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}, {@map_off}, {@check_relaxed}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x50}}]}, 0x5, 0xa51, &(0x7f0000001240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 12.149554121s ago: executing program 8 (id=2133): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000400)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.145871803s ago: executing program 8 (id=2134): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000a00)="05030500d3fc0300000047887f0509101128fdf2b990788345e5e66a", 0x1c, 0x24004054, &(0x7f0000000140)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @random="11ed0124352a"}, 0x14) 0s ago: executing program 8 (id=2135): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x0, 0x3, 0xa, 0x0, 0x20}, {0x20000000, 0x7fffffffffffffff, 0x0, 0xffffffffffff0dac, 0x0, 0x14d, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffff7, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010) readv(r0, &(0x7f0000003740)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x30, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) kernel console output (not intermixed with test programs): val->res is probably wrong. [ 258.223354][ T5443] usb 9-1: [5] FU [Mic Capture Volume] ch = 1, val = -24635/0/1 [ 258.258955][ T5443] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 258.293183][ T5443] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 258.384970][ T5443] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 258.424958][ T5443] usb 9-1: USB disconnect, device number 3 [ 258.682073][ T4429] udevd[4429]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.722394][ T8479] loop5: detected capacity change from 0 to 1024 [ 258.824396][ T8479] hfsplus: request for non-existent node 211 in B*Tree [ 258.874400][ T8479] hfsplus: request for non-existent node 211 in B*Tree [ 259.025593][ T11] hfsplus: b-tree write err: -5, ino 8 [ 259.110850][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 259.233140][ T8500] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.240501][ T8500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.543742][ T8509] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1394'. [ 260.241471][ T8505] loop1: detected capacity change from 0 to 40427 [ 260.262847][ T8527] loop7: detected capacity change from 0 to 256 [ 260.295674][ T8505] F2FS-fs (loop1): invalid crc value [ 260.350538][ T8505] F2FS-fs (loop1): Found nat_bits in checkpoint [ 260.497835][ T8505] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 260.545514][ T8505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 260.687404][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 260.687419][ T26] audit: type=1807 audit(1791205769.957:49): func=FILE_CHECK res=0 [ 260.702589][ T8538] ima: policy update failed [ 260.714449][ T26] audit: type=1802 audit(1791205769.977:50): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.1403" res=0 errno=0 [ 260.727057][ T8505] syz.1.1393: attempt to access beyond end of device [ 260.727057][ T8505] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 260.740888][ T26] audit: type=1802 audit(1791205769.987:51): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1403" res=0 errno=0 [ 262.099222][ T8575] loop1: detected capacity change from 0 to 1024 [ 262.210599][ T8498] block2mtd: error: cannot open device /dev/l [ 262.451973][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1417'. [ 262.715382][ T8595] loop7: detected capacity change from 0 to 512 [ 262.955321][ T8595] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 263.006185][ T8595] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.194753][ T8612] kAFS: bad VL server IP address [ 263.290960][ T6178] EXT4-fs (loop7): unmounting filesystem. [ 263.341011][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 264.024678][ T8635] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1437'. [ 264.422938][ T8648] input: syz1 as /devices/virtual/input/input16 [ 264.577200][ T8653] program syz.3.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.600477][ T14] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 264.803291][ T14] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.823846][ T14] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 264.858498][ T14] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.871793][ T8661] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 264.879289][ T8661] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 264.889636][ T14] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 264.923113][ T14] usb 8-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice=80.00 [ 264.960387][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.978957][ T14] usb 8-1: Product: syz [ 264.989116][ T14] usb 8-1: Manufacturer: syz [ 265.009470][ T14] usb 8-1: SerialNumber: syz [ 265.091156][ T4282] Bluetooth: hci5: urb ffff888019e84c00 submission failed (90) [ 265.212302][ T8666] loop1: detected capacity change from 0 to 4096 [ 265.258276][ T8666] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 265.282602][ T14] usb 8-1: USB disconnect, device number 9 [ 266.539341][ T8702] bond0: option arp_interval: invalid value ( ) [ 266.558364][ T8702] bond0: option arp_interval: allowed values 0 - 2147483647 [ 266.804624][ T8708] loop1: detected capacity change from 0 to 512 [ 266.827911][ T8685] loop3: detected capacity change from 0 to 32768 [ 266.949238][ T8708] EXT4-fs (loop1): 1 truncate cleaned up [ 266.962337][ T8708] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 266.992888][ T8685] XFS (loop3): Mounting V5 Filesystem [ 267.132671][ T8708] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.1463: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 267.168006][ T8685] XFS (loop3): Ending clean mount [ 267.341712][ T6227] EXT4-fs (loop1): unmounting filesystem. [ 267.585786][ T4272] XFS (loop3): Unmounting Filesystem [ 268.378594][ T8756] loop3: detected capacity change from 0 to 256 [ 268.458719][ T8756] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 268.764935][ T8763] bonding: unable to delete non-existent bo [ 269.012950][ T8772] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 269.063676][ T8772] iwpm_mapping_info_cb: Unable to parse nlmsg [ 269.289977][ T8778] Bluetooth: hci0: unsupported parameter 5161 [ 269.317367][ T8781] loop8: detected capacity change from 0 to 512 [ 269.337675][ T8778] Bluetooth: hci0: unsupported parameter 8192 [ 269.367006][ T8781] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 269.390628][ T8781] UDF-fs: Scanning with blocksize 512 failed [ 269.400604][ T8778] Bluetooth: hci0: unsupported parameter 5161 [ 269.429463][ T8778] Bluetooth: hci0: unsupported parameter 8192 [ 269.440660][ T8781] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 269.448126][ T8781] UDF-fs: Scanning with blocksize 1024 failed [ 269.499860][ T8781] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 269.528006][ T8781] UDF-fs: Scanning with blocksize 2048 failed [ 269.561464][ T8781] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 269.603914][ T8781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.497230][ T8804] loop8: detected capacity change from 0 to 2048 [ 270.552992][ T8804] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 270.650660][ T8806] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.659046][ T8804] syz.8.1491: attempt to access beyond end of device [ 270.659046][ T8804] loop8: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 271.216307][ T8816] sctp: [Deprecated]: syz.1.1495 (pid 8816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.216307][ T8816] Use struct sctp_sack_info instead [ 271.830374][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 271.853338][ T8837] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 272.020256][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 272.029644][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 272.069950][ T7] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 272.098188][ T7] usb 4-1: Product: syz [ 272.112789][ T7] usb 4-1: Manufacturer: syz [ 272.130675][ T7] usb 4-1: SerialNumber: syz [ 272.171437][ T7] usb 4-1: config 0 descriptor?? [ 272.202275][ T7] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 272.347186][ T8825] loop8: detected capacity change from 0 to 32768 [ 272.511626][ T8825] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 272.699796][ T8825] (syz.8.1498,8825,1):ocfs2_double_lock:1190 ERROR: status = -2 [ 272.740017][ T8825] (syz.8.1498,8825,1):ocfs2_rename:1299 ERROR: status = -2 [ 272.764209][ T8825] (syz.8.1498,8825,1):ocfs2_rename:1689 ERROR: status = -2 [ 272.866917][ T7] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 273.007102][ T6945] ocfs2: Unmounting device (7,8) on (node local) [ 273.124708][ T7289] usb 4-1: USB disconnect, device number 9 [ 273.908277][ T8870] loop3: detected capacity change from 0 to 1024 [ 273.958474][ T8870] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 274.003527][ T8873] loop1: detected capacity change from 0 to 736 [ 274.131167][ T8870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 274.410639][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 274.803362][ T8898] loop8: detected capacity change from 0 to 128 [ 274.886261][ T8898] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 274.896880][ T8903] loop3: detected capacity change from 0 to 1024 [ 274.967797][ T8898] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 275.235205][ T6945] EXT4-fs (loop8): unmounting filesystem. [ 275.734759][ T8922] input: syz0 as /devices/virtual/input/input18 [ 276.030097][ T8934] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 276.279235][ T8940] loop7: detected capacity change from 0 to 2048 [ 276.355279][ T8940] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.908085][ T26] audit: type=1326 audit(1791205786.177:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e699e199 code=0x7ffc0000 [ 277.004990][ T8968] loop7: detected capacity change from 0 to 128 [ 277.010345][ T26] audit: type=1326 audit(1791205786.177:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e699e199 code=0x7ffc0000 [ 277.071142][ T8968] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 277.163170][ T26] audit: type=1326 audit(1791205786.217:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e699e199 code=0x7ffc0000 [ 277.187732][ T26] audit: type=1326 audit(1791205786.217:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e699e199 code=0x7ffc0000 [ 277.213532][ T26] audit: type=1326 audit(1791205786.217:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f60e699e199 code=0x7ffc0000 [ 277.238107][ T26] audit: type=1326 audit(1791205786.217:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e699e199 code=0x7ffc0000 [ 277.265543][ T26] audit: type=1326 audit(1791205786.217:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e699e199 code=0x7ffc0000 [ 277.333204][ T8975] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.346497][ T26] audit: type=1326 audit(1791205786.217:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e699e199 code=0x7ffc0000 [ 277.404948][ T8968] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 277.444670][ T8968] ext2 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.470390][ T26] audit: type=1326 audit(1791205786.217:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e699e199 code=0x7ffc0000 [ 277.537844][ T8974] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 277.585243][ T26] audit: type=1326 audit(1791205786.217:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f60e699e199 code=0x7ffc0000 [ 277.639632][ T8974] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 277.852371][ T6178] EXT4-fs (loop7): unmounting filesystem. [ 278.828375][ T9005] input: syz0 as /devices/virtual/input/input19 [ 278.921106][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.936404][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.946687][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.960848][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.978554][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.988253][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.562935][ T9027] loop7: detected capacity change from 0 to 4096 [ 279.700615][ T9006] chnl_net:caif_netlink_parms(): no params data found [ 279.721184][ T9041] loop1: detected capacity change from 0 to 256 [ 279.773852][ T9041] exfat: Deprecated parameter 'utf8' [ 279.779360][ T9041] exfat: Deprecated parameter 'utf8' [ 279.865782][ T9041] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 280.103582][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.200277][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.209271][ T9006] device bridge_slave_0 entered promiscuous mode [ 280.226944][ T9027] ntfs3: loop7: no free space to extend mft [ 280.278872][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.326233][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.350480][ T9006] device bridge_slave_1 entered promiscuous mode [ 280.583945][ T4328] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.875880][ T4328] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.898594][ T9006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.930919][ T9006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.046952][ T4328] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.090545][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 281.155560][ T9006] team0: Port device team_slave_0 added [ 281.199859][ T9006] team0: Port device team_slave_1 added [ 281.373796][ T4328] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.410747][ T9006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.417781][ T9006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.506042][ T9006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.549439][ T9006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.577698][ T9006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.692005][ T9006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.874243][ T9006] device hsr_slave_0 entered promiscuous mode [ 281.908374][ T9006] device hsr_slave_1 entered promiscuous mode [ 281.928283][ T9006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.956496][ T9006] Cannot create hsr debugfs directory [ 282.236233][ T9090] loop3: detected capacity change from 0 to 4096 [ 282.367807][ T9090] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 282.419473][ T9074] loop8: detected capacity change from 0 to 32768 [ 282.451965][ T9090] ntfs3: loop3: Failed to load $Extend. [ 282.659502][ T9074] XFS (loop8): Mounting V5 Filesystem [ 282.714005][ T9090] overlayfs: upper fs does not support tmpfile. [ 282.741563][ T9074] XFS (loop8): Ending clean mount [ 282.775930][ T9090] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 283.156306][ T6945] XFS (loop8): Unmounting Filesystem [ 283.173598][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 283.399593][ T9006] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 283.623940][ T9006] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 283.649357][ T9006] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 283.871424][ T9006] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 284.512978][ T9140] device bond0 entered promiscuous mode [ 284.540838][ T9140] device bond_slave_0 entered promiscuous mode [ 284.547410][ T9140] device bond_slave_1 entered promiscuous mode [ 284.588315][ T9006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.662928][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.718409][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.747907][ T9006] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.028933][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.062376][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.067596][ T9126] loop1: detected capacity change from 0 to 32768 [ 285.113176][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.120523][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.159235][ T9126] XFS (loop1): Mounting V5 Filesystem [ 285.171167][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.180799][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.189884][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.197093][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.249106][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.256660][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 285.336275][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.346627][ T9126] XFS (loop1): Ending clean mount [ 285.372323][ T9167] loop8: detected capacity change from 0 to 256 [ 285.415413][ T4328] device hsr_slave_0 left promiscuous mode [ 285.475935][ T4328] device hsr_slave_1 left promiscuous mode [ 285.506819][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.536040][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.581624][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.604559][ T6227] XFS (loop1): Unmounting Filesystem [ 285.622932][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.684532][ T4328] device bridge_slave_1 left promiscuous mode [ 285.725510][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.826081][ T4328] device bridge_slave_0 left promiscuous mode [ 285.835713][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.996172][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 285.996189][ T26] audit: type=1326 audit(1791205795.267:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.7.1602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f85f9e199 code=0x7ffc0000 [ 286.090547][ T26] audit: type=1326 audit(1791205795.267:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.7.1602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f85f9e199 code=0x7ffc0000 [ 286.116759][ T9149] loop3: detected capacity change from 0 to 32768 [ 286.137365][ T4328] device veth1_macvtap left promiscuous mode [ 286.145172][ T4328] device veth0_macvtap left promiscuous mode [ 286.155011][ T4328] device veth1_vlan left promiscuous mode [ 286.161296][ T4328] device veth0_vlan left promiscuous mode [ 286.172897][ T26] audit: type=1326 audit(1791205795.447:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.7.1602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2f85f9e199 code=0x7ffc0000 [ 286.207489][ T26] audit: type=1326 audit(1791205795.447:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.7.1602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2f85f9e199 code=0x7ffc0000 [ 286.259625][ T9149] XFS (loop3): Mounting V5 Filesystem [ 286.340038][ T9149] XFS (loop3): Ending clean mount [ 286.576101][ T4272] XFS (loop3): Unmounting Filesystem [ 286.764376][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1611'. [ 286.830857][ T9191] loop1: detected capacity change from 0 to 512 [ 286.984457][ T9191] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 287.042058][ T9191] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.061656][ T9196] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1614'. [ 287.190020][ T6227] EXT4-fs (loop1): unmounting filesystem. [ 287.330421][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 288.541623][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 288.628647][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 288.730807][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.834313][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.069047][ T4358] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 289.283804][ T4358] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.308896][ T4358] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.323598][ T4358] usb 8-1: config 0 interface 0 has no altsetting 0 [ 289.330880][ T4358] usb 8-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 289.340551][ T4358] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.364413][ T4358] usb 8-1: config 0 descriptor?? [ 289.378324][ T4328] bond0 (unregistering): Released all slaves [ 289.485726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.512598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.537431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.553684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.614991][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.640413][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.692526][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.729834][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.768494][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.805820][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.830260][ T4358] thrustmaster 0003:044F:B65A.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65a] on usb-dummy_hcd.7-1/input0 [ 289.855339][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.900247][ T4358] thrustmaster 0003:044F:B65A.0006: no inputs found [ 289.932008][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.945755][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.016257][ T9006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.063562][ T4318] usb 8-1: USB disconnect, device number 10 [ 290.065714][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.099353][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.227010][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.281135][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.289894][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.326458][ T9253] fido_id[9253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 290.347611][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.370925][ T9006] device veth0_vlan entered promiscuous mode [ 290.412475][ T9261] MTRR 1 not used [ 290.464625][ T9006] device veth1_vlan entered promiscuous mode [ 290.491716][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.586861][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.621341][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.700663][ T9006] device veth0_macvtap entered promiscuous mode [ 290.761268][ T9006] device veth1_macvtap entered promiscuous mode [ 290.822852][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.850443][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.863744][ T9277] vivid-001: disconnect [ 290.876438][ T9275] kAFS: bad VL server IP address [ 290.882809][ T9269] vivid-001: reconnect [ 290.888979][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.920250][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.950204][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.984031][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.050255][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.087878][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.121013][ T9006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.136525][ T6762] kernel write not supported for file /input/mice (pid: 6762 comm: kworker/1:14) [ 291.148585][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.158673][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 291.198275][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.242688][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.292533][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.325618][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.373714][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.404710][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.443685][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.492031][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.523744][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.543792][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.579131][ T9006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.626249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.665043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.741384][ T9006] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.797913][ T9006] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.835022][ T9006] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.866989][ T9006] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.050699][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.089753][ T9306] loop8: detected capacity change from 0 to 256 [ 292.100667][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.132411][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 292.141556][ T9306] FAT-fs (loop8): Unrecognized mount option "i0²sj#PêäJTÊ /—™s4êI‚¨’" or missing value [ 292.195234][ T9306] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1653'. [ 292.206251][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.245732][ T9313] vivid-002: disconnect [ 292.252044][ T9309] vivid-002: reconnect [ 292.258914][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.298256][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 292.427250][ T5443] wiimote 0005:057E:0330.0007: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 292.487962][ T5443] wiimote 0005:057E:0330.0007: New device registered [ 292.622130][ T9320] loop1: detected capacity change from 0 to 16 [ 292.671709][ T9323] loop9: detected capacity change from 0 to 524287999 [ 292.681468][ T9320] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 292.860473][ T4319] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 293.038322][ T9335] loop7: detected capacity change from 0 to 512 [ 293.053198][ T4319] usb 4-1: Using ep0 maxpacket: 32 [ 293.073957][ T4319] usb 4-1: config 0 has no interfaces? [ 293.093383][ T9335] EXT4-fs: inline encryption not supported [ 293.134846][ T4319] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 293.137554][ T9335] EXT4-fs (loop7): Test dummy encryption mode enabled [ 293.185650][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.200264][ T9335] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 293.215764][ T9338] Bluetooth: MGMT ver 1.22 [ 293.227360][ T4319] usb 4-1: Product: syz [ 293.269439][ T4319] usb 4-1: Manufacturer: syz [ 293.277109][ T9335] EXT4-fs error (device loop7): ext4_orphan_get:1435: comm syz.7.1661: bad orphan inode 131083 [ 293.312188][ T9335] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 293.340385][ T4319] usb 4-1: SerialNumber: syz [ 293.360819][ T4319] usb 4-1: config 0 descriptor?? [ 293.497148][ T9335] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 293.628727][ T9311] wiimote 0005:057E:0330.0007: Unhandled report 32 size 1 [ 293.678922][ T9311] wiimote 0005:057E:0330.0007: Event data for report 32 was too short (31 vs 0) [ 293.698351][ T4319] usb 4-1: USB disconnect, device number 10 [ 293.730474][ T5443] wiimote 0005:057E:0330.0007: detected device: Nintendo Wii Remote Plus (Gen 2) [ 293.742248][ T9310] wiimote 0005:057E:0330.0007: Device removed [ 293.854339][ T5443] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0007/input/input21 [ 293.909635][ T5443] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0007/input/input22 [ 293.941184][ T5443] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0007/input/input20 [ 294.007462][ T6178] EXT4-fs (loop7): unmounting filesystem. [ 294.051749][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 294.057835][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 294.081577][ T9363] loop8: detected capacity change from 0 to 512 [ 294.098061][ T9363] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.141695][ T9363] EXT4-fs (loop8): orphan cleanup on readonly fs [ 294.148120][ T9363] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 294.169675][ T9363] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.1671: attempt to clear invalid blocks 2 len 1 [ 294.235950][ T9369] loop7: detected capacity change from 0 to 64 [ 294.266432][ T9363] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 294.311941][ T9363] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1671: invalid indirect mapped block 1819239214 (level 0) [ 294.329123][ T9369] hfs: filesystem is marked locked, mounting read-only. [ 294.346956][ T9363] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1671: invalid indirect mapped block 1819239214 (level 1) [ 294.384001][ T9363] EXT4-fs (loop8): 1 truncate cleaned up [ 294.389768][ T9363] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 294.432903][ T9369] hfs: filesystem is marked locked, leaving read-only. [ 294.596282][ T6945] EXT4-fs (loop8): unmounting filesystem. [ 294.610649][ T5277] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 294.677119][ T9378] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967272. macoff=96 [ 294.842254][ T5277] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 294.867445][ T5277] usb 2-1: config 0 has no interface number 0 [ 294.886867][ T5277] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 294.917263][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.939864][ T9388] loop8: detected capacity change from 0 to 1024 [ 294.946567][ T5277] usb 2-1: Product: syz [ 294.954726][ T5277] usb 2-1: Manufacturer: syz [ 294.968916][ T5277] usb 2-1: SerialNumber: syz [ 294.995112][ T9388] hfsplus: request for non-existent node 3 in B*Tree [ 295.011730][ T5277] usb 2-1: config 0 descriptor?? [ 295.037399][ T9388] hfsplus: request for non-existent node 3 in B*Tree [ 295.657486][ T5277] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 295.678391][ T5277] asix: probe of 2-1:0.251 failed with error -524 [ 295.699031][ T9413] loop9: detected capacity change from 0 to 128 [ 295.877185][ T5277] usb 2-1: USB disconnect, device number 9 [ 296.084236][ T9427] loop8: detected capacity change from 0 to 128 [ 296.108465][ T9427] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 296.176753][ T9427] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 296.196217][ T9427] FAT-fs (loop8): Filesystem has been set read-only [ 296.256866][ T6945] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 296.310306][ T6762] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 296.471195][ T9436] program syz.1.1694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.508945][ T6762] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.528765][ T6762] usb 10-1: config 0 has no interface number 0 [ 296.573495][ T6762] usb 10-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.606454][ T6762] usb 10-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.638184][ T6762] usb 10-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.686391][ T6762] usb 10-1: config 0 interface 1 has no altsetting 0 [ 296.738847][ T6762] usb 10-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 296.753964][ T6762] usb 10-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 296.763456][ T6762] usb 10-1: Manufacturer: syz [ 296.775366][ T6762] usb 10-1: config 0 descriptor?? [ 297.409699][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1700'. [ 297.422906][ T6762] uclogic 0003:145F:0212.0008: pen parameters not found [ 297.429929][ T6762] uclogic 0003:145F:0212.0008: interface is invalid, ignoring [ 297.443421][ T9458] netlink: 'syz.8.1700': attribute type 21 has an invalid length. [ 297.639332][ T6762] usb 10-1: USB disconnect, device number 2 [ 297.837944][ T9449] loop1: detected capacity change from 0 to 40427 [ 297.891829][ T9449] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 297.909616][ T9449] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 297.939727][ T9449] F2FS-fs (loop1): invalid crc value [ 297.977676][ T9449] F2FS-fs (loop1): Found nat_bits in checkpoint [ 298.111692][ T9449] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 298.129290][ T9449] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 298.576659][ T9492] loop7: detected capacity change from 0 to 512 [ 298.681976][ T9492] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 298.740914][ T9492] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.777321][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1712'. [ 298.907933][ T6178] EXT4-fs (loop7): unmounting filesystem. [ 299.079643][ T9507] loop9: detected capacity change from 0 to 64 [ 299.749936][ T9530] loop9: detected capacity change from 0 to 2048 [ 299.936510][ T9534] rnbd_client L211: map_device: Parameters missing [ 300.168038][ T9540] loop9: detected capacity change from 0 to 512 [ 300.223521][ T9540] EXT4-fs: inline encryption not supported [ 300.268970][ T9540] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.1721: inode #1: comm syz.9.1721: iget: illegal inode # [ 300.456016][ T9540] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1721: error while reading EA inode 1 err=-117 [ 300.540622][ T9540] EXT4-fs (loop9): 1 orphan inode deleted [ 300.565124][ T9540] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 300.609453][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1727'. [ 300.632105][ T9540] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.9.1721: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 300.825640][ T9567] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 300.834850][ T9006] EXT4-fs (loop9): unmounting filesystem. [ 300.917407][ T9570] loop7: detected capacity change from 0 to 256 [ 301.046202][ T9570] FAT-fs (loop7): Directory bread(block 64) failed [ 301.081062][ T9570] FAT-fs (loop7): Directory bread(block 65) failed [ 301.087759][ T9570] FAT-fs (loop7): Directory bread(block 66) failed [ 301.160242][ T9570] FAT-fs (loop7): Directory bread(block 67) failed [ 301.166939][ T9570] FAT-fs (loop7): Directory bread(block 68) failed [ 301.217344][ T9570] FAT-fs (loop7): Directory bread(block 69) failed [ 301.249120][ T9570] FAT-fs (loop7): Directory bread(block 70) failed [ 301.267027][ T9570] FAT-fs (loop7): Directory bread(block 71) failed [ 301.299961][ T9570] FAT-fs (loop7): Directory bread(block 72) failed [ 301.340234][ T9570] FAT-fs (loop7): Directory bread(block 73) failed [ 301.403993][ T6762] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 301.431462][ T9570] syz.7.1733: attempt to access beyond end of device [ 301.431462][ T9570] loop7: rw=2051, sector=1864, nr_sectors = 31936 limit=256 [ 301.528087][ T9591] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 301.529272][ T9586] loop3: detected capacity change from 0 to 8192 [ 301.610202][ T6762] usb 2-1: Using ep0 maxpacket: 8 [ 301.624555][ T6762] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 301.671634][ T6762] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 301.724955][ T6762] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.764208][ T6762] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.840223][ T6762] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 301.859748][ T6762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.173683][ T6762] usb 2-1: GET_CAPABILITIES returned 0 [ 302.179349][ T6762] usbtmc 2-1:16.0: can't read capabilities [ 302.410498][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 302.436257][ T9580] usbtmc 2-1:16.0: Unable to send data, error -71 [ 302.479846][ T4319] usb 2-1: USB disconnect, device number 10 [ 302.545188][ T9604] loop8: detected capacity change from 0 to 8192 [ 302.625863][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'. [ 302.646523][ T9604] loop8: p1 p2 p4[EZD] [ 302.670758][ T9604] loop8: p4 start 201326592 is beyond EOD, truncated [ 303.022047][ T26] audit: type=1400 audit(1791205812.297:71): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9614 comm="syz.9.1747" name="unknown" offset=82 [ 303.104683][ T9613] loop8: detected capacity change from 0 to 4096 [ 303.148662][ T9613] EXT4-fs: inline encryption not supported [ 303.249346][ T9613] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 303.310260][ T9613] EXT4-fs (loop8): Test dummy encryption mode enabled [ 303.346933][ T9613] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 303.400456][ T9613] System zones: 0-5 [ 303.431955][ T9613] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 303.632856][ T6945] EXT4-fs (loop8): unmounting filesystem. [ 303.822106][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 303.850544][ T4429] udevd[4429]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 304.350543][ T9628] loop9: detected capacity change from 0 to 32768 [ 304.460594][ T9628] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 304.734786][ T9006] ocfs2: Unmounting device (7,9) on (node local) [ 305.188495][ T9679] loop3: detected capacity change from 0 to 128 [ 305.245770][ T9679] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 305.257121][ T26] audit: type=1400 audit(1791205814.527:72): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=9682 comm="syz.7.1769" name="p" offset=53 [ 305.645726][ T9655] loop8: detected capacity change from 0 to 32768 [ 305.665252][ T9691] loop9: detected capacity change from 0 to 2048 [ 305.735852][ T9698] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.742823][ T9695] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1775'. [ 305.805753][ T9655] XFS (loop8): Mounting V5 Filesystem [ 305.959844][ T9655] XFS (loop8): Ending clean mount [ 305.994881][ T9698] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 306.021052][ T9698] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4) [ 306.108304][ T9698] Remounting filesystem read-only [ 306.222091][ T6945] XFS (loop8): Unmounting Filesystem [ 306.336559][ T9006] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer [ 306.461005][ T9716] netlink: 'syz.3.1782': attribute type 11 has an invalid length. [ 306.635201][ T5276] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 306.834434][ T5276] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.876090][ T5276] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.925028][ T5276] usb 8-1: config 0 interface 0 has no altsetting 0 [ 306.953644][ T5276] usb 8-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 306.983360][ T5276] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.000032][ T9704] loop1: detected capacity change from 0 to 40427 [ 307.019617][ T5276] usb 8-1: config 0 descriptor?? [ 307.047517][ T9704] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 307.077968][ T9704] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 307.097887][ T9704] F2FS-fs (loop1): invalid crc value [ 307.155010][ T9704] F2FS-fs (loop1): Found nat_bits in checkpoint [ 307.240403][ T127] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 307.379012][ T9704] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 307.406736][ T9704] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 307.444630][ T127] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 307.488528][ T127] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 307.530700][ T127] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 307.553669][ T127] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 307.580565][ T127] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.625220][ T127] usb 10-1: config 0 descriptor?? [ 307.632007][ T5276] hid-penmount 0003:14E1:6000.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 14e1:6000] on usb-dummy_hcd.7-1/input0 [ 307.653753][ T9725] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 307.707160][ T5276] usb 8-1: USB disconnect, device number 11 [ 308.077946][ T9750] fido_id[9750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 308.110029][ T127] hid-multitouch 0003:1FD2:6007.000A: ignoring exceeding usage max [ 308.141295][ T127] hid-multitouch 0003:1FD2:6007.000A: unknown main item tag 0x2 [ 308.180939][ T127] hid-multitouch 0003:1FD2:6007.000A: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.9-1/input0 [ 308.373556][ T4319] usb 10-1: USB disconnect, device number 3 [ 308.643040][ T9761] fido_id[9761]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 308.712990][ T9773] loop3: detected capacity change from 0 to 8 [ 308.793287][ T9773] SQUASHFS error: Failed to read block 0x1000629: -5 [ 308.836678][ T9773] SQUASHFS error: Unable to read metadata cache entry [1000629] [ 308.876081][ T9779] loop1: detected capacity change from 0 to 512 [ 308.881956][ T9773] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 309.208294][ T9788] loop3: detected capacity change from 0 to 512 [ 309.342241][ T9788] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 309.406727][ T9788] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.475138][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1806'. [ 309.590329][ T4319] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 309.648832][ T9803] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 309.711128][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 309.810830][ T4319] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 309.850224][ T4319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.889735][ T4319] usb 8-1: Product: syz [ 309.919441][ T4319] usb 8-1: Manufacturer: syz [ 309.931070][ T4319] usb 8-1: SerialNumber: syz [ 309.950945][ T4319] usb 8-1: config 0 descriptor?? [ 309.992140][ T4319] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 012 [ 310.380283][ T4319] (null): failure reading functionality [ 310.420791][ T4319] i2c i2c-1: connected i2c-tiny-usb device [ 310.497728][ T9829] loop8: detected capacity change from 0 to 2048 [ 310.590806][ T9829] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 310.617475][ T5277] usb 8-1: USB disconnect, device number 12 [ 310.624580][ T9829] NILFS (loop8): mounting unchecked fs [ 310.670517][ T9831] loop1: detected capacity change from 0 to 128 [ 310.689218][ T9829] NILFS (loop8): recovery complete [ 310.721038][ T4362] udevd[4362]: incorrect nilfs2 checksum on /dev/loop8 [ 310.728536][ T9834] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.069230][ T9843] loop1: detected capacity change from 0 to 512 [ 311.141356][ T9843] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 311.171198][ T9843] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.1819: corrupted in-inode xattr [ 311.226301][ T9849] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1823'. [ 311.251633][ T9843] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1819: couldn't read orphan inode 15 (err -117) [ 311.266300][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1823'. [ 311.312871][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1823'. [ 311.324652][ T9843] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 311.455137][ T6227] EXT4-fs (loop1): unmounting filesystem. [ 311.621353][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1828'. [ 311.977193][ T9869] loop1: detected capacity change from 0 to 4096 [ 312.212360][ T9883] program syz.7.1836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.687620][ T9894] loop9: detected capacity change from 0 to 256 [ 312.774540][ T9896] loop8: detected capacity change from 0 to 512 [ 312.804641][ T9894] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 312.888748][ T9896] EXT4-fs (loop8): orphan cleanup on readonly fs [ 312.924110][ T9900] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 312.951340][ T9896] Quota error (device loop8): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 313.028926][ T9871] loop3: detected capacity change from 0 to 32768 [ 313.070250][ T9896] EXT4-fs warning (device loop8): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 313.160897][ T9896] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 313.222862][ T9896] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.1852: bad orphan inode 14 [ 313.266450][ T127] wiimote 0005:057E:0306.000B: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 313.285683][ T9896] ext4_test_bit(bit=13, block=18) = 1 [ 313.292630][ T127] wiimote 0005:057E:0306.000B: New device registered [ 313.298618][ T9896] is_bad_inode(inode)=0 [ 313.337647][ T9896] NEXT_ORPHAN(inode)=0 [ 313.380307][ T9896] max_ino=32 [ 313.383591][ T9896] i_nlink=1 [ 313.387594][ T9896] EXT4-fs (loop8): 1 truncate cleaned up [ 313.421017][ T9896] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 313.577211][ T127] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 313.780288][ T5277] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 313.787871][ T127] usb 10-1: Using ep0 maxpacket: 8 [ 313.802784][ T127] usb 10-1: config 0 has no interfaces? [ 313.827752][ T127] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 313.847424][ T127] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.865633][ T127] usb 10-1: Product: syz [ 313.870993][ T127] usb 10-1: Manufacturer: syz [ 313.880635][ T127] usb 10-1: SerialNumber: syz [ 313.936854][ T127] usb 10-1: config 0 descriptor?? [ 313.971502][ T5277] usb 9-1: not running at top speed; connect to a high speed hub [ 313.993163][ T5277] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.015448][ T5277] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 314.047758][ T5277] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 314.067349][ T5277] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.114323][ T9930] loop7: detected capacity change from 0 to 2048 [ 314.127024][ T5277] usb 9-1: Found UVC 1.00 device (046d:0825) [ 314.178213][ T5277] usb 9-1: Failed to create links for entity 1 [ 314.195297][ T5277] usb 9-1: Failed to register entities (-22). [ 314.207275][ T127] usb 10-1: USB disconnect, device number 4 [ 314.223262][ T9907] wiimote 0005:057E:0306.000B: Device removed [ 314.281505][ T9934] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.345114][ T4358] usb 9-1: USB disconnect, device number 4 [ 314.370702][ T6762] wiimote 0005:057E:0306.000B: detected device: Nintendo Wii Remote (Gen 1) [ 314.401818][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1848'. [ 314.452040][ T6762] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000B/input/input24 [ 314.509177][ T6762] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000B/input/input25 [ 314.579420][ T6762] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000B/input/input23 [ 314.682191][ T9941] loop1: detected capacity change from 0 to 512 [ 314.835190][ T9941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 314.844520][ T9941] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.962674][ T6945] EXT4-fs (loop8): unmounting filesystem. [ 314.982720][ T4358] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 315.049750][ T6227] EXT4-fs (loop1): unmounting filesystem. [ 315.187876][ T4358] usb 8-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 315.199459][ T4358] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.225119][ T4358] usb 8-1: Product: syz [ 315.234677][ T4358] usb 8-1: Manufacturer: syz [ 315.246810][ T4358] usb 8-1: SerialNumber: syz [ 315.274840][ T4358] ums_eneub6250 8-1:1.0: USB Mass Storage device detected [ 315.320506][ T4358] scsi host1: usb-storage 8-1:1.0 [ 315.361212][ T9972] tap0: tun_chr_ioctl cmd 1074025677 [ 315.366877][ T9972] tap0: linktype set to 825 [ 315.445835][ T9974] mtrr: base(0xe3b6000) is not aligned on a size(0x0000) boundary [ 315.742133][ T9986] loop1: detected capacity change from 0 to 128 [ 315.801814][ T9986] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 315.854110][ T9986] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.981009][ T4358] ums_eneub6250: probe of 8-1:1.0 failed with error 3 [ 315.996882][ T9986] EXT4-fs warning (device loop1): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new) [ 316.061006][ T9986] EXT4-fs warning (device loop1): ext4_group_extend:1899: can't read last block, resize aborted [ 316.129005][ T4358] usb 8-1: USB disconnect, device number 13 [ 316.216606][ T6227] EXT4-fs (loop1): unmounting filesystem. [ 316.407341][T10001] loop1: detected capacity change from 0 to 2048 [ 316.453967][T10001] NILFS (loop1): invalid segment: Magic number mismatch [ 316.486942][T10001] NILFS (loop1): trying rollback from an earlier position [ 316.535654][T10001] NILFS (loop1): recovery complete [ 316.558118][T10004] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.596109][T10001] NILFS (loop1): error -22 preparing GC: cannot read source blocks [ 317.228837][T10023] tap0: tun_chr_ioctl cmd 1074025677 [ 317.251647][T10023] tap0: linktype set to 825 [ 317.311296][ T9996] loop8: detected capacity change from 0 to 32768 [ 317.481407][ T9996] XFS (loop8): Mounting V5 Filesystem [ 317.574695][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.581246][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.698209][ T9996] XFS (loop8): Ending clean mount [ 317.763959][ T9996] XFS (loop8): Quotacheck needed: Please wait. [ 317.913818][ T9996] XFS (loop8): Quotacheck: Done. [ 318.098696][ T6945] XFS (loop8): Unmounting Filesystem [ 318.993318][T10082] loop7: detected capacity change from 0 to 64 [ 319.036273][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1897'. [ 319.067920][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1897'. [ 319.135081][T10061] loop1: detected capacity change from 0 to 32768 [ 319.279918][T10061] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 319.279918][T10061] [ 319.326704][T10061] ERROR: (device loop1): remounting filesystem as read-only [ 319.372493][T10061] ialloc: diAlloc returned -5! [ 319.419385][T10061] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 319.419385][T10061] [ 319.468326][T10061] ERROR: (device loop1): dbDiscardAG: -EIO [ 319.468326][T10061] [ 319.600877][T10098] loop3: detected capacity change from 0 to 128 [ 319.706262][T10098] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 319.725582][T10098] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.744644][T10098] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1903: No space for directory leaf checksum. Please run e2fsck -D. [ 319.800350][T10098] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.1903: checksumming directory block 0 [ 319.866124][T10100] loop8: detected capacity change from 0 to 8192 [ 319.928457][T10100] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 320.013705][T10100] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 320.044931][T10100] REISERFS (device loop8): using ordered data mode [ 320.074519][T10100] reiserfs: using flush barriers [ 320.104612][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 320.169507][T10100] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 320.256790][T10100] REISERFS (device loop8): checking transaction log (loop8) [ 320.311814][T10100] REISERFS (device loop8): Using r5 hash to sort names [ 320.345344][T10100] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 320.399908][T10100] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 320.465380][T10100] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 320.521627][T10100] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 321.142658][T10141] netem: incorrect gi model size [ 321.159186][T10141] netem: change failed [ 321.180804][T10146] loop7: detected capacity change from 0 to 512 [ 321.217092][T10146] EXT4-fs: Invalid want_extra_isize 206 [ 321.368073][T10151] ALSA: mixer_oss: invalid OSS volume '' [ 321.586018][T10159] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 321.810490][ T4275] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 321.810538][ T4282] Bluetooth: hci5: command 0x1003 tx timeout [ 322.145669][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1925'. [ 322.193141][T10173] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1925'. [ 322.300586][T10180] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 322.308423][T10180] team0: Device ipvlan2 is already an upper device of the team interface [ 322.487410][T10184] loop3: detected capacity change from 0 to 512 [ 322.518266][T10184] EXT4-fs: Ignoring removed i_version option [ 322.561720][T10184] EXT4-fs: Ignoring removed oldalloc option [ 322.591153][T10184] ext4: Unknown parameter 'uid<00000000000000000000' [ 322.762988][T10157] loop8: detected capacity change from 0 to 40427 [ 322.828606][T10157] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x3ffff [ 322.910256][T10157] F2FS-fs (loop8): invalid crc value [ 322.924744][T10195] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.1932'. [ 322.952589][T10157] F2FS-fs (loop8): Found nat_bits in checkpoint [ 322.990605][T10197] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.1932'. [ 323.079128][T10201] loop1: detected capacity change from 0 to 164 [ 323.156077][T10157] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 323.350874][T10208] loop6: detected capacity change from 0 to 524287901 [ 323.369118][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.378435][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.395866][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.405140][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.434921][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.444222][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.467598][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.476867][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.521884][ T4335] wiimote 0005:057E:0306.000C: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 323.543162][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.552486][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.562460][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.571743][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.580750][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.589947][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.591881][ T4335] wiimote 0005:057E:0306.000C: New device registered [ 323.651873][ T6945] syz-executor: attempt to access beyond end of device [ 323.651873][ T6945] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 323.680565][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.690170][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.698068][T10208] ldm_validate_partition_table(): Disk read failed. [ 323.719351][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.728711][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.752950][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.762194][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.837935][T10208] Dev loop6: unable to read RDB block 0 [ 323.868196][T10208] loop6: unable to read partition table [ 323.920638][ T4335] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 323.947855][T10208] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 324.130516][ T4335] usb 2-1: Using ep0 maxpacket: 8 [ 324.138681][ T4335] usb 2-1: config 0 has no interfaces? [ 324.171503][ T4335] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 324.187344][ T4335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.196095][ T4335] usb 2-1: Product: syz [ 324.200794][ T4335] usb 2-1: Manufacturer: syz [ 324.205525][ T4335] usb 2-1: SerialNumber: syz [ 324.223103][ T4335] usb 2-1: config 0 descriptor?? [ 324.328465][T10228] loop3: detected capacity change from 0 to 512 [ 324.368992][T10228] EXT4-fs: Ignoring removed nobh option [ 324.394496][T10228] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 324.460716][ T4335] usb 2-1: USB disconnect, device number 11 [ 324.496790][T10211] wiimote 0005:057E:0306.000C: Device removed [ 324.525058][T10228] EXT4-fs (loop3): 1 truncate cleaned up [ 324.558927][T10228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 324.690368][ T5443] wiimote 0005:057E:0306.000C: detected device: Nintendo Wii Remote (Gen 1) [ 324.766676][ T5443] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input27 [ 324.828079][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 324.844447][ T5443] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input28 [ 324.896122][ T5443] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input26 [ 324.929361][T10244] loop9: detected capacity change from 0 to 512 [ 324.990881][T10244] EXT4-fs: Invalid want_extra_isize 206 [ 325.081084][ T26] audit: type=1400 audit(1791205834.357:73): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=10245 comm="syz.8.1941" name="//o" offset=76 [ 325.143019][T10250] bond0: option arp_interval: invalid value ( ) [ 325.149453][T10250] bond0: option arp_interval: allowed values 0 - 2147483647 [ 325.564322][T10260] loop8: detected capacity change from 0 to 64 [ 325.626035][T10257] nbd0: detected capacity change from 0 to 274877906944 [ 325.726232][ T4275] block nbd0: Receive control failed (result -104) [ 326.286130][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1961'. [ 326.704251][T10297] ip_tables: iptables: counters copy to user failed while replacing table [ 326.811877][ T4328] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.984741][ T4328] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.101540][ T4328] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.242412][ T4328] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.053106][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 328.068666][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 328.079626][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 328.087689][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 328.097445][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 328.104817][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.150935][T10339] loop3: detected capacity change from 0 to 128 [ 328.178880][T10339] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 328.515061][ T7] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 328.560585][ T7] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 329.017300][T10333] chnl_net:caif_netlink_parms(): no params data found [ 329.087216][T10341] loop9: detected capacity change from 0 to 40427 [ 329.124186][T10341] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x3ffff [ 329.159668][T10341] F2FS-fs (loop9): invalid crc value [ 329.203759][T10341] F2FS-fs (loop9): Found nat_bits in checkpoint [ 329.477384][T10333] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.484856][T10341] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 329.517469][T10333] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.542183][T10333] device bridge_slave_0 entered promiscuous mode [ 329.580231][ T7] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 329.647235][T10333] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.666627][T10333] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.679194][T10333] device bridge_slave_1 entered promiscuous mode [ 329.692785][ T9006] syz-executor: attempt to access beyond end of device [ 329.692785][ T9006] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 329.730407][T10333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.780210][ T7] usb 9-1: Using ep0 maxpacket: 16 [ 329.787554][ T7] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.818420][ T7] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.859951][ T7] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.889631][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.909884][ T7] usb 9-1: Product: syz [ 329.914684][ T7] usb 9-1: Manufacturer: syz [ 329.919393][ T7] usb 9-1: SerialNumber: syz [ 330.119059][T10333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.171257][ T7] usb 9-1: 0:2 : does not exist [ 330.199965][ T7] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 330.221514][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 330.275397][ T7] usb 9-1: USB disconnect, device number 5 [ 330.335776][ T9748] udevd[9748]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.551147][T10333] team0: Port device team_slave_0 added [ 330.582848][T10333] team0: Port device team_slave_1 added [ 330.633499][ T4328] device hsr_slave_0 left promiscuous mode [ 330.651280][ T4328] device hsr_slave_1 left promiscuous mode [ 330.680785][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.688297][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.697866][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.706354][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.721171][ T4328] device bridge_slave_1 left promiscuous mode [ 330.737717][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.773214][ T4328] device bridge_slave_0 left promiscuous mode [ 330.789965][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.897562][ T4328] device veth1_macvtap left promiscuous mode [ 330.908378][ T4328] device veth0_macvtap left promiscuous mode [ 330.938669][ T4328] device veth1_vlan left promiscuous mode [ 330.960412][ T4328] device veth0_vlan left promiscuous mode [ 332.591172][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 334.610616][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 336.690865][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 338.351238][T10397] program syz.8.1999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.153938][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 345.964452][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 346.493544][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.551991][ T4328] device bond_slave_1 left promiscuous mode [ 347.156947][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.236498][ T4328] device bond_slave_0 left promiscuous mode [ 351.677029][T10421] input: syz0 as /devices/virtual/input/input29 [ 353.572768][ T4328] bond0 (unregistering): Released all slaves [ 355.745344][T10333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.811523][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.950588][T10333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.991750][ T94] block nbd0: Possible stuck request ffff8880249d0000: control (read@0,4096B). Runtime 30 seconds [ 356.219886][T10333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.290462][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.430375][T10333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.069566][T10333] device hsr_slave_0 entered promiscuous mode [ 358.475370][T10333] device hsr_slave_1 entered promiscuous mode [ 358.573239][T10333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.590353][T10333] Cannot create hsr debugfs directory [ 363.006343][T10442] program syz.9.2017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.623306][T10333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 372.768450][T10333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.045477][T10333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.217101][T10333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 375.931113][T10333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.273984][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.313708][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.499617][T10333] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.702664][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.773584][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.860564][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.868052][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.996258][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.157253][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.192733][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.277422][ T9239] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.285232][ T9239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.476321][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 377.675168][T10390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 377.831603][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 377.920393][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.964006][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 378.151803][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 378.268395][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.395221][T10390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.444659][T10390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.662694][T10390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.701952][T10390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.914246][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.020458][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.033909][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.614509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 379.629517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 380.265146][T10333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.038635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 381.152631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.717002][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.774390][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.901537][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 382.033599][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 382.074592][T10333] device veth0_vlan entered promiscuous mode [ 382.430009][T10333] device veth1_vlan entered promiscuous mode [ 383.538420][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 383.666463][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.858374][T10333] device veth0_macvtap entered promiscuous mode [ 384.113102][T10333] device veth1_macvtap entered promiscuous mode [ 384.626983][T10392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 384.785530][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.873121][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.921272][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.000460][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.054036][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.120484][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.163783][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.265329][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.349693][T10333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.414210][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 385.454447][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.556247][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.628072][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.696532][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.768196][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.832921][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.898334][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.950794][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.010800][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.093925][ T94] block nbd0: Possible stuck request ffff8880249d0000: control (read@0,4096B). Runtime 60 seconds [ 386.193056][T10333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.210901][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 386.271106][T10390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.357690][T10390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.487625][T10333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.561723][T10333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.600373][T10333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.650730][T10333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.779020][ T3638] udevd[3638]: worker [4362] /devices/virtual/block/nbd0 is taking a long time [ 389.299310][ T9239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.360253][ T9239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.525881][T10493] kAFS: Invalid Command on /proc/fs/afs/cells file [ 389.656672][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 390.631415][T10392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.639455][T10392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.781470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 403.966137][T10529] batman_adv: batadv0: Adding interface: macsec1 [ 404.065130][T10529] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 404.190710][T10529] batman_adv: batadv0: Interface activated: macsec1 [ 407.390032][ T9239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.761492][ T9239] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.354527][ T9239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.596973][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 410.616120][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 410.676920][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 410.712898][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 410.734881][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 410.745592][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.778754][ T9239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.933000][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 413.470650][ T5277] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 413.732646][ T5277] usb 10-1: Using ep0 maxpacket: 8 [ 413.823877][ T5277] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 413.887426][ T5277] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.940727][ T5277] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.009061][ T5277] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.091711][ T5277] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.170802][ T5277] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 414.234786][ T5277] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.025341][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 415.507629][ T5277] usb 10-1: GET_CAPABILITIES returned 0 [ 415.520404][ T5277] usbtmc 10-1:16.0: can't read capabilities [ 415.842144][ T5277] usb 10-1: USB disconnect, device number 5 [ 416.294541][ T94] block nbd0: Possible stuck request ffff8880249d0000: control (read@0,4096B). Runtime 90 seconds [ 417.091403][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 419.181172][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 419.725261][T10553] loop3: detected capacity change from 0 to 256 [ 419.936479][T10540] chnl_net:caif_netlink_parms(): no params data found [ 420.675776][T10557] overlayfs: filesystem on './file0' not supported [ 426.199122][T10568] loop1: detected capacity change from 0 to 1024 [ 427.187343][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 427.560883][T10540] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.568835][T10540] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.759834][T10540] device bridge_slave_0 entered promiscuous mode [ 427.924649][T10540] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.987414][T10540] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.085723][T10540] device bridge_slave_1 entered promiscuous mode [ 429.889374][T10540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.149979][ T9239] device hsr_slave_0 left promiscuous mode [ 430.293299][ T9239] device hsr_slave_1 left promiscuous mode [ 430.350668][ T9239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.358362][ T9239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.465776][ T9239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.499696][ T9239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.629244][ T9239] device bridge_slave_1 left promiscuous mode [ 430.661946][ T9239] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.762760][ T9239] device bridge_slave_0 left promiscuous mode [ 430.769646][ T9239] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.757919][ T9239] device veth1_macvtap left promiscuous mode [ 431.788906][ T9239] device veth0_macvtap left promiscuous mode [ 431.823356][ T9239] device veth1_vlan left promiscuous mode [ 431.867749][ T9239] device veth0_vlan left promiscuous mode [ 432.927455][T10583] i2c i2c-0: delete_device: Extra parameters [ 440.144554][ T9239] team0 (unregistering): Port device team_slave_1 removed [ 440.469763][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.485538][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.650673][ T9239] team0 (unregistering): Port device team_slave_0 removed [ 441.073937][ T9239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.924749][ T9239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.610631][ T6762] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 443.850464][ T6762] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 443.885996][ T6762] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 443.900938][ T6762] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 443.935958][ T6762] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 443.969318][ T6762] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.064670][T10596] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 444.091276][T10596] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 444.154389][ T6762] pl2303 9-1:1.0: pl2303 converter detected [ 444.191561][ T6762] usb 9-1: pl2303 converter now attached to ttyUSB0 [ 444.274440][T10599] loop3: detected capacity change from 0 to 1024 [ 444.609225][T10599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 444.619891][T10599] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.271187][T10596] pl2303 9-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 445.328892][T10596] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 445.347540][T10598] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.2069: lblock 0 mapped to illegal pblock 0 (length 1) [ 445.407951][T10596] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 445.451865][T10598] EXT4-fs (loop3): Remounting filesystem read-only [ 445.454186][T10596] pl2303 9-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 445.505895][T10599] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.2069: lblock 0 mapped to illegal pblock 0 (length 1) [ 445.580402][T10602] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 445.600807][T10596] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 445.704483][T10599] EXT4-fs (loop3): Remounting filesystem read-only [ 445.712868][T10602] EXT4-fs (loop3): Remounting filesystem read-only [ 445.760346][T10599] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.2069: lblock 0 mapped to illegal pblock 0 (length 1) [ 445.895620][T10599] EXT4-fs (loop3): Remounting filesystem read-only [ 446.020895][T10596] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 446.195601][T10596] pl2303 ttyUSB0: error sending break = -32 [ 446.265481][ T9239] bond0 (unregistering): Released all slaves [ 446.905566][ T94] block nbd0: Possible stuck request ffff8880249d0000: control (read@0,4096B). Runtime 120 seconds [ 447.986699][T10540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.545091][ T7] usb 9-1: USB disconnect, device number 6 [ 448.751517][ T7] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 448.831819][ T7] pl2303 9-1:1.0: device disconnected [ 449.005205][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 449.132387][T10582] tap0: tun_chr_ioctl cmd 2147767517 [ 451.359650][T10540] team0: Port device team_slave_0 added [ 451.592314][T10540] team0: Port device team_slave_1 added [ 452.974162][T10540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.030823][T10540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.280205][T10540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.683857][T10540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.724818][T10540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.962224][T10540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.932140][T10617] loop3: detected capacity change from 0 to 256 [ 467.109658][T10617] FAT-fs (loop3): Directory bread(block 1285) failed [ 467.232581][T10617] FAT-fs (loop3): Directory bread(block 1286) failed [ 467.239613][T10617] FAT-fs (loop3): Directory bread(block 1287) failed [ 467.361900][T10617] FAT-fs (loop3): Directory bread(block 1288) failed [ 467.669035][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.031935][T10617] FAT-fs (loop3): Directory bread(block 1285) failed [ 468.039711][T10617] FAT-fs (loop3): Directory bread(block 1286) failed [ 468.165999][T10617] FAT-fs (loop3): Directory bread(block 1287) failed [ 468.245962][T10617] FAT-fs (loop3): Directory bread(block 1288) failed [ 468.392440][T10617] FAT-fs (loop3): Directory bread(block 1285) failed [ 468.399499][T10617] FAT-fs (loop3): Directory bread(block 1286) failed [ 469.077125][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 469.098375][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 469.132592][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 469.174369][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 469.194798][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 469.208304][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.267092][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 470.281807][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 470.295621][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 470.320011][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 470.346660][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 470.356295][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 471.411528][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 471.463086][ T26] audit: type=1326 audit(1791205980.737:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.8.2078" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45f9e199 code=0x7ffc0000 [ 471.590529][ T26] audit: type=1326 audit(1791205980.767:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.8.2078" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45f9e199 code=0x7ffc0000 [ 471.720293][ T26] audit: type=1326 audit(1791205980.797:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.8.2078" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2e45f9e199 code=0x7ffc0000 [ 471.840475][ T26] audit: type=1326 audit(1791205980.797:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.8.2078" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45f9e199 code=0x7ffc0000 [ 471.950414][ T26] audit: type=1326 audit(1791205980.797:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.8.2078" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45f9e199 code=0x7ffc0000 [ 472.060298][ T26] audit: type=1326 audit(1791205980.827:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.8.2078" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f2e45f9e199 code=0x7ffc0000 [ 472.184751][ T26] audit: type=1326 audit(1791205980.827:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.8.2078" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45f9e199 code=0x7ffc0000 [ 472.321389][ T26] audit: type=1326 audit(1791205980.827:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.8.2078" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45f9e199 code=0x7ffc0000 [ 472.451722][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 473.493696][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 473.714926][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.023953][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 474.039911][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 474.069779][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 474.150713][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 474.231976][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 474.249336][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 474.540949][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 474.910700][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.580001][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 476.272614][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.372025][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 476.610782][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 476.932259][ T94] block nbd0: Possible stuck request ffff8880249d0000: control (read@0,4096B). Runtime 150 seconds [ 477.097584][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.660800][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 478.460196][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 478.700852][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 480.408362][T10618] chnl_net:caif_netlink_parms(): no params data found [ 480.535263][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 480.901937][T10620] chnl_net:caif_netlink_parms(): no params data found [ 482.610896][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 485.092697][T10650] netlink: 'syz.3.2085': attribute type 3 has an invalid length. [ 485.621963][T10618] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.629952][T10618] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.687408][T10618] device bridge_slave_0 entered promiscuous mode [ 485.747223][T10620] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.781073][T10620] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.808867][T10620] device bridge_slave_0 entered promiscuous mode [ 486.373426][T10618] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.400587][T10618] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.496963][T10618] device bridge_slave_1 entered promiscuous mode [ 486.801895][T10620] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.809370][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.921988][T10620] device bridge_slave_1 entered promiscuous mode [ 487.537405][T10618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.439220][T10618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.304893][T10627] chnl_net:caif_netlink_parms(): no params data found [ 489.474723][T10620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.636419][T10620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.086417][T10618] team0: Port device team_slave_0 added [ 492.138656][T10665] loop8: detected capacity change from 0 to 512 [ 492.333218][T10618] team0: Port device team_slave_1 added [ 492.375938][T10665] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 492.520427][T10665] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 492.602306][T10665] EXT4-fs (loop8): orphan cleanup on readonly fs [ 492.628769][T10665] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #13: comm syz.8.2089: iget: bad i_size value: 12154761577498 [ 492.721388][T10665] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.2089: couldn't read orphan inode 13 (err -117) [ 492.788429][T10620] team0: Port device team_slave_0 added [ 492.819173][T10665] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 493.928559][T10620] team0: Port device team_slave_1 added [ 495.126570][ T6945] EXT4-fs (loop8): unmounting filesystem. [ 496.514870][T10618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.550476][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.711064][T10618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.623783][ T57] batman_adv: batadv0: Interface deactivated: macvlan2 [ 497.829249][ T57] batman_adv: batadv0: Removing interface: macvlan2 [ 498.154311][T10618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.183250][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.310339][T10618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.987939][T10620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.017192][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.125808][T10620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.507701][T10627] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.544819][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.608662][T10627] device bridge_slave_0 entered promiscuous mode [ 499.675696][T10620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.705827][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.810771][T10620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.958068][T10627] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.984083][T10627] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.088056][T10627] device bridge_slave_1 entered promiscuous mode [ 500.461266][ T57] device hsr_slave_0 left promiscuous mode [ 500.525930][ T57] device hsr_slave_1 left promiscuous mode [ 500.587451][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.620486][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.731278][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.739228][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.843338][ T57] device bridge_slave_1 left promiscuous mode [ 500.861739][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.928797][ T57] device bridge_slave_0 left promiscuous mode [ 500.961456][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.180550][ T127] kernel write not supported for file bpf-prog (pid: 127 comm: kworker/1:2) [ 501.336932][ T57] device veth1_macvtap left promiscuous mode [ 501.371358][ T57] device veth0_macvtap left promiscuous mode [ 501.378683][ T57] device veth1_vlan left promiscuous mode [ 501.441676][ T57] device veth0_vlan left promiscuous mode [ 501.899875][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.926467][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.096768][ T94] block nbd0: Possible stuck request ffff8880249d0000: control (read@0,4096B). Runtime 180 seconds [ 508.528989][ T3638] udevd[3638]: worker [4362] /devices/virtual/block/nbd0 timeout; kill it [ 508.552268][ T3638] udevd[3638]: seq 15166 '/devices/virtual/block/nbd0' killed [ 512.194616][ T57] team0 (unregistering): Port device team_slave_1 removed [ 512.938691][ T57] team0 (unregistering): Port device team_slave_0 removed [ 513.528218][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.493734][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.578467][T10708] loop3: detected capacity change from 0 to 1024 [ 522.708581][ T57] bond0 (unregistering): Released all slaves [ 525.484485][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 525.520888][T10712] netlink: 'syz.8.2098': attribute type 12 has an invalid length. [ 525.529013][T10712] netlink: 'syz.8.2098': attribute type 29 has an invalid length. [ 525.561845][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 525.589252][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 525.608401][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 525.630370][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 525.640304][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 525.760331][T10712] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2098'. [ 527.891026][ T4275] Bluetooth: hci5: command 0x0409 tx timeout [ 529.971078][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 530.054974][ T4282] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 530.074585][ T4282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 530.097742][ T4282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 530.155231][ T4282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 530.191250][ T4282] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 530.204410][ T4282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 532.050957][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 532.301083][ T4282] Bluetooth: hci6: command 0x0409 tx timeout [ 533.665116][T10715] chnl_net:caif_netlink_parms(): no params data found [ 534.130335][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 534.372266][ T4282] Bluetooth: hci6: command 0x041b tx timeout [ 536.455393][ T4282] Bluetooth: hci6: command 0x040f tx timeout [ 537.700992][ T4275] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 537.749878][ T4275] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 537.771435][ T4275] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 537.813260][ T4275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 537.838912][ T4275] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 537.872801][ T4275] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 537.954164][ T94] block nbd0: Possible stuck request ffff8880249d0000: control (read@0,4096B). Runtime 210 seconds [ 538.531964][ T4275] Bluetooth: hci6: command 0x0419 tx timeout [ 539.970478][ T4275] Bluetooth: hci7: command 0x0409 tx timeout [ 542.032014][T10715] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.039668][T10715] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.053352][ T4275] Bluetooth: hci7: command 0x041b tx timeout [ 542.079640][T10715] device bridge_slave_0 entered promiscuous mode [ 542.756127][T10715] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.771135][T10715] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.808812][T10715] device bridge_slave_1 entered promiscuous mode [ 544.140413][ T4275] Bluetooth: hci7: command 0x040f tx timeout [ 544.575738][T10715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.054105][T10715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.668862][T10721] chnl_net:caif_netlink_parms(): no params data found [ 546.220701][ T4275] Bluetooth: hci7: command 0x0419 tx timeout [ 546.343644][T10715] team0: Port device team_slave_0 added [ 546.716949][T10715] team0: Port device team_slave_1 added [ 547.118704][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.161922][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.205766][ T57] device bridge_slave_1 left promiscuous mode [ 547.252651][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.364212][ T57] device bridge_slave_0 left promiscuous mode [ 547.399669][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.533240][ T57] team0 (unregistering): Port device team_slave_1 removed [ 548.844674][ T57] team0 (unregistering): Port device team_slave_0 removed [ 549.345187][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.643973][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.960749][ T57] bond0 (unregistering): Released all slaves [ 552.394854][T10715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.420567][T10715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.550867][T10715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.168940][T10715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.221262][T10715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.350151][T10715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.272414][T10721] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.311428][T10721] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.382768][T10721] device bridge_slave_0 entered promiscuous mode [ 554.608605][T10721] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.620463][T10721] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.692395][T10721] device bridge_slave_1 entered promiscuous mode [ 555.817678][T10732] chnl_net:caif_netlink_parms(): no params data found [ 556.275745][T10721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.605795][T10715] device hsr_slave_0 entered promiscuous mode [ 556.696224][T10715] device hsr_slave_1 entered promiscuous mode [ 556.750969][T10715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 556.758759][T10715] Cannot create hsr debugfs directory [ 556.829396][T10721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.517471][T10721] team0: Port device team_slave_0 added [ 559.164397][T10721] team0: Port device team_slave_1 added [ 560.853600][T10721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.900954][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.987232][T10721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.135700][T10732] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.148803][T10732] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.213861][T10732] device bridge_slave_0 entered promiscuous mode [ 561.411334][T10721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.418595][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.594095][T10721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.737317][T10732] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.782873][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.882652][T10732] device bridge_slave_1 entered promiscuous mode [ 563.340530][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.350506][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.544069][T10732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.680163][T10732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.186916][T10796] loop8: detected capacity change from 0 to 1024 [ 565.317595][T10796] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 565.843833][T10732] team0: Port device team_slave_0 added [ 566.558400][T10721] device hsr_slave_0 entered promiscuous mode [ 566.671931][T10721] device hsr_slave_1 entered promiscuous mode [ 566.736914][T10721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.760856][T10721] Cannot create hsr debugfs directory [ 566.803649][T10732] team0: Port device team_slave_1 added [ 568.794668][ T94] block nbd0: Possible stuck request ffff8880249d0000: control (read@0,4096B). Runtime 240 seconds [ 569.513247][T10804] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 569.744993][T10732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.760170][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.890750][T10732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.295350][T10732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.342105][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.543507][T10732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.863175][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.994329][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.122583][ T57] device bridge_slave_1 left promiscuous mode [ 583.129568][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.304313][ T57] device bridge_slave_0 left promiscuous mode [ 583.346690][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.495359][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.674928][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.749259][ T57] device bridge_slave_1 left promiscuous mode [ 583.811823][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.974704][ T57] device bridge_slave_0 left promiscuous mode [ 584.015931][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.125824][ T57] device bridge_slave_1 left promiscuous mode [ 584.208752][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.285299][ T57] device bridge_slave_0 left promiscuous mode [ 584.356126][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.249161][ T57] team0 (unregistering): Port device team_slave_1 removed [ 586.962635][ T57] team0 (unregistering): Port device team_slave_0 removed [ 587.485197][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 587.544996][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 587.581097][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.653920][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 587.703904][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 587.736625][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 587.749393][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 588.335167][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.810430][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 590.864376][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 590.879333][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 590.898456][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 590.916838][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 590.936231][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 590.949126][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 591.478628][ T57] bond0 (unregistering): Released all slaves [ 591.891379][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 592.926915][ T57] team0 (unregistering): Port device team_slave_1 removed [ 593.010927][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 593.471205][ T57] team0 (unregistering): Port device team_slave_0 removed [ 593.889010][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.970355][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 594.367769][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.091145][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 596.050821][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 596.314802][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 596.332596][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 596.344409][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 596.369847][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 596.383180][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 596.407123][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 596.774615][ T57] bond0 (unregistering): Released all slaves [ 597.170553][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 598.541128][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 598.651478][ T57] bond0 (unregistering): Released all slaves [ 599.202011][ T94] block nbd0: Possible stuck request ffff8880249d0000: control (read@0,4096B). Runtime 270 seconds [ 599.260784][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 600.620751][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 602.690759][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 604.770461][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 604.852278][T10856] device batadv_slave_0 entered promiscuous mode [ 604.945746][T10856] batman_adv: batadv0: Adding interface: macvtap1 [ 605.010668][T10856] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 605.140684][T10856] batman_adv: batadv0: Interface activated: macvtap1 [ 607.333639][T10834] chnl_net:caif_netlink_parms(): no params data found [ 610.774110][T10847] chnl_net:caif_netlink_parms(): no params data found [ 611.012017][T10840] chnl_net:caif_netlink_parms(): no params data found [ 611.624160][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 611.638477][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 611.666219][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 611.696532][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 611.726742][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 611.741100][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 613.810409][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 613.949047][T10834] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.021889][T10834] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.054938][T10834] device bridge_slave_0 entered promiscuous mode [ 614.560621][T10834] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.568074][T10834] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.667559][T10834] device bridge_slave_1 entered promiscuous mode [ 615.890804][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 616.059347][T10834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.611241][T10834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.402092][T10834] team0: Port device team_slave_0 added [ 617.624507][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.650790][T10840] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.706183][T10840] device bridge_slave_0 entered promiscuous mode [ 617.838170][T10834] team0: Port device team_slave_1 added [ 617.857951][T10847] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.870764][T10847] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.951816][T10847] device bridge_slave_0 entered promiscuous mode [ 617.971196][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 618.064916][T10840] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.094618][T10840] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.162768][T10840] device bridge_slave_1 entered promiscuous mode [ 618.509827][T10847] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.547750][T10847] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.607697][T10847] device bridge_slave_1 entered promiscuous mode [ 619.679898][T10834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.720156][T10834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.820199][T10834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.050922][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 620.157265][T10840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.336126][T10834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.361335][T10834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.444453][T10834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.608760][T10847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.754987][T10840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.066996][T10847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.441120][T10840] team0: Port device team_slave_0 added [ 623.937666][T10847] team0: Port device team_slave_0 added [ 623.995062][T10840] team0: Port device team_slave_1 added [ 624.778324][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.787961][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.804319][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.866405][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.072857][T10834] device hsr_slave_0 entered promiscuous mode [ 625.127817][T10834] device hsr_slave_1 entered promiscuous mode [ 625.182677][T10834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.220598][T10834] Cannot create hsr debugfs directory [ 625.281270][T10847] team0: Port device team_slave_1 added [ 626.061555][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.101400][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.171488][T10840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.178753][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.344950][T10840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.993079][T10840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.043757][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.119102][T10840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.337303][T10847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.397880][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.500928][T10847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.212516][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.250262][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.365873][T10847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.401226][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.531755][T10847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.262157][ T94] block nbd0: Possible stuck request ffff8880249d0000: control (read@0,4096B). Runtime 300 seconds [ 629.832278][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.851946][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.946988][T10840] device hsr_slave_0 entered promiscuous mode [ 631.051934][T10840] device hsr_slave_1 entered promiscuous mode [ 631.115936][T10840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.154250][T10840] Cannot create hsr debugfs directory [ 631.610540][T10870] chnl_net:caif_netlink_parms(): no params data found [ 631.866316][T10847] device hsr_slave_0 entered promiscuous mode [ 632.007261][T10847] device hsr_slave_1 entered promiscuous mode [ 632.059348][T10847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.125233][T10847] Cannot create hsr debugfs directory [ 634.531337][T10906] loop8: detected capacity change from 0 to 1764 [ 637.817116][T10870] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.840914][T10870] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.955624][T10870] device bridge_slave_0 entered promiscuous mode [ 638.266294][T10870] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.293062][T10870] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.408676][T10870] device bridge_slave_1 entered promiscuous mode [ 640.057904][T10870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.497981][T10870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.923573][T10870] team0: Port device team_slave_0 added [ 643.297662][T10870] team0: Port device team_slave_1 added [ 647.915405][T10870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.944843][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.170694][T10870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.132270][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 649.149158][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 649.163671][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 649.180078][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 649.203588][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 649.215908][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 650.217805][T10870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.240487][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.360432][T10870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.256761][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 653.334041][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 653.572207][ T28] INFO: task udevd:4362 blocked for more than 143 seconds. [ 653.604823][ T28] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 653.650295][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 653.688086][ T28] task:udevd state:D stack:24016 pid:4362 ppid:3638 flags:0x00004006 [ 653.752767][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 653.774641][ T28] Call Trace: [ 653.778216][ T28] [ 653.785175][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 653.803977][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 653.822310][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 653.851310][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 653.872264][ T28] __schedule+0x107f/0x4030 [ 653.872430][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 653.878488][ T28] ? release_firmware_map_entry+0x187/0x187 [ 654.150368][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 654.156727][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 654.211059][ T28] ? lock_chain_count+0x20/0x20 [ 654.216135][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 654.268694][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 654.310248][ T28] schedule+0xb9/0x180 [ 654.314659][ T28] io_schedule+0x7c/0xd0 [ 654.319325][ T28] folio_wait_bit_common+0x877/0xfa0 [ 654.380670][ T28] ? folio_wait_bit+0x30/0x30 [ 654.385787][ T28] ? migration_entry_wait_on_locked+0xe80/0xe80 [ 654.440411][ T28] ? blkdev_writepage+0x30/0x30 [ 654.445977][ T28] ? filemap_add_folio+0x186/0x3d0 [ 654.490412][ T28] do_read_cache_folio+0x1a7/0x790 [ 654.495840][ T28] ? blkdev_writepage+0x30/0x30 [ 654.540893][ T28] read_part_sector+0xce/0x360 [ 654.546143][ T28] adfspart_check_POWERTEC+0xc0/0x890 [ 654.590891][ T28] ? adfspart_check_ADFS+0x570/0x570 [ 654.596419][ T28] ? snprintf+0xe5/0x140 [ 654.640510][ T28] ? adfspart_check_ICS+0xa40/0xa40 [ 654.646344][ T28] ? vscnprintf+0x80/0x80 [ 654.690373][ T28] ? alloc_pages+0x4dd/0x740 [ 654.695616][ T28] bdev_disk_changed+0x7f9/0x1450 [ 654.750129][ T28] ? rcu_is_watching+0x11/0xa0 [ 654.756048][ T28] ? blk_drop_partitions+0x1b0/0x1b0 [ 654.810275][ T28] ? _atomic_dec_and_lock+0x8f/0x110 [ 654.815935][ T28] ? iput+0x3df/0x9c0 [ 654.850589][ T28] blkdev_get_whole+0x2e8/0x370 [ 654.855821][ T28] blkdev_get_by_dev+0x32e/0xa60 [ 654.920445][ T28] blkdev_open+0x119/0x2d0 [ 654.925217][ T28] ? blkdev_mmap+0x1a0/0x1a0 [ 654.970291][ T28] do_dentry_open+0x7dd/0x10b0 [ 654.975693][ T28] path_openat+0x2674/0x2f10 [ 655.020582][ T28] ? kasan_set_track+0x60/0x70 [ 655.025853][ T28] ? verify_lock_unused+0x140/0x140 [ 655.080671][ T28] ? do_sys_openat2+0xdd/0x4f0 [ 655.085857][ T28] ? do_filp_open+0x420/0x420 [ 655.131078][ T28] do_filp_open+0x1ee/0x420 [ 655.136066][ T28] ? vfs_tmpfile+0x470/0x470 [ 655.230771][ T28] ? _raw_spin_unlock+0x24/0x40 [ 655.235816][ T28] ? alloc_fd+0x590/0x640 [ 655.330344][ T28] do_sys_openat2+0x14b/0x4f0 [ 655.335501][ T28] ? do_sys_open+0xe0/0xe0 [ 655.406883][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 655.414196][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 655.520207][ T28] ? lock_chain_count+0x20/0x20 [ 655.525569][ T28] __x64_sys_openat+0x135/0x160 [ 655.591221][ T28] do_syscall_64+0x4c/0xa0 [ 655.595928][ T28] ? clear_bhb_loop+0x60/0xb0 [ 655.670139][ T28] ? clear_bhb_loop+0x60/0xb0 [ 655.675161][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.731013][ T28] RIP: 0033:0x7f5ea5ca7407 [ 655.735677][ T28] RSP: 002b:00007fffa1fdc270 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 655.821130][ T28] RAX: ffffffffffffffda RBX: 00007f5ea6377880 RCX: 00007f5ea5ca7407 [ 655.829350][ T28] RDX: 00000000000a0800 RSI: 00005606bb46e040 RDI: ffffffffffffff9c [ 655.920134][ T28] RBP: 00005606bb44c910 R08: 0000000000000000 R09: 0000000000000000 [ 655.928368][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00005606bb46f9d0 [ 655.970689][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 656.061784][ T28] R13: 00005606bb464410 R14: 0000000000000000 R15: 00005606bb46f9d0 [ 656.140437][ T28] [ 656.151795][ T28] [ 656.151795][ T28] Showing all locks held in the system: [ 656.159718][ T28] 1 lock held by rcu_tasks_kthre/12: [ 656.290699][ T28] #0: ffffffff8cb2e230 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 656.350668][ T28] 1 lock held by rcu_tasks_trace/13: [ 656.356234][ T28] #0: ffffffff8cb2ea50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 656.450576][ T28] 1 lock held by khungtaskd/28: [ 656.455709][ T28] #0: ffffffff8cb2d8a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 656.540266][ T28] 5 locks held by kworker/u4:4/57: [ 656.545692][ T28] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 656.675307][ T28] #1: ffffc90001587d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 656.738520][ T28] #2: ffffffff8dd49ed0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 656.823759][ T28] #3: ffffffff8dd56d68 (rtnl_mutex){+.+.}-{3:3}, at: xfrmi_exit_batch_net+0xb8/0x360 [ 656.920252][ T28] #4: ffffffff8cb33578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 657.015619][ T28] 2 locks held by kworker/1:2/127: [ 657.048023][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 657.130625][ T28] #1: ffffc90002de7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 657.211249][ T28] 2 locks held by getty/4030: [ 657.216092][ T28] #0: ffff88814d39a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 657.320608][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 657.404593][ T28] 1 lock held by sshd-session/4256: [ 657.409956][ T28] 2 locks held by kworker/1:6/4335: [ 657.485673][ T28] 1 lock held by udevd/4362: [ 657.492832][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 657.561191][ T28] #0: ffff888144b294c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x12a/0xa60 [ 657.630272][ T28] 2 locks held by dhcpcd/6311: [ 657.635378][ T28] #0: ffff88805603d010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 657.725526][ T28] #1: ffffffff8cb33578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 657.790559][ T28] 1 lock held by syz-executor/6945: [ 657.795981][ T28] 2 locks held by kworker/u4:9/10390: [ 657.859318][ T28] 3 locks held by kworker/u4:11/10392: [ 657.900778][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 657.972926][ T28] #1: ffffc90003417d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 658.010572][ T28] #2: ffffffff8dd56d68 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 658.050576][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 658.057638][ T28] 3 locks held by kworker/0:2/10788: [ 658.066606][ T28] #0: ffff88802f0b6538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 658.130206][ T28] #1: ffffc900031f7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 658.210691][ T28] #2: ffffffff8dd56d68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 658.241114][ T28] 1 lock held by syz-executor/10870: [ 658.246676][ T28] #0: ffffffff8dd56d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 658.300115][ T28] 2 locks held by syz-executor/10926: [ 658.309591][ T28] 2 locks held by syz-executor/10931: [ 658.340074][ T28] #0: ffffffff8dd49ed0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 658.376472][ T28] #1: ffffffff8dd56d68 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x240 [ 658.410136][ T28] 1 lock held by syz-executor/10938: [ 658.415683][ T28] #0: ffffffff8dd56d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 658.460519][ T28] 1 lock held by dhcpcd-run-hook/10941: [ 658.490322][ T28] [ 658.492863][ T28] ============================================= [ 658.492863][ T28] [ 658.558531][ T28] NMI backtrace for cpu 0 [ 658.563172][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 658.570492][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 658.580745][ T28] Call Trace: [ 658.584284][ T28] [ 658.587530][ T28] dump_stack_lvl+0x188/0x24e [ 658.592368][ T28] ? irq_work_queue+0xb8/0x140 [ 658.597458][ T28] ? show_regs_print_info+0x12/0x12 [ 658.603004][ T28] ? load_image+0x410/0x410 [ 658.607778][ T28] ? vprintk_emit+0x59f/0x6a0 [ 658.612704][ T28] ? printk_sprint+0x460/0x460 [ 658.617986][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 658.623234][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 658.629595][ T28] ? _printk+0xda/0x130 [ 658.634198][ T28] ? load_image+0x410/0x410 [ 658.639008][ T28] ? load_image+0x410/0x410 [ 658.643790][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 658.650177][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 658.656603][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 658.662856][ T28] watchdog+0xf0e/0xf50 [ 658.667563][ T28] ? watchdog+0x1ed/0xf50 [ 658.672197][ T28] kthread+0x29d/0x330 [ 658.676481][ T28] ? hungtask_pm_notify+0x40/0x40 [ 658.681810][ T28] ? kthread_blkcg+0xd0/0xd0 [ 658.686638][ T28] ret_from_fork+0x1f/0x30 [ 658.691718][ T28] [ 658.695175][ T28] Sending NMI from CPU 0 to CPUs 1: [ 658.700909][ C1] NMI backtrace for cpu 1 [ 658.700918][ C1] CPU: 1 PID: 10391 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 658.700935][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 658.700946][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 658.701057][ C1] RIP: 0010:kasan_check_range+0x1b0/0x290 [ 658.701086][ C1] Code: f3 4d 01 f3 49 89 df 49 8d 5f 07 4d 85 ff 49 0f 49 df 48 83 e3 f8 49 29 df 74 0e 41 80 3b 00 75 69 49 ff c3 49 ff cf 75 f2 5b <41> 5c 41 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff [ 658.701100][ C1] RSP: 0018:ffffc9000c9274f8 EFLAGS: 00000256 [ 658.701114][ C1] RAX: dffffc0000000001 RBX: 000000995e03b401 RCX: ffffffff81854a30 [ 658.701127][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8880176e8138 [ 658.701138][ C1] RBP: 00000000000009a8 R08: ffff8880176e813f R09: 1ffff11002edd027 [ 658.701150][ C1] R10: dffffc0000000000 R11: ffffed1002edd028 R12: dffffc0000000001 [ 658.701163][ C1] R13: 00000000000009d4 R14: 1ffff11002edd027 R15: 0000000000000001 [ 658.701174][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 658.701188][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.701200][ C1] CR2: 000056278e111660 CR3: 000000002e6db000 CR4: 00000000003506e0 [ 658.701214][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 658.701224][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 658.701234][ C1] Call Trace: [ 658.701239][ C1] [ 658.701259][ C1] __rb_reserve_next+0x410/0xd00 [ 658.701365][ C1] ring_buffer_lock_reserve+0xafa/0xf10 [ 658.701474][ C1] trace_event_buffer_lock_reserve+0x1ce/0x6f0 [ 658.701557][ C1] trace_event_buffer_reserve+0x2a8/0x3d0 [ 658.701586][ C1] ? trace_event_ignore_this_pid+0x130/0x130 [ 658.701638][ C1] trace_event_raw_event_lock_acquire+0x124/0x290 [ 658.701673][ C1] ? __traceiter_contention_end+0xa0/0xa0 [ 658.701752][ C1] lock_acquire+0x452/0x4a0 [ 658.701776][ C1] ? batadv_iv_ogm_schedule+0x437/0x1080 [ 658.701825][ C1] ? read_lock_is_recursive+0x10/0x10 [ 658.701855][ C1] ? batadv_iv_ogm_queue_add+0xdb0/0xdb0 [ 658.701905][ C1] batadv_iv_ogm_schedule+0x458/0x1080 [ 658.701922][ C1] ? batadv_iv_ogm_schedule+0x437/0x1080 [ 658.701962][ C1] ? batadv_iv_ogm_schedule+0x437/0x1080 [ 658.702000][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 658.702058][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 658.702088][ C1] ? _raw_spin_unlock+0x40/0x40 [ 658.702128][ C1] ? process_one_work+0x7b4/0x1160 [ 658.702156][ C1] process_one_work+0x8ab/0x1160 [ 658.702225][ C1] ? worker_detach_from_pool+0x240/0x240 [ 658.702263][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 658.702292][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 658.702331][ C1] ? wq_worker_running+0x97/0x190 [ 658.702359][ C1] worker_thread+0xaf5/0x12a0 [ 658.702428][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 658.702483][ C1] kthread+0x29d/0x330 [ 658.702497][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 658.702525][ C1] ? kthread_blkcg+0xd0/0xd0 [ 658.702551][ C1] ret_from_fork+0x1f/0x30 [ 658.702620][ C1] [ 659.840189][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 659.847152][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 659.854449][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 659.864618][ T28] Call Trace: [ 659.868035][ T28] [ 659.871142][ T28] dump_stack_lvl+0x188/0x24e [ 659.876055][ T28] ? memcpy+0x3c/0x60 [ 659.880274][ T28] ? show_regs_print_info+0x12/0x12 [ 659.885603][ T28] ? load_image+0x410/0x410 [ 659.890659][ T28] panic+0x2d3/0x710 [ 659.894809][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 659.900596][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 659.905277][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 659.911178][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 659.917625][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 659.923937][ T28] watchdog+0xf4d/0xf50 [ 659.928392][ T28] ? watchdog+0x1ed/0xf50 [ 659.933204][ T28] kthread+0x29d/0x330 [ 659.937343][ T28] ? hungtask_pm_notify+0x40/0x40 [ 659.942505][ T28] ? kthread_blkcg+0xd0/0xd0 [ 659.947295][ T28] ret_from_fork+0x1f/0x30 [ 659.952439][ T28] [ 659.956170][ T28] Kernel Offset: disabled [ 659.960656][ T28] Rebooting in 86400 seconds..